Privacy Policy

Legacy Arrows Academy (“LAA,” “we,” “us,” or “our”) is a Christian, faith-informed K-5 virtual school based in Florida, USA, serving families across the United States and Latin America. We believe that protecting the personal information of students and families is part of treating every person with the dignity and respect they deserve. Families of all backgrounds, faiths, and cultures are warmly welcomed.

This Privacy Policy explains what information we collect, how we use it, who we share it with, how we protect it, and the choices and rights families have. It applies to our website, our enrollment process, our live virtual instruction, and all related Academy services (collectively, the “Services”).

1. Information We Collect

We collect only the information needed to operate the Academy, support student learning, and meet our legal obligations. Information we may collect includes:

1.1 Family and Account Information

• Parent or guardian names and contact information (email, phone, mailing address)
• Login credentials for LAA accounts and platforms
• Billing contact information (the payment method itself is collected by our payment processor — see Section 7)
• Communications between you and the Academy

1.2 Student Information

• Student name, date of birth, age, and grade level
• Enrollment forms and educational documentation
• Academic records, assignments, and assessment results
• Attendance and participation records
• Media consent preferences

1.3 Technical Information

• Basic device and browser information collected when accessing our website or learning platforms
• Approximate location (country/region) inferred from IP address, used only for service reliability and security

2. How We Use Information

We use the information we collect to:

• Provide and deliver live virtual instruction and academic support
• Manage enrollment, scheduling, attendance, and grades
• Communicate with families about academics, behavior, billing, and Academy events
• Maintain student safety and verify authorized platform access
• Process tuition payments and maintain billing records
• Comply with applicable legal, regulatory, and recordkeeping requirements

We do not use student information to build advertising profiles, and we do not sell student data.

3. Children’s Privacy (COPPA Compliance)

Legacy Arrows Academy is designed for students in grades K-5, all of whom are under 13. We take our obligations under the U.S. Children’s Online Privacy Protection Act (COPPA) seriously.

• We collect personal information from children under 13 only with verified parental consent obtained during enrollment.
• Parents and guardians may review their child’s information, request corrections, request deletion, or withdraw consent to further collection at any time (see Section 10).
• We collect only the information reasonably necessary for the educational program and do not condition participation on disclosure of more information than is needed.
• We do not knowingly enable children to publicly share personal information on LAA platforms.

4. FERPA Voluntary Alignment

The Family Educational Rights and Privacy Act (FERPA) is a U.S. federal law that primarily governs schools receiving federal funds. While LAA is a private school that is not bound by FERPA in the same way, we voluntarily align our practices with its core principles, including:

• Parents’ right to inspect and review their child’s education records
• Parents’ right to request corrections to records they believe are inaccurate
• Protection of personally identifiable information in education records from unauthorized disclosure

If you would like to exercise any of these rights, please follow the process in Section 10.

5. International Families (GDPR Awareness)

LAA welcomes families from Latin America and other countries outside the United States. By using our Services, families outside the U.S. acknowledge and consent that personal information will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your home country.

We work to apply data protection practices consistent with generally accepted international privacy principles, including data minimization, purpose limitation, and security.

6. How We Share Information

We do not sell or rent personal information. We do not share student information for advertising or marketing purposes.

We share limited information only when reasonably necessary for school operations or as required by law, including:

• With trusted third-party service providers that help us operate the Academy (see Section 7), under contracts or terms requiring them to protect information
• With parents or guardians regarding their own children
• With other LAA staff who need information to teach, support, or supervise the student
• When required by law, legal process, or to protect the safety of a student, staff member, or other person

7. Third-Party Service Providers

To operate the Academy, we use a small number of trusted third-party platforms. Each provider operates under its own privacy policy, which we encourage families to review:

• Microsoft 365 (including Microsoft Teams, OneNote, Word, Excel, and Outlook) — our core platform for live instruction, student notebooks, assignments, and school email accounts. Privacy info: privacy.microsoft.com
• Stripe — our secure payment processor for tuition and fees. Stripe collects and stores payment-card data on our behalf; LAA does not store full payment-card numbers. Privacy info: stripe.com/privacy
• JotForm — used for online forms such as virtual-tour requests and certain enrollment forms. Privacy info: jotform.com/privacy

If we add or change a core platform, we will update this Privacy Policy.

8. Data Retention

We keep personal information only as long as needed to operate the Academy and meet our legal obligations.

• Active enrollment: while a student is enrolled, we retain records needed to deliver instruction and operate the Academy.
• After withdrawal: student academic and administrative records are generally retained for five (5) years after the student leaves the Academy, after which records are securely deleted or de-identified, except where a longer retention period is required by law or by the enrollment agreement.
• Billing records: financial records are retained for the period required by tax and accounting laws.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. Examples include:

• Access controls and individual login credentials for staff
• Use of reputable platforms (such as Microsoft 365 and Stripe) that maintain industry-standard security
• Limiting access to student records to staff with a legitimate educational need
• Secure communication channels for sensitive information

No method of digital transmission or storage is completely secure. While we work to protect personal information, we cannot guarantee absolute security.

10. Your Rights and How to Exercise Them

Parents and guardians have the right to:

• Request to review the personal information we hold about you and your child
• Request correction of inaccurate or incomplete information
• Request deletion of personal information, where permitted by law and consistent with our recordkeeping obligations
• Withdraw consent for media use or other optional uses
• Ask questions about how we handle your information

To exercise any of these rights, please email Administrator@legacyarrowsacademy.org with:

• The student’s name and grade
• The parent or guardian’s name
• A clear description of your request

We will respond within a reasonable timeframe — generally within thirty (30) days — and may ask for additional information to verify your identity before fulfilling a request.

11. Cookies and Website Analytics

Our website may use basic cookies to support functionality and user experience. LAA does not currently use third-party advertising trackers or marketing pixels. Some cookies may be set automatically by the platform that hosts our website (such as WordPress).

Most browsers allow you to disable cookies through their settings. Disabling cookies may affect how some parts of the website function.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or applicable law. Updates will be posted on our website with a revised “Last Updated” date. Continued use of the Services after an update means you accept the revised Policy.

13. Contact Us

For privacy-related questions or to exercise any of the rights described in this Policy, please contact:

• Email: Administrator@legacyarrowsacademy.org
• WhatsApp — English: +1 (718) 614-8101
• WhatsApp — Spanish: +1 (407) 350-8584

Disclaimer: This Privacy Policy is provided for informational purposes and does not constitute legal advice. Legacy Arrows Academy recommends that this Policy be reviewed by a Florida-licensed attorney with privacy-law experience to ensure ongoing compliance with COPPA, FERPA, applicable state privacy laws, and international frameworks such as GDPR where relevant.