Zr Academy of Education ("we", "us", "our") protects your privacy and handles personal data responsibly. This policy applies to visitors and users of www.zracademy.com and explains your rights under the General Data Protection Regulation (GDPR) and Irish data protection law.
1. Personal data we collect
We collect information you provide through enquiries, registration and sign-in, including your name, email address, phone number, message, profile image, account role and status. When you use our educational services, we may also hold lesson, attendance, credit, feedback, award and progress records.
2. How we use personal data
We use personal data to answer enquiries, manage accounts, provide and schedule educational services, record attendance and progress, send important service messages, secure the platform and meet legal obligations. We do not use it for marketing without explicit consent.
3. Cookies and local storage
The necessary/preference cookie zra-locale stores a supported locale code so the site remembers your selected language. It works when you choose necessary cookies only, applies site-wide with Path=/ and SameSite=Lax, and lasts for one year. It is non-advertising and non-tracking. The separate necessary local-storage record cookie-consent stores either all or necessary together with acknowledgedAt, remembers your banner choice for six months, and enables no tracker in either branch. A secure sign-in session cookie keeps authenticated users signed in for up to 14 days.
4. Storage and protection
Personal data is stored securely on Microsoft Azure infrastructure in the European Economic Area (EEA). We use appropriate technical and organisational safeguards and restrict access to authorised personnel.
5. Sharing personal data
We do not sell, trade or rent personal data. We share it only with trusted cloud or authentication providers acting for us under appropriate safeguards, or when disclosure is required by law.
6. Retention
We retain personal data while an account is active or for as long as it is needed to provide services and meet legal or administrative obligations. We respond to valid deletion requests within a reasonable period, subject to those obligations.
7. Your rights
Under the GDPR, you may request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent where consent is the legal basis. You may complain to Ireland's Data Protection Commission at www.dataprotection.ie.
8. Session security and shared devices
Your sign-in session can remain active for up to 14 days. Always sign out after using a public, shared or school device and do not leave your account open for another person.
9. Changes to this policy
We may update this policy when our practices or legal duties change. Updates will appear on this page. Last updated: August 2026.