We are committed to protecting your privacy and ensuring the security of your educational data. This policy explains how we collect, use, and safeguard your information when you use Basmotash.
Basmotash is committed to protecting educational data in accordance with FERPA, GDPR, CCPA, and other applicable privacy laws. We understand the sensitive nature of student and educational information.
Basmotash Technologies Inc. ("Basmotash," "we," "us," or "our") is a leading provider of educational technology solutions, including Learning Management Systems (LMS), Student Information Systems (SIS), and virtual learning platforms.
This Privacy Policy applies to:
Basmotash Technologies Inc. acts as the data controller for marketing and administrative data, and as a data processor for educational records handled on behalf of our institutional clients.
| Data Category | Examples | Purpose |
|---|---|---|
| Account Information | Name, email, job title, institution | Account creation and management |
| Educational Records | Student enrollment, grades, attendance | Platform functionality and reporting |
| Communication Data | Messages, comments, discussion posts | Learning collaboration and support |
| Content Uploads | Assignments, documents, media files | Educational content delivery |
| Payment Information | Billing address, payment method | Subscription and billing management |
We may receive information from:
We collect student data only as necessary to provide educational services. All student data is handled in compliance with FERPA and other applicable educational privacy laws.
We only send marketing communications to institutional contacts and prospects. Student data is never used for marketing purposes. You can opt out of marketing communications at any time.
Basmotash does not sell, rent, or trade personal information to third parties for their marketing purposes. We may share information only in the following limited circumstances:
We may disclose information when required by law or to:
We work with carefully vetted service providers who are contractually required to:
Basmotash maintains SOC 2 Type II certification, demonstrating our commitment to the highest standards of security, availability, and confidentiality.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Student Educational Records | As directed by institution (typically 3-7 years) | FERPA compliance |
| User Account Data | Duration of active account + 2 years | Contractual obligations |
| Security Logs | 2 years from creation | Security and compliance |
| Marketing Data | Until opt-out or 3 years of inactivity | Legitimate interest |
| Financial Records | 7 years from transaction | Tax and legal requirements |
When data retention periods expire, we securely delete information using industry-standard methods including:
Educational institutions have primary control over student data retention periods. We follow institutional policies and legal requirements for educational record retention.
Request a copy of the personal data we hold about you and information about how we process it.
Request correction of inaccurate or incomplete personal data we maintain about you.
Request deletion of your personal data when it's no longer necessary or when you withdraw consent.
Request limitation of processing in certain circumstances, such as while accuracy is verified.
Receive your personal data in a structured, machine-readable format for transfer to another service.
Object to processing based on legitimate interests, including marketing communications.
To exercise your privacy rights:
For student educational records, please contact your institution directly. We may need to verify requests with your educational institution before processing them in accordance with FERPA requirements.
Basmotash operates globally and may transfer personal data to countries other than where you are located. We ensure appropriate safeguards are in place for all international transfers.
Where required by local law, we maintain data within specific geographic regions. Educational institutions can specify data residency requirements in their service agreements.
Basmotash maintains current certifications including SOC 2 Type II, ISO 27001, and participates in Privacy Shield successor frameworks.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through:
Changes to this Privacy Policy become effective 30 days after posting, unless otherwise specified. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
Our privacy team is dedicated to protecting your data and answering your questions about how we handle your information.
For general privacy questions and data requests
For GDPR-related inquiries and concerns
24/7 support for urgent privacy matters
Basmotash Technologies Inc.
Privacy Department
123 Education Blvd, Suite 500
Tech City, TC 12345
United States
We respond to privacy requests within 30 days and urgent matters within 24 hours.