1. Who We Are
Be World Class Education Ltd (“BeWorldClass”)
Company Number: 14891465
Registered in the United Kingdom
Contact: info@beworldclass.org
BeWorldClass provides the BeWorldClass Platform (app.beworldclass.org), which supports schools in tracking and developing student skills and competencies.
We act as a Data Processor on behalf of schools using our service.
Each participating school acts as the Data Controller and determines what information is collected, how it is used, and when it is deleted.
2. What Information We Collect
The BeWorldClass Platform helps schools record students’ achievements and personal development against their chosen skill framework. Information is collected by school staff or students’ directly inputting the information, and is done so to facilitate the ability of school staff to identify individuals and groups of students.
The standard data added to the platform includes:
- Name (first name or full name)
- Class / Year Group
- Gender (Always optional, if provided by the sudent school)
- School Email Address (Unless using a username)
- Reflections, evidence, or notes entered by the student or teacher
- Assessment results or competency ratings where applicable
Schools can customise these fields and may collect more or less data depending on their configuration.
We do not collect sensitive personal data (such as ethnicity, religion, medical details, or disability status) unless a school has explicitly added custom fields for that purpose.
3. How Users Log In
Students and teachers may log in using one of the following methods:
- Username + Password
- Email + Password
- Google Single Sign-On (SSO)
- Microsoft Single Sign-On (SSO)
For SSO logins, we store the email address associated with the linked account to enable authentication. No passwords from Google or Microsoft are stored by BeWorldClass.
4. How We Use the Data
We use data only to provide and maintain the service, specifically to:
- Enable secure log-in and account management
- Allow teachers to review and assess student reflections and evidence
- Help schools monitor progress against their chosen framework
- Support schools in identifying strengths, development needs, and achievement trends
- Maintain platform security and reliability
- Respond to support queries raised by schools
We do not use student data for marketing, profiling, or advertising.
5. Sub-Processors and Hosting
BeWorldClass uses Google LLC as its sub-processor for hosting and authentication.
Google provides:
- Secure user authentication
- Real-time data storage and synchronisation and encryption
- Secure cloud processing
- Front end hosting
BeWorldClass also uses OpenAI as a sub-processor in the handling of non-identifiable non-personal information to facilitate the GRACE AI assistant.
Both Google LLC and OpenAI LLC is GDPR-compliant and operates within secure, monitored data centres.
Neither BeWorldClass or our sub-processors use any information entered into the platform to train AI models. Data is only used to facilitate the use of the BeWorldClass Platform.
6. Who Has Access to Data
The BeWorldClass platform operates a role based security system.
- Students: Access only to their own profiles and reflections.
- Teachers / School Staff: Access to student and staff data within their own school instance.
- BeWorldClass Support Staff: Access only when a school requests technical assistance or troubleshooting.
- Google (Firebase): Provides hosting, encryption, and storage infrastructure.
- OpenAI: No access to personal data. Provides AI technology to facilitate the GRACE AI assistant.
We do not share personal data with any other third parties.
7. Data Retention and Deletion
When a school account is closed, or upon written request from the school, all associated data (including student accounts) is permanently deleted from our systems in line with secure-deletion standards. Schools can choose to keep the data saved for a longer period if they expect to return.
The BeWorldClass platform gives schools the option to automatically delete inactive student accounts, with an inactivity length of their choosing.
When a school or student deletes an account, personal data will be deleted within 30 days.
8. Student and Teacher Privacy Rights
Where applicable, students, their parents or guardians, and staff have the following rights under the UK General Data Protection Regulation (UK GDPR):
Right of Access – To request confirmation as to whether personal data is being processed and to obtain a copy of that data, along with information about how it is used.
Right to Rectification – To request correction of any inaccurate or incomplete personal information.
Right to Erasure (“Right to be Forgotten”) – To request the deletion or removal of personal data where there is no longer a lawful reason for its continued processing.
Right to Restrict Processing – To request that the processing of personal data is limited in certain circumstances (for example, while accuracy is being verified).
Right to Data Portability – To receive personal data in a structured, commonly used, and machine-readable format and to have that data transmitted to another controller, where technically feasible.
Right to Object – To object to the processing of personal data in certain situations, including direct marketing or processing based on legitimate interests.
Right to Withdraw Consent – To withdraw consent for processing where processing is based on consent (this will not affect any processing carried out before consent was withdrawn).
Rights in Relation to Automated Decision-Making and Profiling – To request human intervention, express a point of view, and challenge decisions made solely by automated means, if applicable.
Requests regarding these rights should normally be directed to the relevant school, which acts as the Data Controller. However, BeWorldClass (as Data Processor) can assist by facilitating such requests if contacted at info@beworldclass.org.