Student Data is the defined term used throughout our Data Processing Agreement and across this Trust Centre. It means the personal data Elemental processes on your school's behalf. This page sets out exactly what it covers.
What we collect
Section 3 of the Data Processing Agreement defines Student Data as:
- User profiles. Student and teacher email addresses, first names and last names.
- Class rosters. Class names and identifiers, teacher identifiers and student identifiers (identifiers only apply to Google Classroom / Microsoft Teams for Education integrations).
- Assignments. Identifiers and statuses (only applies to Google Classroom / Microsoft Teams for Education integrations).
What we do not collect
- No special category data. Nothing Elemental collects or stores is special category data under Article 9 of the UK GDPR.
- No advertising. Elemental carries no advertising, and Student Data is never sold or used for advertising.
Where it comes from
Student Data reaches Elemental in one of three ways, depending on how your school signs in: from your Microsoft Entra tenant and Microsoft Teams for Education, from your Google Workspace tenant and Google Classroom, or by school staff creating accounts directly.
Schools using Elemental email and password accounts, with no learning management system connected, still provide Student Data. Staff create the user profiles directly through text entry or CSV / Excel upload, and the Data Processing Agreement for email and password accounts governs them once your school opts in.
Where a learning management system is connected, we read that data using the permission scopes your school approves:
Google Workspace and Google Classroom
| Scope | Google's Description |
|---|---|
| classroom.courses.readonly | "View your Google Classroom classes" |
| classroom.coursework.me | "See, create and edit coursework items including assignments, questions, and grades" |
| classroom.coursework.students | "Manage coursework and grades for students in the Google Classroom classes you teach and view the coursework and grades for classes you administer" |
| classroom.profile.emails | "View the email addresses of people in your classes" |
| classroom.rosters.readonly | "View your Google Classroom class rosters" |
| userinfo.email | "See your primary Google Account email address" |
| userinfo.profile | "See your personal info, including any personal info you've made publicly available" |
These scopes and their associated permissions are defined and described by Google and are documented at https://developers.google.com/identity/protocols/oauth2/scopes.
Microsoft Entra and Microsoft Teams for Education
| Scope | Microsoft's Description |
|---|---|
| EduAssignments.ReadWrite | "Read and write users' class assignments and their grades" |
| EduAssignments.ReadWriteBasic | "Read and write users' class assignments without grades" |
| EduRoster.ReadBasic | "Read a limited subset of users' view of the roster" |
| "View users' email address" | |
| offline_access | "Maintain access to data you have given it access to" |
| openid | "Sign you in" |
| profile | "View users' basic profile" |
These scopes and their associated permissions are defined and described by Microsoft and are documented at https://learn.microsoft.com/en-us/graph/permissions-reference.
Data generated by Elemental
Work completed in Elemental, and the marks and feedback that result from it, is generated by the platform rather than supplied by your school, so the agreement does not treat it as Student Data. Elemental is the Data Controller for this data, under UK GDPR Article 24, and this data is governed by our Privacy Policy.
How long we keep it
See our Retention and Deletion page for more information.
