Security

Data Security

Data security is a priority at Vizi. Vizi's data is stored in the cloud, designed to ensure high performance and resilience. We partner with Amazon Web Services (AWS) - the world's leading cloud provider, to globally offer a secure, high-performance, load-balanced architecture.

In the event of a security breach (a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes) Vizi will notify all clients immediately of any such breach and work with the client and AWS to resolve the breach as quickly as possible.

Vizi uses end-to-end HTTPS and IP restrictions to ensure your data is always encrypted and only accessible to authorised users.

GDPR

The EU General Data Protection Regulation (GPDR) specifies new requirements for protecting personal data that are being enforced from May 2018 (for more info, take a look at this page).

Because we are a new company, our processes and behaviours have been vigorously designed with these regulations in mind. Data security is central to the way in which Vizi has been designed and the processes we adhere to when handling your data. Please see our section 2 of our Privacy policy for information on how Vizi complies with the GDPR.

Privacy Policy

1. Website Visitors

Like most web application providers and website operators, Vizi Education collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Vizi Education's purpose in collecting non-personally identifying information is to better understand how Vizi Education's visitors use its website and web application. From time to time, Vizi Education may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

Vizi Education also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users. Vizi Education does not disclose logged in user and commenter IP addresses.

2. Data processing agreement

2.1 Gathering of Personally-Identifying Information

Certain visitors to Vizi Education’s websites choose to interact with Vizi Education in ways that require Vizi Education to gather personally-identifying information. The amount and type of information that Vizi Education gathers depends on the nature of the interaction. For example, we ask visitors who sign up to Vizi Education to provide a username and email address. Those who engage in transactions with Vizi Education – by using the single user version or by purchasing access to the enterprise version, for example – are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, Vizi Education collects such information only insofar as is necessary or appropriate to fulfil the purpose of the visitor’s interaction with Vizi Education. Vizi Education does not disclose personally-identifying information other than as described below. Visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain web application-related activities.

2.2 Types of Personally-Identifying Information

Vizi acts as data processor for the single or enterprise user (the "User") that signs up to Vizi Education. The User is the data controller can create and store data relating to their students, parents and teachers (the "Controlled Data").

Users may have the following information processed by Vizi Education in accordance with the Terms and Conditions of using Vizi Education and the primary purpose of the Vizi Education product - to process data and present your data in an insightful manner. The table below relates to a Users data and the Controlled Data a user can create within the Vizi Application.

Personal data type	Source	Usage	User or Controlled Data
Name	Directly from user	Product	User data
Email address	Directly from user	Vizi Application/Login	User data
Phone number	Directly from user	Vizi Application	User data
Parent information	Directly from user/School MIS system	Vizi Application	Controlled Data
School staff members	Directly from user/School MIS system	Vizi Application	Controlled Data
Student information	Directly from user/School MIS system	Vizi Application	Controlled Data

Based on the usage categories ascribed above, your data will be used for the following purposes:

Vizi application - Information in this category is needed for Vizi Education software to process and present your data in an insightful manner. In addition, it is required to address or deal with any requests or enquiries. Information in this category also allows us to provide Users with key product usage information to their preferred communication method.
Login - Information in this category is used to ensure we have a unique login method for each User to improve the Vizi Application's security.

Our legal basis for processing for the Controlled Data relating to Students, Parents and Teachers:

Students - Our legal basis for processing your data is Legitimate Interest. Your Educational Institution has chosen Vizi Education as a means of tracking and gaining insight from your performance data.
Parents - Our legal basis for collecting and processing your data is your Explicit Consent which is obtained on the User completing registration of a parent account.
Teachers/Staff Members - Our legal basis for processing your data is Legitimate Interest. Vizi Education has been chosen by your educational institution and therefore is part of your job responsibilities.

Vizi Education does not collect, or process data defined as ‘special categories’ by the ICO such as: Racial; Ethnic origin; Political opinions; Religious beliefs; Philosophical beliefs; Trade union membership; Genetic data; Biometric data; Health data; Data concerning a natural person’s sex life or Sexual orientation.

