School Health Connect Privacy Policy

We collect information in the following ways: 

1. Authorized users enter information to monitor compliance including: Users, Locations, Equipment, Certifications, and Medications. 
2. Authorized users will update the status of equipment and other records in the compliance system. 
3. School districts provide roster information to set up classes in WELNET® to include: school, teacher, class, period as well as student name, age, gender, date of birth and ID number. 
4. Teachers and students can enter data regarding fitness measurements, behavior logs, assessments, surveys, rubrics and online classes. 
5. Device and browser information to support security measures and to ensure School Health Connect is working on a variety of devices. 
6. System usage to ensure the highest reliability and service levels.

Use of information:

School Health Connect uses data in a variety of ways to facilitate the use of the system by administrators, maintenance personnel, teachers and students. The data is used in the following ways: 

1. For authorized users to record the location and amount of AEDs, Medicines, and other equipment 
2. To record, report, and flag the compliance status of equipment 
3. To record, report and flag the status of personnel certifications 
4. For teachers to have access to the latest class roster information in order to deliver content aligned to national and state standards 
5. For students to have a record of their personal fitness and health portfolio 
6. For administrators to run aggregated reports on educational activities 
7. For School Health Corporation to improve the performance School Health Connect and resolve support issues  
8. At no time is data from School Health Connect shared with or sold to third party vendors or other outside entities 
9. In the event of a future sale or merger of School Health Corporation or School Health Connect, the future company will abide by this Privacy Policy. All signed School Health Connect Service Agreements and Data Confidentiality clauses will be honored by any future company

 

Security Measures:

School Health Corporation takes the security of our systems, and the privacy of our clients very seriously.

1. School Health Connect is ISO 27001 certified. A copy of the certificate is available here. School Health Corporation is a signatory to the Student Privacy Pledge.
2. As part of the ISO 27001 certification, School Health Connect has developed detailed security incident response and business continuity plans.
3. At all times, School Health Co. will protect the data by using industry standard intrusion detection technology and monitor the data using trained Internet security specialists. 
4. School Health Corporation will protect the data with a firewall that is configured with an intrusion detection system that monitors the Internet segment and can immediately shut down ports that are being attacked. 
5. School Health Corporation will generate and regularly review logs to determine unauthorized activities relating to the data. 
6. All Internet access to the data is accomplished via TLS (Transport Layer Security) Version 1.2 or a successor version thereto, which must provide an encrypted session over the Internet.
7. All data is encrypted at rest and in transit
8. School Health Connect enforces strong password creation and unique logins
9. School Health Connect does not support multifactor authentication
10. School Health Connect is FERPA, COPPA, and GDPR compliant

 

Accessibility of Data:

1. The data stored in School Health Connect is only available to authorized users. Compliance users only have access to the equipment and locations they are responsible for.  Students only have access to their personal portfolio that includes fitness measurements, goal setting, assessments and behavior logs (activity, nutrition, hydration, sleep, pedometer and wearable). Teachers have access to the information of students who are currently enrolled in their classes. District designated program administrators have access to class, school and district data. 
2. Students and Parents can correct data, or have data deleted by contacting the child’s teacher. Teachers can correct student portfolio information themselves. Teachers can correct PII information by contacting their District IT administrator. 
3. Data collected belongs to the client
4. School Health does not share any data with third parties
5. School Health may aggregate combinations of data collected such as that the Aggregated Data no longer contains any personally identifiable information of any user or student. The Aggregated Data is the property of School Health
6. Physical access to School Health Connect data is restricted. Only authorized employees have access in order to carry out the duties of their position. These employees are under an obligation to treat the data as confidential and to comply with School Health Corporation. policies in this manner. 

Data Retention:

School Health Connect retains the necessary data for administrators, maintenance personnel to track and maintain compliance status, and for teachers to complete the required educational activities for their classes.  

PII (except for Student ID and gender) will be removed when a student has not been in a class for five years. PII data (except Student ID and gender) will be removed two years after a student’s senior year. Student ID number is kept so that previous scores can be associated with new scores when a student is in a class after a five year gap. The gender is kept to see if the student met the standards in multiyear longitudinal reports available to administrators. 

We will remove all data for a client six months after the client does not renew School Health Connect.

Cookie and Advertising policy:

School Health Connect uses only necessary cookies. It does not use tracking cookies or advertising cookies.

School Health Connect does not display advertisements, nor does it collect or share information for advertising purposes.

Updates to this policy:

Updates to this policy may occur from time to time as new information becomes available or laws or regulations are enacted to protect student privacy. Any updates to this policy will be posted at https://connect.schoolhealth.com/pages/privacy-policy and will be in effect as of the posting date.

Privacy Contact Information:

If you have any questions, or comments about our Privacy and Security Policy, you may contact us via one of the following methods:  

By Email: connect@schoolhealth.com or welnet@schoolhealth.com 
By Phone: Connect: (888) 808-0389   WELNET: (509) 327-3181 

You can also send mail to the following postal address 

School Health Corporation 
5600 Apollo Drive
Rolling Meadows, IL 60008