Waterford Research Institute, LLC (“Waterford”) provides advanced educational software—blending the best aspects of high quality educational content, learning science, mentoring relationships, and innovative technologies to form community, school, and home programs that deliver excellence and equity for all learners. Waterford has specific programs that range from complete home-centered kindergarten readiness, to educational tools for parents of school children, to classroom curriculum and online programs operated by teachers within their school. Our learning science enables individuals to learn at their own pace and tailoring for individual capability and learning styles. Waterford supports its educational software with related services, including personalized curriculum recommendations, research-based learning solutions, automated tracking of student progress, and reports for the parent, teacher, or learning facilitator who is overseeing student learning.
Waterford respects your privacy and takes safeguarding personal data seriously. Please read the following to understand the privacy practices of Waterford, which cover all Waterford websites, software applications, mobile apps, including Waterford Reading Academy, Waterford Early Learning, Classroom Advantage, SmartStart, and UPSTART, our mobile apps MyBackpack, and Mentor our Subscription Services (as defined in our Subscription Services agreement), and our websites: www.waterford.org; www.waterfordupstart.org; and our Waterford Teacher Training Hub at https://waterford.digitalchalk.com/dc/guest/login (collectively “Digital Media”).
Personal Data We Process
We process the personal data of data subjects, including: students, parents, guardians, educators, representatives of educational institutions, representatives of entities, and individuals identified during registration, which we refer to more generally as Customers.
We process the following categories of personal data: contact information, student progress, student reports, student learning difficulties and impairments, device information, information relevant to learning advancement such as language, culture, age and other characteristics, Subscription Service use and service information, internet use information and regulatory information (to satisfy regulatory obligations such as tax and other reporting obligations).
This information includes specific data elements such as name, student ID, grade, class, as well as such optional identification information such as gender, email address, physical address, birthday, ethnicity, primary language, disability, special programs, and picture.
To set up our Digital Media, you may need to create districts, schools, and classes, as well as add teachers, administrators, and create student profiles. In these cases, you may be asked to provide the following information:
Other information we collect may include the following:
We may process your personal data with or without automatic means, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of your personal data. Please note we may combine the personal data that you give us with publicly available information and information we receive from, or cross-reference with, our technical analysts, data analysts, administrators, education providers, and others.
Tracking Technologies, Cookies and Clear GIFs
We use tracking technologies, cookies and clear GIFs to collect information. Tracking technologies are used to collect information from your web browser through our servers or filtering systems when you visit any of our sites.
Cookies store small text files onto a user’s computer hard drive with the user’s browser, containing the session ID and other data. Cookies enable a web site to track a user’s activities on the website for the following purposes: (1) enable essential features; (2) provide analytics to improve website performance and effectiveness; (3) store user preferences; and (4) facilitate relevant targeted advertising on advertising platforms or networks. Users are free to change their web browsers to prevent the acceptance of cookies. Cookies may also be set within emails in order to track how often our emails are opened.
A clear GIF is a transparent graphic image placed on a website. The use of clear GIFs allows us to monitor your actions when you open a web page and makes it easier for us to follow and record the activities of recognized browsers. Clear GIFs are used in combination with cookies to obtain information on how visitors interact with our websites.
Information collected may include but is not limited to your browser type, your operating system, your language preference, any referring web page you were visiting before you came to our site, the date and time of each visitor request, and information you search for on our sites. We can also track the path of page visits on a website and monitor aggregate usage and web traffic routing on our sites. We collect this information to better understand how you use and interact with our sites in order to improve your experience. We also collect this information to better understand what services and marketing promotions may be more relevant to you. We may also share this information with our employees, service providers and customer affiliates.
You can change your web browser settings to stop accepting cookies or to prompt you before accepting a cookie from the sites you visit. If you do not accept cookies, however, you may not be able to use some sections or functions of our sites.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit http://www.allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites visit https://tools.google.com/dlpage/gaoptout.
