Skip to content

Privacy Policy

Effective date: May 15, 2018
Last revision: 31 August, 2022

MySchool Ltd ("us", "we", or "our") operates the website (the "Service").

This Website Privacy Policy describes our practices regarding the collection, use, and disclosure of Personal Data when you use our Service and the choices you have associated with that data. For all matters related to the Service, the data controller – the company that is responsible for your privacy - is MySchool Limited, having company registration number C94463, and its registered address at 9B Midland Warehousing Parks, Triq il-Burmarrad, Naxxar NXR 6345, Malta.

We assure you that we will only use and disclose any Personal Data collected from you in accordance with the manner set out in this policy.



  • Service Service is the website operated by MySchool Ltd
  • Personal Data Personal Data means any information relating to a living individual, who is identified or is identifiable, directly or indirectly, from that data
  • Usage Data Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
  • Cookies Cookies are small pieces of data stored on your device (computer or mobile device).
  • Data Controller Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
    As set out above, the purpose of this Website Privacy Policy, we are a Data Controller of your Personal Data.
  • Data Processors Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.
    We may use the services of various Service Providers in the capacity of Data Processors in order to process your data more effectively.
  • Data Subject (or User) Data Subject is any living individual who is using our Service and is the subject of Personal Data. For the purpose of this Website Privacy Policy, you are a Data Subject.


Information collection and use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of data collected

While using our Service, we may ask you to provide us with certain Personal Data     which may include, but is not limited to :

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City, Country  
  • Cookies and Usage Data

We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you, only if you sign up to receiving the same. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.  

We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Service, to improve and customize our Service.

You can enable or disable location services when you use our Service at any time, through your device settings.

The processing your Personal Data through Cookies and similar technologies is explained in our Cookie Policy which you can access here

How and why we use your data

MySchool Ltd uses your information in a number of different ways, what we do with it then depends on the information and the purposes for which we collected it.

The table below set out this in detail, showing what we do, why we do it and the legal basis for this processing.


Category of Personal Data


Legal Basis

Name, Surname & email, phone number, your role, country, school website

To reply directly to enquires with relevant product or service information.

Art. 6(1)(b) – necessary in order to take steps at the request of the data subject prior to entering into a contract.

Name, Surname & email

To send monthly blog updates or to send a link to download a PDF guide.

Art. 6(1)(b) – necessary in order to take steps at the request of the data subject prior to entering into a contract and/or for the performance of the contract.

Name, Surname & email, country, role, school name,

To provide you with news, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Art. 6(1)(a) – processing is based on data subject’s consent.

Your name and email, address, city, state, postcode, country, name, surname, email, phone, of appointed support and DPO person,

To collect onboarding information when you become a MySchool customer.

Art. 6(1)(b) – necessary in order to take steps at the request of the data subject prior to entering into a contract.


Retention of data

MySchool Ltd will retain your Personal Data only for as long as is necessary for the purposes set out in this Website Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

MySchool Ltd will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

You many obtain more information as to the retention periods or the criteria used by us to determine the retention periods by contacting us on

Sharing your information

MySchool does not, and will not, sell any of your Personal Data to any third party. It is not our business to do so.

However, we share your data with the following categories of companies as an essential part of being able to provide our Service, as set out in this statement:

  1. Companies that are involved in the process of delivering our Service to you, such as payment service providers, and hosting providers amongst others.
  2. Professional service providers, such as advertising partners and website hosts who service us in turn to operate our business.
  3. Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud.

There may be other occasions where we might have to share disclose your date – e.g. with a court order, to comply with legal requirements and satisfy a legal request, for the proper administration of justice, to protect your vital interests, to fulfil your requests, to safeguard the integrity of the relevant websites operated by us or by such related entities or subsidiaries, or in the event of a corporate sale, merger, reorganisation, dissolution or similar event involving us and/or our subsidiaries and related entities.

When we do share data, we do so on an understanding with the other entities that the data is to be used only for the purposes for which we originally intended – again, we don’t want you to have any surprises.

We may also provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you. Anonymous information means it is anonymous.

If we ever have to share data with entities that are outside of the EEA, we will be sure to do so in a manner that complies with the requirements established by the GDPR.

Security Of data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.    

MySchool is independently audited and certified compliant with ISO IEC 27001-1:2015. This is the most globally recognised Information Security standard available. This includes security measures but not limited to: data backup, firewall protection, data encryption, risk management, strict data access policies and the use of third party services, namely Hubspot, that maintain strict data protection compliance. You can learn more about Hubspot’s data protection measure here.

While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Your data protection rights    

You enjoy several rights relating to your personal information.          

In certain circumstances, you have the following data protection rights:

  • The right to be informed about how your personal information is being used;

We need to be clear with you about how we process your personal data. We do this through this Website Privacy Policy, which we will keep as up to date as possible.

  • The right to access the personal information we hold about you;

You can access the personal data we hold on you by contacting us on

  • The right to request that we delete your information;     .

You can ask us to delete your personal data; however this is not an absolute right. In spite of a request for erasure, we may be justified to keep personal data which we need to keep, e.g. (i) to comply with a legal obligation (for instance, we are required by personal data for VAT reporting purposes); and (ii) in relation to the exercise or defence of any legal claims.

When you ask us to delete your personal data, we assume that you do not want to hear from us again. To ensure that we do not send you any special offers in the future (for example, if we purchased your details from a third party list), we will retain just enough of your personal data solely for suppression purposes.

Other than as described above, we will always comply with your request and do so promptly. We would carry out our best efforts to notify any third parties with whom we have shared your personal data about your request so that they could also comply.

  • The right of rectification ;

You have the right to have your information rectified if that information is inaccurate or incomplete. We appreciate feedback from you to ensure our records are accurate and up-to-date.

  • The right to object to certain processing based on legitimate interests;

You have the right to object to our processing of your Personal Data where we use it for our legitimate interests or where we use your personal information to carry out profiling using automated means..

  • The right of restriction;

You have the right to request that we restrict the processing of your personal information.

  • The right to data portability;

You have the right to move, copy or transfer your personal data from one organisation to another. If you do wish to transfer your personal data we would be happy to help. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format. Please note that we are not required to adopt processing systems that are compatible with another organisation, so it may be that the recipient organisation cannot automatically use the personal data we provide. When making a transfer request, it would be helpful if you can identify exactly what personal data you wish us to transfer.

  • The right to withdraw consent for consent based processing;

You also have the right to withdraw your consent at any time where MySchool Ltd relied on your consent to process your personal information.


If you want to exercise your rights, have a complaint, or just have questions, please contact us on

Please note that we may ask you to verify your identity before responding to such requests. We will carry out our best efforts to process your request within one month or, if the request is particularly complex, two months. We can provide you with a copy of your personal data in electronic format or hard copy.

Please appreciate that the rights must be exercised within some limitation – for example, if you ask us for information we can only give you what relates to you and not what relates to other persons. If we consider the frequency of your requests as being unreasonable, we may refuse to comply with your request or charge a reasonable fee.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Children's privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Links to other sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us by email at