GDPR

How Gaelic Time approaches data protection.

Gaelic Time is built for schools and authorised education delivery. This page sets out the practical GDPR position in plain language, including the types of data used, typical responsibilities, and how requests should be handled.

European privacy standards Access controls Request handling

Controller and processor context

In practice, schools or authorised organisations may decide who should have access to Gaelic Time and how the platform is used in their setting. Gaelic Time then provides the service, hosting, authentication, and operational support needed to make that access work.

Typical lawful basis

The information used in Gaelic Time is generally limited to what is needed to provide a school-linked teaching platform, manage authorised access, show progress, support users, and maintain platform security.

Data minimisation

  • Teacher access is linked mainly through email and school or organisation context.
  • Only the data required for sign-in, permissions, progress, and support is used.
  • Feedback messages are stored so issues can be reviewed and followed up appropriately.

Rights requests

Requests relating to access, correction, or deletion should be sent through the Support page. Where a request depends on a school or organisation decision, Gaelic Time may need to coordinate with that authorised organisation before action is taken.

Security and retention

Gaelic Time uses hosted infrastructure, authentication, database access controls, and role-based visibility to reduce unnecessary exposure of user data. Data is retained for operational, support, safeguarding, and platform continuity reasons for as long as it is reasonably needed.