Data Deletion & Your Rights

Last updated: 22 July 2026

This page explains how to request deletion of your personal data and how to exercise your other privacy rights for the Rast Education Service operated by Duhok British International School.

Your rights

Access — request a copy of the personal data we hold about you or your child.
Correction — ask us to fix inaccurate or incomplete data.
Deletion — ask us to delete personal data (subject to the limits below).
Restriction / objection — ask us to limit or stop certain processing.
Withdraw consent — for features that rely on consent (e.g. media messaging, location).

How to request deletion

Email [email protected] with the subject "Data Deletion Request".
Tell us the account name/email and, for a student, the student's name and class so we can verify your relationship.
State whether you want the whole account deleted or specific data removed.

We will verify your identity and your relationship to the account (for example, that you are the parent/guardian of the student) before acting, to protect against unauthorised deletion. We aim to acknowledge within 7 days and to complete verified requests within 30 days.

Parents and guardians can ask, from inside the app, for their account to be closed. Open the app, go to Profile, then Request to leave (close account), and send the request. You can withdraw it at any time before the school has decided.

The request goes to the school office, which reviews it. Nothing about your account changes until the school approves the request, and you can see its status on the same screen.

When the school approves it, the account is closed: you can no longer sign in, all sessions end, and notifications stop on every device. You will be told in the app if the request is not approved.

What "closed" means here, stated plainly. The account is deactivated and marked as having left. It is not deleted, and the information held on it is not erased. This is the School's decision as the controller of these records: a school is required to keep a full and continuous record of every pupil and of who was responsible for them, and an account that vanished would break that record. The pupil's attendance, grades, fees and health information, the family's details and the guardian's own contact details are all retained.

Closing an account also does not withdraw a child from the School. To withdraw a pupil, speak to the school office.

If you want data erased rather than the account closed, use the request process above - we will tell you what can be removed and what the School is obliged to keep, and why.

Staff accounts are created by the School and are tied to employment records, so they cannot be closed from the app. Ask the school office to close a staff account.

What gets deleted

On a verified full-deletion request we delete or anonymise the personal data associated with the account, including profile details, messages you sent, uploaded attachments and push registrations.

What we may need to keep

Some information must be retained for a limited period where the law or the School's statutory duties require it — for example, certain academic records, financial/payment records, and safeguarding records. We keep only what is required, for only as long as required, and then delete or anonymise it. Deleting an account does not remove information that other users legitimately hold, or aggregated/anonymised data that no longer identifies you.

Contact

[email protected] — [email protected], +964 750 891 8131, Duhok, Iraq 42001.