Privacy Policy & Data Security

1. Legal Identity & Data Controller

Data Controller: GoEduHub Network Executive Office, represented by Platform Founder & CEO WILL and Board of Governance.
Contact Email: [email protected] / [email protected]
Operating Jurisdiction: United Kingdom (UK).
Regulatory Supervision: UK Information Commissioner's Office (ICO).

2. What Personal Data We Process

GoEduHub collects only the minimum necessary information required to operate educational simulation services:

• School Directory Listings: School name, educational category, custom badges, public Roblox group/game links, public Discord invite links, and description provided during voluntary listing submission.
• Account & Authentication: Discord User ID, username, discriminator, avatar, and roles exchanged securely via official Discord OAuth2 authorization for staff and educators.
• Academy Assessment Records: Scenario examination scores, completion timestamps, accreditation badge verification IDs, and credential records.
• Technical & Security Telemetry: Anonymized or pseudonymized IP addresses, browser user-agents, and session identifiers collected strictly for rate-limiting, server firewall diagnostics, and DDoS prevention.

3. Lawful Bases for Processing (UK GDPR Art. 6)

We process personal data under the following documented lawful bases:

• Contractual Necessity (Art. 6(1)(b)): To deliver requested platform services, maintain verified teacher credentials, issue exam results, and list institutional communities.
• Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent fraudulent listing submissions, audit staff activities, and protect network integrity.
• Consent (Art. 6(1)(a)): For voluntary participation in community spotlights and optional profile showcases.

4. Children & Minors (ICO Children's Code / Age-Appropriate Design)

GoEduHub is designed for Roblox educational communities. In compliance with the UK ICO Age-Appropriate Design Code:

• We implement high-privacy defaults: no private personal data, telephone numbers, or physical addresses are ever requested or published.
• Users under 13 must involve a parent, guardian, or teacher before creating accounts or submitting external links.
• All external directory links are strictly filtered and validated to authorized domain protocols (HTTPS) to prevent redirection to unmonitored services.

5. Cookies & Session Storage

GoEduHub uses only strictly essential session cookies (e.g. PHPSESSID and encrypted authentication tokens) necessary to keep your session authenticated. We do not use third-party tracking pixels, advertising cookies, or behavioral surveillance trackers.

6. Data Sharing & Third-Party Processors

We never sell, rent, or trade personal information. We utilize trusted, GDPR-compliant infrastructure processors including:

• Web & Database Hosting: ServCity UK (daserver1) & DirectAdmin enterprise clusters with SSL encryption.
• Authentication: Discord Inc. (Discord OAuth2 API).
• Roblox Platform: Roblox Corporation API integrations for community verification.

7. Your Statutory Rights (UK GDPR Articles 15–22)

Under the UK Data Protection Act 2018, you possess comprehensive rights regarding your personal data:

• Right of Access (SAR): Request a copy of the personal information held about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account, exam records, or school listings.
• Right to Object or Restrict: Object to processing carried out under legitimate interests.

To exercise any of these rights, contact us at [email protected] or open a ticket in our Discord Server. Requests are responded to within one calendar month at no cost.

8. Right to Complain to the Regulator

If you have concerns about how GoEduHub handles your personal data, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk/