challenge ME2025-2026

Policy

Privacy policy scaffold

The final copy should be written by the client or counsel, but the route and the policy domains are already carved out in the rebuild.

Expected policy sections

These are the minimum operational areas the new platform will need to document.

  • School, teacher, and student data captured during registration and platform use.
  • Assessment, reporting, and integrity event storage.
  • Order, invoice, and VAT-related retention.
  • Email and in-portal communication records.