Privacy Policy

Oxalis Portal

Last updated: 3 September 2026

1. Who we are

The Oxalis Portal ("the Portal") is the school operations platform used by Oxalis Academy, Av. Marechal Carmona, 903, 2750-313 Cascais, Portugal, to run its day-to-day teaching and administration. It is operated by Oxalis Academy ("Oxalis", "we", "us" or "our").

Phone: +351 214 832 567. Email: admin@oxaliseducation.com. For privacy-related questions, contact admin@oxaliseducation.com.

2. What personal data we process through the Portal

Depending on your role (student, parent/guardian, tutor, or staff member), the Portal may hold:

  • account and contact details — name, email address, phone number, password, profile photo, and assigned role/permissions;
  • academic records — courses, coursework, submissions, grades, exam and trial exam results, attendance, and student performance data;
  • scheduling data — lesson timetables, term dates, and calendar/meeting information, including meetings booked with people outside the school;
  • safeguarding and wellbeing information — SEN notes, red-flag/concern records, and related notes recorded by staff;
  • communications — messages, notifications, and records of correspondence sent or received through the Portal;
  • admissions and enquiry data (CRM) — records relating to prospective students and follow-ups with their families;
  • documents and resources uploaded to or shared through the Portal; and
  • technical data reasonably necessary to operate and secure the Portal, such as login sessions, device/browser information, and system logs.

We apply the principle of data minimisation and collect only the information reasonably needed to run the school and the Portal.

3. How we use personal data

We use personal data processed through the Portal to: create and manage accounts; deliver and administer teaching, coursework, and assessment; monitor attendance and academic progress; schedule lessons and meetings; support safeguarding and additional learning needs; manage admissions enquiries; communicate with students, parents, and staff; operate exam and results processes; keep the Portal secure; and comply with legal and regulatory obligations.

4. Legal basis for processing

Depending on the context, our processing is based on performance of the contract between Oxalis and the student/family, our legitimate interests in running the school and the Portal securely and effectively, compliance with a legal obligation (for example safeguarding or exam-body requirements), protection of vital interests where relevant, or consent for specific optional processing. Where processing relies on consent, that consent may be withdrawn at any time.

5. Children’s data

Many Portal users are under 18. We apply additional care to children’s personal data. Where a decision or consent is required in relation to a child’s data, we will generally seek it from a parent or legal guardian unless the child is legally entitled to act for themselves and it is appropriate to rely on that.

6. Who can see your data, and who we share it with

Access inside the Portal is controlled by role-based permissions: staff, tutors, students, and parents each see only the areas of the Portal relevant to their role, and safeguarding records (SEN notes, red flags) are restricted to authorised staff.

We may also share personal data, where necessary, with: technology and hosting providers who operate the Portal on our behalf; exam boards, awarding bodies, and academic partners; payment, accounting, or professional advisers; and legal, regulatory, or safeguarding authorities where required. We do not sell personal data.

7. International transfers

Some of the technology providers who help us operate the Portal may process data outside Portugal or the European Economic Area (EEA). Where this happens, we use appropriate lawful safeguards, such as contractual protections or another transfer mechanism permitted under the GDPR.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy. Academic, enrolment, safeguarding, and financial records may be retained for longer where required for legal, regulatory, educational, or record-keeping reasons. When data is no longer needed, we delete it, anonymise it, or securely archive it, subject to any legally required retention period.

9. How we protect personal data

We use technical and organisational security measures appropriate to the risk, including access controls tied to your role, authenticated and encrypted sessions, and confidentiality obligations for staff. No system connected to the internet can be guaranteed completely secure, but we take reasonable steps to protect the Portal against loss, misuse, unauthorised access, or disclosure.

10. Your rights

Subject to applicable law, you may have the right to access, correct, or erase your personal data, restrict or object to certain processing, receive certain data in a portable format, withdraw consent where processing relies on consent, and lodge a complaint with the competent supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

Requests can be sent to admin@oxaliseducation.com. We may ask for proportionate identity verification before acting on a request.

11. Communications sent through the Portal

Notifications and messages sent through the Portal (for example about lessons, coursework, meetings, or admissions follow-ups) are operational communications connected to your use of the Portal, not marketing. Any separate marketing communications from Oxalis are governed by our general Privacy Policy and Cookies Policy on oxaliseducation.com, and you can unsubscribe from those at any time.

12. Cookies

The Portal uses a strictly necessary cookie to keep you signed in. See our Cookies Policy for details.

13. Updates to this policy

We may update this Privacy Policy from time to time. The latest version is always available on this page, with the updated date shown above.

14. Contact

Questions about this policy or how the Portal handles personal data can be sent to admin@oxaliseducation.com, or by post to Oxalis Academy, Av. Marechal Carmona, 903, 2750-313 Cascais, Portugal.