Privacy Policy — SOLASTIAN

1. Who We Are

SOLASTIAN ("we", "us", "our") operates the website solastian.com and the SOLASTIAN school operations platform. We act as the data controller for personal data collected through this website.

Contact for privacy matters:
Email: privacy@solastian.com
Address: [Company address — to be added]

2. Data We Collect

When you visit this website

IP address and general location (country/city level)
Browser type, operating system, device type
Pages visited, time spent, referral source
Cookie preferences you set

When you contact us

Name, email address, school name
Content of your message

When you use the platform (school tenants)

Data processed within a school's SOLASTIAN tenant (student records, staff data, card photos, etc.) is controlled by the school. SOLASTIAN processes this data on the school's behalf as a data processor. Please refer to your school's own privacy notice for details.

3. Cookies

Cookies are small text files stored in your browser. We use three categories:

Category	Purpose	Examples	Retention
Essential	Login sessions, CSRF security, tenant routing. Cannot be disabled.	`sessionid`, `csrftoken`	Session / 2 weeks
Analytics	Understand how visitors use the site (page views, traffic sources). Data is aggregated and anonymous.	`_ga`, `_gid`, `_ga_*` (Google Analytics 4)	Up to 2 years
Marketing	Measure the effectiveness of ad campaigns on Google Ads and LinkedIn.	`_gcl_au`, `_gcl_aw` (Google Ads), `li_fat_id`, `lidc` (LinkedIn)	Up to 90 days

      Your preference is stored in your browser's localStorage under the key
      sol_cookie_pref. You can view or clear it at any time via your browser's
      developer tools (DevTools → Application → Local Storage → solastian.com).
      To change your preferences, clear that key and reload the page.
    

Where collected data goes

Google Analytics — view your data at analytics.google.com under your property.
Google Ads — conversion data at ads.google.com.
LinkedIn — insight data at linkedin.com/campaignmanager.

Analytics and marketing scripts are only loaded after you grant consent. If you select "Essential only", no third-party tracking scripts run.

4. How We Use Your Data

To operate and improve the SOLASTIAN website and platform
To respond to enquiries submitted via the contact form
To understand how the website is used (analytics, with consent)
To measure the reach and effectiveness of marketing campaigns (with consent)
To meet legal obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Legal Basis (GDPR)

Contract — processing necessary to provide the platform to schools
Legitimate interests — website security, fraud prevention, service improvement
Consent — analytics and marketing cookies (you can withdraw at any time)
Legal obligation — where required by applicable law

6. Data Retention

Contact form submissions: 3 years
Server logs: 90 days
Analytics data: up to 26 months (configurable in Google Analytics)
School tenant data: retained for the duration of the contract + 12 months, then deleted on request

7. Your Rights

Under GDPR you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion ("right to be forgotten")
Restriction — ask us to limit how we use your data
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interests
Withdraw consent — for cookies: clear sol_cookie_pref from localStorage and reload

To exercise any right, email privacy@solastian.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Third-Party Services

Google Analytics 4 — Google Privacy Policy
Google Ads — Google Privacy Policy
LinkedIn Insight Tag — LinkedIn Privacy Policy
Microsoft Azure — hosting provider; data processed in West Europe region
Stripe — payment processing; Stripe Privacy Policy

9. Changes to This Policy

We may update this policy from time to time. When we do, we update the "Last updated" date above. Continued use of the website after changes constitutes acceptance of the updated policy.