EduPortal LS — Privacy Policy
Version 1.0 — Last updated 2026-08-06
MILT PTY LTD ("MILT", "we", "us") operates EduPortal LS (the "Platform"), a school management system for schools in Lesotho. This Privacy Policy explains what personal information we collect, why, how it is protected, and your rights under the Lesotho Data Protection Act, 2011 (Act No. 5 of 2012).
1. Who Is Responsible for Your Data
For Student Data, the enrolling School is the data controller and MILT acts as its data processor. For account data relating directly to Parents, School Administrators, and Teachers, MILT acts as data controller. MILT PTY LTD's registered address is Speedy Complex Room 9, Maseru, Lesotho. Contact: privacy@eduls.org.
2. What Information We Collect
| Category | Examples | Provided by |
|---|---|---|
| Account & identity | Name, role, phone, email, username, hashed password | User, at registration |
| Student academic data | Marks, exam results, grades, attendance, comments | Teachers / School staff |
| Student profile data | DOB, grade/form, class, school section | School, at enrolment |
| Parent / billing data | Child–parent relationship, subscription status, payment reference | Parent |
| Exam Paper Vault content | Uploaded papers, hashed passcodes (shown once) | Authorised School staff |
| Technical data | Login timestamps, session data, device/browser, IP | Automatically, on use |
3. Why We Process This Information
To create and administer accounts; record and publish marks, attendance, and report cards; operate the Exam Paper Vault; process subscription and fee payments; communicate about accounts or Platform changes; maintain security; and comply with legal obligations. We do not sell personal information or use Student Data for advertising.
4. Legal Basis and Consent
Consent is captured and timestamped at the point of registration or subscription and can be withdrawn at any time, though this may limit access to affected features. For Student Data, MILT relies on the School's enrolment authority and/or the Parent's explicit consent.
5. Who We Share Information With
School Administrators and assigned Teachers within a School; our hosting providers Vercel (application hosting) and Neon (database hosting); our payment processor for subscription/fee payments; and third parties where required by law. No third party may use Student Data for its own independent purposes.
6. Data Storage and Security
We use bcrypt password hashing, role-based access control, passcode-gating for sensitive Vault content (shown once, not retrievable by us), and encrypted (HTTPS) connections. We will notify affected Schools and data subjects of any breach without undue delay, as required by the Act.
7. Data Retention
We retain data only as long as necessary. On account termination, Schools have a reasonable period to export Student Data before deletion, except where retention is legally required.
8. Children's Data
We do not knowingly collect information directly from a Student without School or Parent involvement. Parents may contact us to review, correct, or request deletion of their child's data, subject to the School's own record-keeping obligations.
9. Your Rights Under the Act
Subject to the Act, you may request access, correction, deletion, or restriction of your personal information, and may withdraw consent. Requests about Student Data are generally directed to the relevant School first; requests about your own account data can go directly to MILT.
10. Cross-Border Considerations
Our infrastructure providers (Vercel, Neon) may process data outside Lesotho as part of their global hosting services, under security measures consistent with our obligations under the Act.
11. Cookies
We use essential session cookies to keep you logged in and to share sessions across EduPortal LS subdomains (e.g. exams.eduls.org). We do not currently use advertising or tracking cookies.
12. Changes to This Policy
We may update this Policy; material changes are communicated to School Administrators and, where practicable, Parents.
13. Contact Us
MILT PTY LTD, Speedy Complex Room 9, Maseru, Lesotho — privacy@eduls.org