Moodle Privacy Policy


This policy explains how user data is collected, used, and protected on our Moodle platform. Key commitments:

  1. Data Collected: Account details (name, email), activity logs, submissions, forum posts, and technical data (IP/browser).

  2. Purpose: Operate Moodle, deliver courses, assess work, support users, and improve services.

  3. Data Sharing: Limited to authorized staff; third parties (e.g., cloud hosts) bound by strict agreements. Never sold.

  4. User Rights: Access, correct, or request deletion of personal data (where legally permissible).

  5. Security: Industry-standard measures (encryption, access controls) to protect data.

  6. Retention: Data kept only as long as needed for academic/legal purposes.

  7. Cookies: Essential for functionality; optional analytics may be used (with consent).

  8. Compliance: Adheres to GDPR, FERPA, [Other Laws] and institutional policies.

By using Moodle, you consent to this data handling.

. Scope

This policy applies to all personal data processed through the Moodle LMS at Everon Learning Solutions, covering students, instructors, staff, and visitors.

2. Data Collected

  • Provided by You:

    • Profile data (name, email, ID, contact details).

    • Course submissions (assignments, quizzes).

    • User-generated content (forum posts, messages).

  • Automatically Collected:

    • Activity logs (logins, resource views, participation).

    • Technical data (IP address, browser, device).

    • Cookies (see Section 7).

3. Legal Basis & Purpose

Data is processed to:

  • Fulfill educational contracts (e.g., course delivery).

  • Comply with legal obligations (e.g., record-keeping).

  • Pursue legitimate interests (e.g., security, system improvement).

  • With consent (e.g., optional analytics).

4. Data Sharing

  • Internally: Authorized academic/administrative staff for educational purposes.

  • Third Parties:

    • Service providers (hosting, support) under strict confidentiality agreements.

    • Accrediting bodies or auditors (anonymized where possible).

    • Legal authorities if required by law.

  • Never sold to advertisers or marketers.

5. International Transfers

Data may be transferred globally but only to jurisdictions with adequate privacy protections (e.g., EU-US Data Privacy Framework).

6. Security Measures

  • Technical: Encryption (in transit/at rest), firewalls, intrusion detection.

  • Administrative: Role-based access controls, staff training, audits.

  • Physical: Secure data centers.

7. Cookies & Tracking

  • Essential Cookies: Required for Moodle functionality (e.g., login sessions).

  • Analytics Cookies: Optional; collect usage trends (enabled only with consent).

  • Users may manage preferences via browser settings.

8. Data Retention

  • Active Users: Retained while enrolled/employed.

  • Inactive Accounts: Deleted/anonymized after [e.g., 5 years] unless legal/academic requirements apply (e.g., transcript records).

  • Backups retained for [e.g., 90 days].

9. User Rights

You may request to:

  • Access your personal data.

  • Correct inaccuracies.

  • Delete data (where permissible).

  • Restrict processing.

  • Port data.

  • Withdraw consent.
    Submit requests to: [Privacy Officer Email]. Response within [e.g., 30 days].

10. Children’s Data

Moodle users under [e.g., 13/16] must have parental consent per [COPPA/GDPR]. Contact us to remove underage data.

11. Third-Party Links

Moodle may link to external sites (e.g., publishers, YouTube). This policy does not cover their practices.

12. Policy Updates

Revised versions posted on Moodle login page. Material changes notified via institutional email.

13. Contact

  • Data Protection Officer: [support@everonleanring.com]

  • General Privacy Queries: [support@everonleanring.com]

  • Technical Support: [support@everonleanring.com]

Effective Date: [08/01/2025]
Last Revised: [08/15/2025]