2.3 Consent to use personal data

By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified. If in the future we require sensitive personal data then we will always advise you on the reasons and how the information will be used.

Where we have obtained your explicit consent it may be withdrawn at any time by either method below:

a) Deleting your account with the Vizi Application.

b) Email: Contact us

Once you have withdrawn your consent your account will be deleted and all of your personal data will be deleted and/or anonymised within 28 days of your consent being removed.

2.4 Basis for processing personal data.

We are processing your personal data based on your consent in accordance with the Terms and Conditions of using Vizi Education and this data processing agreement. You may object to this processing by contacting Vizi Education directly. We are processing your personal data for the primary purpose of the Vizi Education product - to process data and present your data in an insightful manner.

Email: Contact us

2.5 Basis for processing Controlled Data

We are processing data relating students, parents and teachers based on the User's (data controllers) instructions. As a student, parent or teacher, you may object to this processing by contacting your User. Your User will then work with Vizi Education to block any future data coming through to our system. We will then remove/anonymise all your personal data on our system within 28 days of the request being made.

We are processing your personal data based on Explicit Consent (see 2.2)- based on the terms of this agreement. You may opt out of this processing at any time by contacting us directly on:

Email: Contact us

2.6 Rights and access to Controlled Data

As stated (section 2.2), Vizi Education may process Controlled Data based on the information the User enters to perform the primary purpose of the product. If you are the subject of the Controlled Data, have the following rights: If you are a parent, student or teacher associated to a Vizi Education User at your request, Vizi Education can confirm what information we hold about you and how it is processed. Vizi Education will need to receive a request from the User that has entered your data (the data controller) to activate a subject access request and extract your data. The following information can be requested from Vizi Education regarding Controlled Data:

2.7 Rights to access

Right of access – you have the right to obtain data about yourself that has been processed by Vizi Education, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- the right to lodge a complaint with a supervisory authority
- where the personal data are not collected from the data subject, any available information as to their source
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right of rectification – you have the right to rectify inaccurate personal data concerning yourself.
Right to be forgotten – you can ask for the data Vizi Education holds about you to be erased from our records.
Right to restriction of processing – where certain conditions apply, you have a right to restrict the processing of your data by Vizi Education.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing of your data.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

As a User of Vizi, you can personally manage the data within the Vizi Application. You also have the above rights in relation to data stored by Vizi Education.

Vizi Education accepts the following forms of certified ID when information on your personal data is requested:

Passport
Driving Licence
Birth certificate

Once ID has been approved these records will not be retained.

2.8 Disclosure

Vizi Education discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organisations that (i) need to know that information in order to process it on Vizi Education’s behalf or to provide services available at Vizi Education’s websites, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organisations may be located outside of your home country; by using the Vizi Application, you consent to the transfer of such information to them. All third parties will have in place agreements consistent with GDPR requirements. When they no longer need your data to fulfil this service, they will dispose of the details in line with Vizi Educations’s procedures.

Vizi Education will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to its employees, contractors and affiliated organisations, as described above, Vizi Education discloses potentially personally-identifying and personally-identifying information only in response to a witness summons, court order or other governmental request, or when Vizi Education believes in good faith that disclosure is reasonably necessary to protect the property or rights of Vizi Education, third parties or the public at large.

The following third parties will receive your personal data for the following purpose(s) as part of the processing activities:

HubSpot - Marketing purposes.
MailGun - Automated email service.
AWS - Storage of data (compliance documentation)

If you are a registered user of the Vizi Education web application and have supplied your email address, Vizi Education may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with Vizi Education and our products. We primarily use our various website blogs to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Vizi Education takes all measures reasonably necessary to protect against the unauthorised access, use, alteration or destruction of potentially personally-identifying and personally-identifying information. If you have opted out to your data being processed, we will delete your data within 28 days of your opt out being received.

Vizi Education will process (collect, store and use) the information you provide in a manner compatible with the EU’s General Data Protection Regulation (GDPR).

