Privacy Policy

Last updated: August 14, 2026

This Privacy Policy explains how Skolex ('Skolex', 'we', 'us', or 'our') collects, uses, discloses, and safeguards information when schools, staff, students, and parents use our website and school management platform (together, the 'Service').

1. Who this policy applies to

This policy applies to visitors of our marketing website, and to administrators, teachers, students, and parents who use the Skolex platform on behalf of a subscribing school (a "School" or "Customer"). Where a School provides us with personal data about its students, staff, or parents in order to use the Service, the School acts as the data controller for that data, and Skolex acts as a data processor or "service provider," processing it only on the School's instructions and for the purposes described in our Terms of Service and any applicable data processing agreement.

2. Information we collect

2.1 Information you or your school provide

  • Account and contact information — name, email address, phone number, job title, and school name, collected when you sign up, request a demo, or contact us.
  • School operations data — student records, attendance, grades, fee and billing records, timetables, and communications entered into the platform by a School and its staff.
  • Payment information — billing details processed by our payment providers. Skolex does not store full payment card numbers on its own servers.
  • Support communications — messages, attachments, and other information you share when you contact our support team.

2.2 Information collected automatically

  • Usage data — pages visited, features used, and actions taken within the Service.
  • Device and log data — IP address, browser type, operating system, device identifiers, and timestamps.
  • Cookies and similar technologies — used to keep you signed in, remember preferences, and understand how our website is used. See Section 8 below.

3. How we use information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Service;
  • Create and manage accounts, process signups, and respond to demo and support requests;
  • Send administrative communications, such as service updates, security alerts, and billing notices;
  • Monitor and analyze usage to improve performance, reliability, and user experience;
  • Detect, investigate, and prevent fraud, abuse, and security incidents; and
  • Comply with legal obligations and enforce our agreements.

4. Legal basis for processing (EEA/UK users)

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: performance of a contract (providing the Service you or your School signed up for), legitimate interests (such as improving and securing the Service), consent (for example, for certain cookies or marketing emails), and compliance with legal obligations.

5. How we share information

We do not sell personal data. We only share information in the following circumstances:

  • Service providers (sub-processors) — vendors that host our infrastructure, send emails, process payments, or provide analytics, bound by contractual confidentiality and data protection obligations.
  • Within a School — data entered by a School is visible to authorized staff of that School as configured by the School's administrators.
  • Legal and safety reasons — where required to comply with applicable law, regulation, legal process, or a government request, or to protect the rights, property, or safety of Skolex, our users, or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of personal data under this policy.

6. Student data and children's privacy

Skolex is designed for use by schools and is not directed at children as an independent consumer product. Student accounts and records are created and managed by Schools, which are responsible for obtaining any consents required under applicable law (such as parental consent) before submitting student data to the Service. We process student data solely to provide the Service to the School and do not use student data for behavioral advertising or sell it to third parties. Schools may contact us to review, export, or request deletion of student data at any time, subject to the terms of their agreement with us.

7. Data security

We use administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and password hashing. No method of transmission or storage is completely secure; details of our broader security practices are available on our Security page.

8. Cookies

We use essential cookies required for the Service to function (such as keeping you signed in), as well as analytics cookies that help us understand how our website is used. You can control cookies through your browser settings; disabling essential cookies may affect the availability of certain features.

9. Data retention

We retain personal data for as long as necessary to provide the Service and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing agreements. When a School's subscription ends, School and student data is retained for a limited period to allow for export or reactivation, after which it is deleted or anonymized in accordance with our data retention practices, unless a longer period is required by law.

10. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data internationally, we take steps to ensure appropriate safeguards are in place consistent with applicable data protection law.

11. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, restrict or object to certain processing, and withdraw consent where processing is based on consent. If you are a student, parent, or staff member of a School, please contact your School first, as they control the underlying records; Skolex will support Schools in fulfilling these requests. You can otherwise contact us using the details below.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate.

13. Contact us

If you have questions about this Privacy Policy or how we handle personal data, contact us at hello@skolex.online or write to us at Skolex, Lahore, Pakistan.