Partner Privacy Notice

VantageTech Apps Limited, a corporation incorporated under the Canada Business Corporations Act ("we," "us" or "our"), runs School-Core and its Partner Program. We are the controller of the personal information in partner applications and partnerships.

This notice is for people who apply to the Program, for partners, and for the people on a partner's team. Our Privacy Policy covers everything else.

From your application

• Your name, email address and phone number
• Your company's name, website, registration number and address
• Your country, and your state or province
• Your entity type, years in operation and team size
• Your target market, expected revenue, objectives, marketing approach and network of schools
• The partner type and territory you asked for

Your declarations

What you declared on anti-bribery, sanctions, safeguarding and conflicts of interest.

Your consent record

Which versions of the Partner Program Terms and this notice you were shown, when you ticked to accept them, and the IP address and browser you used at that moment.

Our checks

The results of our checks, with our notes and evidence, such as an extract from a company registry.

Your answers to our questions

What you write on your status page when we ask you a question.

If you become a partner

• Your team members' names and email addresses
• Sign-in and security records
• The record of signing your agreement: name, title, email address, time, IP address, browser and signature
• Payout details and tax ID. They are encrypted, and only the last four characters are shown.
• Tax forms
• Commissions, statements and payouts
• Your partner account's activity log

We do not use your information for advertising, and we never sell it.

• Our platform team: the School-Core staff who review applications and run the Program, including our finance team, which records payouts.
• Our sub-processors: the companies that host, store and email for us. They are listed in our Sub-processor Registry.
• Public registries and sanctions lists: our team searches public company registries and sanctions lists by hand. We search their lists; we do not send them your file.
• Authorities: where the law requires it.

A school you refer sees no more about you than you choose to share with it.

Your information is kept with the rest of School-Core's data. Our database is in Singapore. The International Data Transfers section of our Privacy Policy says where each kind of data is held and how it is protected when it crosses borders.

• An application that is rejected or withdrawn is kept for 12 months after the decision or the withdrawal, then deleted.
• A partnership's records are kept while the partnership lasts.
• When a partnership ends, its financial records (commissions, payouts, statements, tax forms and the signed agreement) are kept for 5 years, as tax and accounting law requires. Everything else is deleted or anonymized within 90 days of the end.

You have the right to:

• access the personal information we hold about you;
• correct it;
• have it deleted;
• restrict how we use it;
• object to how we use it;
• receive it in a form you can take elsewhere (portability).

Some rights have limits. For example, we must keep financial records for as long as tax and accounting law requires.

To use any of these rights, write to privacy@school-core.com. We reply within 30 days under the GDPR, or within the time the law where you live sets.

You may also complain to a supervisory authority. The Supervisory Authorities section of our Privacy Policy lists them.

• Your information is encrypted in transit and at rest.
• Payout details and tax IDs are encrypted a second time by the application itself.
• Inside School-Core, only our platform team can see applications and partner records, apart from what your own team sees in the partner portal.

Our Security Policy describes the rest.

When we change this notice, we publish the new version here, with a new version number.