2.9 Retention period

Vizi Education will process and store personal data for students, parents, teachers and school staff members for the duration of the User's subscription with Vizi Education. If you leave the educational institution during an active subscription we will delete/anonymise your personal data within 28 days of your account being deleted by your education institution. If a school continues to use Vizi Education after the original User has left a school, the subscription will be transferred to another Teacher based on discussions

2.10 Complaints

If you want to make an enquiry or complaint about how your personal data has been processed by Vizi Education (or third parties as described in section 2.7), please contact us immediately using the contact form below. We will endeavour to respond in less than 24 hours.

2.11 Usage data

When using the Vizi Application, we may collect navigational/usage data. This data is anonymised to is not considered personal data. This information can consist of information such as geographical location, browser type, referral source, length of visit, pages viewed and phone make and model. We use navigational/usage information to optimise the application and never share this data with external parties.

2.11 Breach of data

In the event of a security breach (a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes) Vizi will notify all clients immediately of any such breach and work with the client and AWS to resolve the breach as quickly as possible.

Use of web application data during an active account

Web application data includes all data submitted to the web application by a user. Vizi Education discloses potentially personally-identifying and personally-identifying information only to those of its employees. We do not disclose your personal data to third parties except as required and permitted by applicable law.

Vizi Education complies fully with the Data Protection Act 1998.

3. Aggregated Statistics

Vizi Education may collect statistics about the usage of its web application and website. For instance, Vizi Education may monitor the most popular pages on the web application. Vizi Education may display this information publicly or provide it to others. However, Vizi Education does not disclose personally-identifying information.

4. Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Vizi Education uses cookies to help Vizi Education identify and track visitors, their usage of Vizi Education website and web application, and their website access preferences. Vizi Education visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using Vizi Education’s websites, with the drawback that certain features of Vizi Education’s websites may not function properly without the aid of cookies.

5. Ads

Ads appearing on any of our websites may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers the use of cookies by Vizi Education and does not cover the use of cookies by any advertisers

6. Privacy Policy Changes

Although most changes are likely to be minor, Vizi Education may change its Privacy Policy from time to time, and in Vizi Education’s sole discretion. Vizi Education encourages visitors to frequently check this page for any changes to its Privacy Policy. If you have a Vizi education web application account, you should also check your profile page for alerts to these changes. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

Terms and Conditions

i) The following terms and conditions (“Terms”) govern all use of the Vizi.Education website (“The Website”) and the Vizi.School web application (“The Application”) and all content, services, and products available at or through the websites,. Our Services are offered subject to your acceptance without modification of all of the terms and conditions contained herein and all other operating rules and policies (including, without limitation, Vizi Education’s Privacy policy). You agree that we may automatically upgrade our Services, and these Terms will apply to any upgrades. Your agreement is with Vizi Education Ltd. (UK) (“Vizi Education” or “we”)

ii) Please read this Agreement carefully before accessing or using our Services. By accessing or using any part of our Services, you agree to become bound by the Terms of this Agreement. If you do not agree to all the Terms of this Agreement, then you may not access or use any of our Services.

iii) Use of our Services requires a Vizi.School account. You agree to provide us with complete and accurate information when you register for an account. You will be solely responsible and liable for any activity that occurs under your username. You are responsible for keeping your password secure.

Registration and account integrity

Your account. If you create an account with Vizi Education you are fully responsible for all activities that occur under the account and any other actions taken in connection with the account. You must immediately notify Vizi Education of any unauthorised uses of your account, or any other breaches of security. Vizi Education will not be liable for any acts or omissions by you, including any damages of any kind incurred as a result of such acts or omissions.
Account creation. As part of the registration process you will need to create an account, including a username & password. It is your responsibility to ensure that the information you provide is accurate, not misleading and relates to you. You cannot create an account or username & password using the names and information of another person or using words that are the trademarks or the property of another party (including ours), or vulgar, obscene or in any other way inappropriate. We reserve the right with or without notice to suspend or terminate any account in breach.
Enterprise Account. As part of the enterprise account, the account holder has the ability to add and remove users to their account. You remain the license holder for that account and all users operate under these terms and conditions. The number of users that can be created under an enterprise account is controlled by the account holder, this also determines the cost of the account. Please see the latest pricing and plans page located on our website for details.

Payment and Renewal.

