Data Deletion

Your right to request deletion

OarClass provides a process for users to request deletion of personal information associated with their OarClass account or use of the OarClass Services.

This process can also be used to request deletion of information that OarClass received through an authorised third-party integration, including Meta, Facebook or WhatsApp, where applicable.

Whether particular information can be deleted immediately may depend on the nature of the information, the person making the request, the relevant school or academy, contractual requirements and applicable law.

OarClass will not require you to provide more personal information than is reasonably necessary to identify your account, verify the request and locate the relevant records.

How to request deletion

To request deletion of personal information held by OarClass, send a deletion request to:

Please use the subject line: OarClass Data Deletion Request

You may submit a request personally or, where legally permitted, through an authorised representative.

If you are requesting deletion of a school-managed account, we may need to work with the relevant school or academy before completing the request.

What to include in your request

Providing the following information can help us locate the correct account or records and process your request safely.

Do not send passwords, payment card numbers or other sensitive authentication credentials as part of a deletion request.

Identity and request verification

Before deleting personal information, OarClass may need to take reasonable steps to verify that the person making the request is the account holder, authorised user, parent or guardian, institutional representative or other person legally entitled to make the request.

Verification helps prevent unauthorised people from deleting another person's account or school records.

Depending on the circumstances, verification may involve:

• Confirming the email address associated with an account.
• Confirming account or school information.
• Requesting confirmation from the relevant school administrator.
• Confirming authority to act for a student, child or other user.
• Using another reasonable method appropriate to the sensitivity of the information.

We will not intentionally use verification information for unrelated purposes.

Meta, Facebook and WhatsApp data deletion

If you connected OarClass to a Meta service, including Facebook, Facebook Login, WhatsApp or another authorised Meta integration, you may use this page to request deletion of information OarClass received through that connection.

Depending on the integration and the permissions used, this may include information such as:

• Meta or Facebook user identifiers.
• Name or profile information received through an authorised connection.
• Email address where authorised.
• Business, Page or account identifiers.
• Information necessary to maintain an authorised integration.
• WhatsApp or messaging information where the relevant functionality is used.

How to request deletion of Meta data

Send an email to privacy@oarclass.com with the subject: OarClass Meta Data Deletion Request .

Include the email address or other account information you used with OarClass and identify the Meta service involved where possible.

Disconnecting OarClass from Meta

You may also remove or disconnect OarClass from the connected applications or integrations settings provided by the relevant Meta service.

Disconnecting an integration stops or restricts future access associated with that connection, but it may not automatically remove information that OarClass previously received and is still permitted or required to retain.

If you also want previously received OarClass data deleted, submit a deletion request through the process described on this page.

School-managed accounts and records

Some OarClass accounts and records are created or controlled by a school, academy or other educational institution.

In those circumstances, the institution may determine how certain student, teacher, parent, academic, attendance, fee or administrative information must be maintained.

If you request deletion of institution-controlled information, OarClass may:

• Refer the request to the relevant institution.
• Ask the institution to confirm its instructions.
• Delete information that OarClass controls independently while preserving records the institution is entitled or required to retain.
• Inform you if the request must be handled directly by your school or academy.

OarClass will not use the school relationship as a reason to ignore a valid privacy request. It may, however, affect which party has authority to make the deletion decision.

What information may be deleted

Depending on your account, role and the Services you used, deletion may apply to some or all of the following:

• OarClass user account information.
• Profile information.
• Contact information.
• Information received through an authorised Meta or third-party integration.
• User preferences and settings.
• Certain communications and support information.
• Records controlled directly by OarClass that are no longer required.
• Other personal information linked to the request where deletion is legally appropriate.

For school-controlled accounts, academic records or other institutional data, deletion may also depend on instructions from the relevant institution.

Information we may need to retain

A deletion request does not always require immediate deletion of every record associated with a user.

OarClass may retain limited information where reasonably necessary and permitted by applicable law for purposes such as:

• Meeting legal or regulatory obligations.
• Maintaining financial, accounting or tax records.
• Establishing, exercising or defending legal claims.
• Detecting or preventing fraud, abuse or security incidents.
• Maintaining records of privacy requests and actions taken.
• Complying with valid instructions from a school or institutional customer.
• Completing reasonable backup and disaster-recovery cycles.

Where information must be retained, OarClass will limit its use to the purpose requiring retention where reasonably appropriate.

Information that is permanently anonymised so that it can no longer reasonably identify an individual may also be retained.

What happens after you submit a request

After receiving a deletion request, OarClass will review the request and determine the information and systems to which it applies.

The process may include:

• Acknowledging the request.
• Verifying the identity or authority of the requester.
• Identifying relevant OarClass accounts and records.
• Determining whether another party, such as a school, controls any of the requested information.
• Identifying information that must legally or contractually be retained.
• Deleting, de-identifying or restricting applicable records.
• Taking reasonable steps to address applicable copies held by service providers processing information on OarClass's behalf.
• Confirming completion or explaining any part of the request that could not be completed.

We aim to handle requests without unreasonable delay. The time required may vary depending on the complexity of the request, the amount of information involved and any legal or institutional verification required.

Where applicable law specifies a response period, OarClass will seek to comply with that requirement.

Third-party services

OarClass may use third-party service providers for infrastructure, communications, authentication, payments, security, monitoring or other platform functions.

Where those providers process personal information on OarClass's behalf, we may take reasonable steps to instruct them to delete or restrict applicable information when a valid deletion request requires it.

If a third-party service processes information independently under its own account or relationship with you or your institution, you may also need to submit a request directly to that provider.

Removing information from OarClass does not necessarily delete information independently held by a school, Meta, a payment service or another third-party provider.

Students and children's information

Because OarClass is designed for educational environments, deletion requests may involve information about children or students.

A parent, guardian, school or other authorised person may submit a request where they are legally entitled to do so.

We may need to confirm the requester's authority before acting on a request relating to a child.

Certain school records may need to be maintained by the educational institution even where an OarClass user account is closed. Where that occurs, we may work with the relevant institution to determine the appropriate response.

If you believe information about a child has been submitted to OarClass without appropriate authority, please contact us promptly.

Contact OarClass about data deletion

If you want to request deletion, check the status of an existing request or ask a question about this process, contact OarClass using the details below.