Data Protection Policy

Judicor is committed to protecting personal data and maintaining responsible data handling practices across our educational platform.

1. Purpose

This policy outlines how SilicaCreative protects personal information, educational records, and platform data.

2. Scope

This policy applies to:

• Teachers
• Students
• Schools
• Administrators
• Institutional partners
• Staff with access to protected data

3. Data We Protect

This includes:

• Personal account information
• Student education records
• Exam submissions
• Grades and assessments
• Payment records
• Login and security logs

4. Security Measures

We implement:

• Encrypted HTTPS connections
• Password hashing
• Access controls
• Secure cloud infrastructure
• Payment security through Stripe
• Internal access restrictions
• Routine security reviews

5. Access Control

Only authorized personnel may access protected information where necessary for platform operation and support.

Access is limited based on role and business necessity.

6. Data Retention

We retain data only for as long as necessary to:

• Deliver Services
• Maintain academic records
• Meet legal obligations
• Resolve disputes
• Support institutional requirements

7. Incident Response

In the event of a suspected breach:

• We investigate immediately
• We contain and mitigate risk
• We notify affected parties where legally required
• We comply with Wyoming breach notification laws

8. Vendor Responsibility

Third-party providers such as Stripe and hosting providers must maintain appropriate security standards for any data they process.

9. Employee Responsibility

Anyone with system access must:

• Protect confidential data
• Follow internal security procedures
• Report suspicious activity immediately
• Avoid unauthorized disclosure

10. Continuous Improvement

We regularly review and improve our data protection measures to maintain strong platform security.