Frequently asked questions on Propello’s data protection
Q: Who controls student data?
The student’s school is the data controller. Propello processes student data only under the school’s instructions.
Q: Where is data stored?
On secure AWS servers in the EU, fully ISO 27001 certified.
Q: Can Propello sell or share data with third parties?
No. Data is never sold and is only shared with trusted providers under strict agreements.
Q: How long is data kept?
-
Inactive accounts → Deactivated after 24 months.
-
Deleted accounts → Fully anonymised within 6 months.
Q: What happens if there’s a breach?
Schools and individuals are notified within 48 hours, and the ICO within 72 hours.