General Terms. For current pricing and plans please see the pricing page located on our website.
Changes to pricing. We reserve the right to change pricing, plans and the features offered at any time and without notice to you.
Automatic Renewal. Unless you notify Vizi Education before the end of the applicable subscription period that you want to cancel the subscription, your subscription will automatically renew and you authorise us to collect the then-applicable annual or monthly subscription fee for that subscription using any credit card or other payment mechanism we have on record for you. Subscriptions can be canceled at any time in the account settings section of your user profile. For annual subscriptions, you will be given a 28 day period to cancel your membership and receive a full refund from the point of automatic renewal. See the pricing page located on our website for more detail.
Accounts upgrade. If you upgrade from a free or trial account you will be immediately charged for the necessary full account or accounts.
Annual payments. Where the Service has been paid for 12 months in advance, (where this option is offered by us) payment will be taken in full on each anniversary.
Payment methods. It is a condition of use that a valid debit or credit card is provided at all times in order for your account or accounts to remain active. Where a credit or debit card payment request is made by us and is declined by your card company or bank (for whatever reason) access to your account or accounts may be suspended immediately until such time as a valid payment has been processed and a valid credit or debit card is associated with your account or accounts.

Trial and offer periods

Free use. Any free, trial, public or beta portions of The Website or the The Application are still subject to these terms, and in respect of those free, trial, public or beta portions of the Website, you bear the entire risk of use; such portions of the Website or Services may be changed, suspended, blocked by Vizi Education at any time without notice to You.

Cancellation

Cancellation. If you wish to cancel your Account you may simply discontinue using our Services. You are responsible for backing-up, saving and downloading data you wish to retain, as you wish, prior to the termination of your account.
Payment on cancellation. If an account is cancelled during a prepaid monthly subscription payment period, the account holder will be charged for the full month in which the account is cancelled. If you cancel during a prepaid yearly subscription you will be eligible for a refund for the remainder of the year. The refund will be prorated for the remainder of the subscription from the start of the first month after cancellation. Access to the web application will cease as soon as the account is cancelled.
Data retention and deletion. Any data that is stored by Vizi Education can be retrieved by re-activating the account up to three months after cancellation. After this three month period following your account cancellation your data may be permanently deleted.

Communicating with Vizi Education

Communicating with Vizi Education. Any communication you make with us will be recorded for our records. We aim to respond to communication from account holders within one working day and to non-account holders within three working days.

Content ownership

Ownership rights. We do not claim any ownership rights to personally identifiable content generated by users, and nothing in this Agreement will be deemed to restrict any rights that you may have to use your content. Vizi Education does not monitor or screen Your content, however, we reserve the right to suspend, block or remove any user content from the Services at any time, for any reason.
Performance data. We reserve the right to anonymise and retain data created by users to improve the performance of The Application. We do not retain any personally identifiable information after an account has been terminated.

Termination

Termination. In the event of a breach of this agreement Vizi Education may terminate your access to all or any part of our Services, with or without notice, effective immediately. If your employer, school board or educational institution under which you access the Website and Application is in breach of any agreement with us, or the subscription term has expired, we may suspend or terminate this Agreement and your access to the Services. All provisions of this Agreement which by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, warranty disclaimers, indemnity and limitations of liability.

Access and backups

Access. We will endeavour to provide constant access to our services, however there may be period of downtime for updates and patches to The Application.
Backups. Vizi Education backs all data created by users. For more detail on our backup policy, refer to our IT Security Policy.

Restrictions to use

You shall not, and shall not authorise thirds parties to:

Make copies of The Website or Web Application.
modify, decompile, disassemble, translate into another computer language, create derivative works, access the source code, hack, decrypt, rename files, or otherwise reverse engineer the Website or Web Application.
distribute, sell, lease, transfer, assign, trade, rent, lease, lend or publish the Website or license, sublicense or cross-license it or any part thereof and/ or copies thereof to others
use the Web Application to upload, post or otherwise transmit any materials that are harmful, fraudulent, threatening, abusive, harassing, tortious, defamatory, vulgar, profane, pornographic, obscene, libelous, offensive, or otherwise objectionable; or that promote discrimination, bigotry, racism, hatred, harassment or harm against an individual or group; or that promote illegal or harmful activities or substances; or that have the effect of harassing or stalking any person, or otherwise offend the Terms set by Vizi Education.
upload, post or otherwise transmit any content through the Services that (i) would negatively affect the functioning of the system, including without limitation any harmful, disruptive or destructive files or computer programs or (ii) would impose an unreasonable or disproportionately large load on this system’s infrastructure;
Distribute screenshots of the Web Application with third parties without Vizi Education’s Approval.

