GDPR, consent & data

ClassLab helps you stay GDPR-compliant and keep control over your families' data. You manage consent from each student's page, and you control your own account from the Settings.

Record and revoke consent

From a student's page, you can:

• record a GDPR consent, optionally noting the specific parent who gave it,
• revoke that consent later, if the family changes its mind,
• send a consent request whenever you need explicit agreement.

Every consent is dated and tied to the person it concerns, so you can always show on what basis you process a given student's data.

Export and erase a student's data

Still from the student's page, you can:

• export the student's data, to answer a subject access request,
• permanently delete the student and all associated data. This is a GDPR erasure: the action cannot be undone.

Keep your account secure

From your account settings, you can:

• change your email address; a verification step confirms the new address before it becomes active,
• delete your account under GDPR.

Whenever someone signs in from an unfamiliar device, you receive an email alert, so you can spot unauthorized access right away. Finally, every new sign-up must confirm their email address before they can sign in.