Children’s Data Protection Policy

1. Purpose

This policy explains how Fastlearners protects children’s personal data under GDPR Article 8 and NDPR 2.5.

2. Definition of a Child

A child is:

  • Under 18 years (NDPR)
  • Under 16 years (GDPR default; varies by region)

Fastlearners applies the highest protection standard across all regions.

3. Types of Data Collected

  • Name
  • Age/class
  • Address (Limited to Location)
  • Progress analytics
  • Parent/guardian contact information

4. Parental Consent

We use verifiable parental consent methods:

  • Email verification
  • SMS verification
  • School-issued codes

5. Parents/Guardians Have Rights To:

  • Access their child’s data
  • Correct inaccurate data
  • Request deletion
  • Withdraw consent anytime

6. Data Sharing

Children’s data is never shared without parental consent

7. Data Retention

  • Children’s accounts are deleted upon parent request
  • Data older than 24 months is automatically deleted

8. Security Measures

  • Strict encryption
  • Access control
  • Staff background checks
  • Regular security audits