Limitation of Liability & Disclaimer of Warranty

Disclaimer. The Website and The Application are provided “AS IS” without warranties, conditions or representations of any kind, and Vizi Education expressly disclaims, to the fullest extent permitted by applicable law, any warranty or condition, express or implied, statutory or otherwise, whether arising from trade or course of dealing, including, without limitation, any warranty or condition that the Website and Services (i) shall correspond with a particular description, (ii) are of merchantable quality, (iii) are fit for Your particular purpose, (iv) are durable for a reasonable period of time, (v) do not and will not infringe any patent, trade-mark, trade-secret or other intellectual property or other proprietary rights of any third party, (vi) are bug or error free, or (vii) are accessible through all devices.

You acknowledge that entry, conversion and storage of data is subject to human and machine error and Vizi Education is not responsible for such errors. Vizi Education is not responsible for third-party hardware or software, or for cell, wi-fi or other service providers. Vizi Education does not warrant that the Website or The Application will be compatible with all platforms which may now or in the future be used.
Limitation of Liability In no event will Vizi Education, or its suppliers or licensors, be liable with respect to any subject matter of this Agreement under any contract, negligence, strict liability or other legal or equitable theory for: (i) any special, incidental or consequential damages; (ii) the cost of procurement for substitute products or services; (iii) for interruption of use or loss or corruption of data; or (iv) for any amounts that exceed the fees paid by you to Vizi Education under this Agreement during the twelve (12) month period prior to the cause of action. Vizi Education shall have no liability for any failure or delay due to matters beyond their reasonable control. The foregoing shall not apply to the extent prohibited by applicable law.

Indemnity

You agree to indemnify and hold harmless Vizi Education, its contractors, and its licensors, and their respective directors, officers, employees, and agents from and against any and all claims and expenses, including attorneys’ fees, arising out of your use of our Services, including but not limited to your violation of this Agreement.

Privacy

You represent and warrant that your use of our Services will be in strict accordance with the Vizi Education Privacy Policy,

General Terms

Severability. Part or all of any section that is indefinite, invalid, illegal or otherwise voidable or unenforceable may be severed and the balance of this Agreement will continue in full force and effect.
Assignment. You will not assign, transfer, encumber or otherwise dispose of any or all of the rights granted to You under this Agreement without the prior written consent of Vizi Education.
Waiver. No condoning, excusing or overlooking by any party of any default, breach or non‑observance by any other party at any time regarding any terms of this Agreement operates as a waiver of that party’s rights under this Agreement. No exercise of a specific right or remedy by any party precludes it from or prejudices it in exercising another right or pursuing another remedy or maintaining an action to which it may otherwise be entitled either at law or in equity.
Changes. On release of any update or upgrade to the Website or Web Application, Vizi Education reserves the right to modify this Agreement and to impose new or additional terms or conditions on Your use of the Website or Web Application. The then-current terms (including any modifications and additional terms and conditions if applicable) will be presented to You and will be effective immediately upon Your acceptance of the terms and continued use of the Website or Services.
Linked Sites. Links available on the Website may link to third-party websites not maintained or controlled by us and we provide these links for your convenience, and Vizi Education is not responsible for the contents of any linked site.
Electronic Acceptance. This Agreement may be agreed to by electronic acceptance.

Jurisdiction

Jurisdiction. These terms and conditions are governed by and construed in accordance with the laws of England and Wales.

Any dispute you have which relates to these terms and conditions, or your use our services (whether it be contractual or non-contractual), will be subject to the exclusive jurisdiction of the courts of England and Wales.

Security

Select chosen area

Data Security

GDPR

Privacy Policy

Terms and Conditions