Purposes for Processing Personal Data
We process personal data for purposes related to our Digital Media, including licensing and operation of the Subscription Service and Products, consultation for student education progress, training, communication, customer service, system monitoring and data security. We process donations received from individuals and entities. We also process personal data in order to expand access to our Digital Media, including communication with organization representatives for funding and potential expansion opportunities. In addition, we process personal data for our business purposes including, research, analytics, products and service improvement, security monitoring, business operations and administration, tax, and other regulatory requirements.
We process personal data to enable use of Digital Media features, including through use of third-party service providers. We also use personal data to communicate with you for marketing purposes, such as to offer opportunities to donate to Waterford. We may also use personal data for internal purposes, including auditing, data analysis and system troubleshooting.
We base our processing on the necessity to perform our contractual obligations under the Subscription Agreement and our legitimate interests in performing the activities of the organization as a provider of educational software and related services. We also process personal data in compliance with our obligations under applicable law and to exercise our legal rights. Where we process the personal data of minors we require the Customer to obtain the requisite consent from the parent or guardian of the minor.
Sharing of Personal Data
We share your personal data with other parties in the following circumstances:
Transfer and Storage of Personal Data
We may transfer, process and store personal data collected from our Digital Media in centralized data centers and with service providers in the United States, cloud storage solutions, or on our premises. We implement standard data protection clauses with our third party service providers to ensure adequate protection of personal data transferred from the EEA (“European Economic Area”).
Our software and mobile apps are cloud based. This means they are stored in and run from the cloud, specifically an Amazon Virtual Private Cloud (“VPC”). Amazon VPC guarantees the security and privacy of its VPC. The Amazon servers we utilize are hosted in the USA and in Asia. For more details, visit https://aws.amazon.com/vpc/. In addition to secure cloud storage, internal access to your personal data is restricted to authorized users (for example, the premium support team) and is only available through a secure tunnel between Waterford’s networks and Amazon’s VPC network. While in our database, select personal data is encrypted (such as student names and birthdays) and usage data is linked to students using internal identifiers. All database access requires authentication, and the back-end services restrict database access at the profile level. Also, our database is set up using Amazon Relational Database Service, which provides security and daily back-up snapshots to aid in case of disaster recovery.
Personal Data Security
Waterford uses technical and organizational measures to protect the personal data that we store, transmit, or otherwise process, against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored or otherwise processed. Our security controls and risk management program and processes are designed to implement appropriate technological and organizational measures to ensure a level of security appropriate to the risks. We regularly consider appropriate new security technology and methods as we maintain and develop our software and systems. Security measures implemented include:
Retention of Personal Data
Waterford processes personal data on behalf of its Customers and may retain the personal data for the period of the Subscription Agreement. In some instances, users have an option to update or delete personal data through Digital Media features. Upon termination of the Subscription Agreement, Waterford reserves the right to delete associated personal data. Waterford does not guarantee the ability to restore data that has been removed from its database server. Waterford retains certain data that has been pseudonymized for historical reporting and statistical and research purposes.
Waterford also collects and processes personal data for its own purposes. This personal data is retained for a reasonable period of time to fulfill the processing purposes mentioned above.
Personal data will only be further retained as allowed under applicable law or required under regulatory provisions mandating record retention, including tax records and transaction history. When archival is no longer required, personal data is deleted from our records.
We periodically review our retention policy to ensure compliance with our obligations under data protection laws and other regulatory requirements. We periodically audit our databases and archived information to ensure that personal data is only stored and archived in alignment with our retention policy.
Personal Data Rights
We rely upon our Customers maintaining the accuracy of the personal data they provide by accessing and updating their account profile. Our Digital Media gives Customers the ability administer user accounts and to add, edit and delete account contact information. Under certain data protection regulations, including the GDPR, individuals have certain data subject rights regarding their personal data.
Individuals in the EEA have certain data subject rights which may be subject to limitations and/or restrictions. These rights include the right to: (i) request access to and rectification or erasure of their personal data; (ii) obtain restriction of processing or to object to processing of their personal data; and (iii) ask for a copy of their personal data to be provided to them, or a third party, in a digital format. If you wish to exercise one of the above-mentioned rights, please send us your request to the contact details set out below. Individuals also have the right to lodge a complaint about the processing of their personal data with their local data protection authority.
Effective Date and Amendments
Inquiries may be made to: