Privacy Policy

Last updated: 16 July 2026

1. Who this applies to

This policy covers loryschool.online. It's written to meet Zambia's Data Protection Act, 2021, the law that governs how organisations like ours collect, use, and protect personal data. Because our learners are children in Grade 4 to Grade 7, accounts and data for a child are always created and managed by a parent or guardian, who is providing consent on the child's behalf when registering.

2. Information we collect

• From guardians: name, phone number and/or email, and login credentials.
• About children: name, date of birth, grade, their Student ID, and their activity on the Platform, lesson progress, test and past paper results, and Spelling Challenge scores.
• Automatically: basic usage data through Firebase Analytics (such as which pages are visited), which helps us understand how the Platform is used.

3. Children's data and parental consent

Under the Data Protection Act, 2021, where a data subject is a child, their rights are exercised by a parent, legal guardian, or person with parental responsibility, and we may only process a child's personal data with that guardian's consent. In practice, this means a guardian registers, consents on the child's behalf, and can view, correct, or request deletion of their child's information at any time, as described under "Your rights" below.

4. How we use this information

We use this information to create and manage accounts, deliver the right lessons and tests for a child's grade, track and show progress to their guardian, activate subscriptions once payment is confirmed, and contact guardians about their child's account, results, or important updates. We don't use children's information for advertising. Our legal basis for this is the guardian's consent at registration, and, for billing, what's necessary to provide the subscription the guardian has requested.

5. The Leaderboard

The Spelling Challenge Leaderboard is a public feature that displays a child's name and score to encourage friendly competition. If you'd prefer your child's name not appear there, contact us and we can arrange for their entry to be shown differently or removed.

6. Where information is stored

Account and learning data is stored using Firebase (a Google service) and its Firestore database and Authentication systems. These providers apply their own security and data protection standards. We don't run our own separate servers for this data.

7. Third-party tools on the Platform

• Firebase Analytics helps us understand overall Platform usage.
• Tawk.to powers the live chat widget, which may collect basic chat and visitor information if you choose to use it.
• Facebook and WhatsApp links on the site take you to those platforms directly; anything you do there is covered by their own privacy policies, not ours.

8. Who we share information with

We don't sell guardian or child information. It's only shared with the service providers above that help us run the Platform (like Firebase), or where required by law.

9. Legal disclosures and law enforcement

Zambia's Cyber Crimes Act, 2025 gives law enforcement officers the power, with a warrant or court order, to require disclosure of data connected to a criminal investigation, including from organisations like ours. Where we receive a lawful order of this kind, we may be required to disclose relevant information, and we'll comply as the law requires. We take child safety seriously and will proactively report any suspected child pornography, solicitation, or grooming on the Platform to the Zambia Police Service, as this Act requires.

10. Keeping information accurate and secure

Accounts are protected through Firebase Authentication. Guardians can update their child's details at any time through the Learning Portal. Each child logs in with their own Student ID rather than a password; if it's ever lost, shared by mistake, or you're worried it's been leaked, contact us and an admin will reset it, issuing a new Student ID and deactivating the old one immediately. While we take reasonable care to protect information, no online system can be guaranteed completely secure.

11. Your rights

Under the Data Protection Act, 2021, you have the right, as your child's guardian, to:

• Access the personal data we hold about your child;
• Rectification — ask us to correct anything inaccurate or incomplete;
• Erasure — ask us to delete your child's account and associated data;
• Object to processing you're not comfortable with;
• Restrict how we process your child's data in certain circumstances;
• Data portability — request a copy of your child's data in a commonly used electronic format; and
• Withdraw consent at any time, understanding this may mean we can no longer provide the Platform's services to your child.

Reach out through the Contact page for any of the above and we'll action it as quickly as we can. You may also lodge a complaint with Zambia's Office of the Data Protection Commissioner if you feel a concern hasn't been resolved.

12. Changes to this policy

We may update this policy as the Platform grows. We'll update the "Last updated" date above when we do, and significant changes will be flagged through the Notice Board or WhatsApp Channel.

13. Contact

Questions about privacy can be sent through our Contact page, by phone at +260 77 1180515, or via our WhatsApp Channel.