Privacy policy

This page explains which personal data the school collects through its website and its application (web and mobile), why, for how long it is kept, and what your rights are.

1. Who is responsible

Everest School, N 22, Villa Yousr, California, Rue Nador, Tangier 90004, reachable at info@everest-school.com, is responsible for the processing described on this page.

2. What data is collected

Through the website: what you type into the contact form (name, e-mail, telephone, message).

Through the application: the identity and contact details of pupils, of their legal guardians and of staff; schooling (class, attendance, homework, assessments, report cards); billing (invoices, payments); the messages and posts you write; the documents and photographs you upload; technical data (the identifier of your phone for notifications, a log of the actions performed in the application).

3. Why

To run the school and school life, to communicate with families, to invoice tuition, to keep the service secure, and to meet the school’s legal obligations.

4. Legal basis

The performance of the enrolment contract and the legitimate interest of the school; your consent for push notifications and for the contact form; the school’s legal obligations (accounting). The processing complies with Law 09-08 on the protection of personal data (Morocco, CNDP) and, for people residing in the European Union, with the GDPR.

5. Who has access

The school’s staff, each according to their role and access rights. The technical providers acting on the school’s instructions: hosting of the database and of the files (Supabase), sending of e-mails (Google Workspace), delivery of notifications (Apple, Google). Data is never sold or handed to third parties for advertising.

6. How long

For the duration of the pupil’s schooling, then [retention period]. Technical logs: [retention period]. Billing data: for as long as accounting law requires.

7. Your rights

You may access your data, have it corrected or erased, object to or restrict its processing. Write to [contact e-mail]. You may also lodge a complaint with the CNDP (Morocco) or with the supervisory authority of your country of residence.

8. Cookies and audience measurement

The website sets no advertising cookie. It stores what is strictly needed to work (your language, your session). If an audience measurement tool is enabled, it is named here: [none / tool].

9. Mobile application

The application registers an identifier of your phone so that the school can send you notifications; it is tied to your account and deleted when you sign out. The camera and the photo library are used only when you choose to attach a picture.

10. Security

Data travels encrypted, access is controlled by role, actions are logged, and the database is backed up.

11. Changes

This policy may be updated; the date of the last update is shown here: 23/09/2026.