Academy terms & data processing agreement
Template — have this reviewed by a solicitor before launch.
1. The service
Aesori provides the Aesori Academy Learning Platform for training academies to deliver courses, enrol students and assess work. The academy is responsible for the content of its courses and for the qualifications and insurance of its tutors.
2. Plans, trials and payment
Subscriptions are billed monthly or annually in advance on the plan chosen at sign-up. Free trials convert to a paid subscription only once billing details are added. Plans may be changed at any time; changes are prorated. Access may be suspended if payment is overdue.
3. Acceptable use
Academies must only upload material they have the right to use, and must hold written consent from any client whose image is uploaded by students or tutors.
4. Data processing agreement (UK GDPR / EU GDPR Article 28)
- Roles: the academy is the controller; Aesori is the processor and acts only on the academy’s documented instructions (this agreement and the academy’s use of the platform).
- Subject matter: provision of a learning platform. Data subjects: students, tutors, academy staff, and clients appearing in uploaded images. Data: contact details, learning records, uploaded files including health-related images.
- Confidentiality: personnel with access are bound by confidentiality.
- Security (Art. 32): encryption in transit and at rest, per-academy data isolation, access controls, optional two-step verification, audit logging and regular backups.
- Sub-processors: EU hosting provider, e-mail delivery provider, Stripe (billing). The academy will be notified of changes and may object.
- Location: data is stored in the EEA. No transfer outside the UK/EEA without appropriate safeguards.
- Assistance: the platform provides tools for subject access (data export) and erasure; Aesori will assist with other requests and with breach notification without undue delay.
- Deletion: on termination, all academy data is deleted within 30 days unless law requires retention.
- Audit: Aesori will make available information necessary to demonstrate compliance.
Questions: support@aesori.co.uk