Data Subject Rights Process
Roles
| Data | Controller | How rights are exercised |
|---|---|---|
| Pupil / student data | The school (or trust) | Parents should contact the school in the first instance. iAntz supports the school as processor. |
| Parent / guardian account data | IANTZ LIMITED (for account and payment data) | Parents may use in-app tools or contact iAntz directly. |
| School staff account data | IANTZ LIMITED (account data); school (employment data) | Staff may use in-app tools or contact iAntz / their school as appropriate. |
Rights under UK GDPR
Data subjects may have the following rights (subject to exemptions):
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making
In-app self-service (parents and staff)
Users signed in at iantz.app or the iOS/Android app can:
- Open Profile → Edit profile → scroll to Account
- Download my data — JSON export of personal data (access and portability)
- Delete my account — type DELETE, re-authenticate, then confirm erasure
On deletion, personal data is anonymised. Transaction records may be retained in anonymised form for 7 years for legal compliance. Linked children's school wallets are not deleted.
Requests by email
iAntz data protection contact: [email protected]
Subject line: Privacy Request
Include: full name, email on account, school name, and the right you wish to exercise.
Response time: Within one calendar month (extendable by two months for complex requests, with notice).
Requests about pupil data
Schools should handle pupil data subject requests as controller. iAntz will assist within the scope of our Data Processing Agreement, typically within 5 business days of receiving a valid instruction from the school.
School DPO / data protection contact: [School to complete]
Complaints
Data subjects may complain to the ICO: ico.org.uk · 0303 123 1113
We encourage contacting us first at [email protected].
What schools should tell parents
Include in your privacy notice:
- That you use Payments by iAntz as a processor for payment and related data
- Link to iantz.com/privacy
- How parents contact you for pupil data requests
- That parents with iAntz accounts can download or delete their account data in-app