iTEMA Student Onboarding and Authorisation Consent

Part A — Teacher Consent and Authorisation. By adding a student under my iTEMA licence, I make the following declarations and authorisations.

1. Authority over the licence. I am the holder of the iTEMA teacher licence through which the student is being added, I am authorised to act in respect of the student's educational use of the Service, and I am not sharing my account or credentials.
2. Guardian consent obtained, kept and produced on request. I am solely responsible for obtaining, before adding the student, the prior consent of the student's parent or lawful guardian, and for keeping and maintaining that consent, together with the parent or guardian's identity details, on record in a signed, dated and retrievable form. I will produce that consent to TutorCloud, or to any authority, whenever asked or required. TutorCloud relies on this assurance, and keeps my logged acceptance of this Consent as its evidence of it.
3. Verification of the consenting adult. I have taken reasonable steps to satisfy myself that the person who gave consent is an adult and is the student's parent or lawful guardian, and that the identity and contact details recorded are accurate.
4. Controllership and my instructions to TutorCloud. I am the controller (or Data Fiduciary) in respect of the personal data of the students I add under my licence: I determine which students are added, what they are taught and for what educational purpose their data is used. TutorCloud acts as my processor (or Data Processor), and processes that data only on my documented instructions and for the purposes described in this Consent and in the TutorCloud Data Processing Agreement. I will give only lawful instructions, and I understand that TutorCloud may decline an instruction that would breach applicable law.
5. Accuracy of the onboarding entry. The student details, class, subject and other information that I have entered are true, complete and accurate, and I will correct them promptly if they change.
6. Data minimisation. I will upload only the categories of student data described in section A.3, and only to the extent necessary for the educational purpose for which the student was added.
7. No special-category data without separate consent. I will not upload, and will not permit the student to enter, health, medical, disability or special-educational-needs information, biometric data, government identification numbers, financial data, photographs, video or audio recordings, or any other special or sensitive category of personal data, unless the parent or guardian has given separate, specific and documented written consent for that category, or unless I have used the redaction tools in the Service so that no such data is entered.
8. Teacher-in-the-loop. I understand that iTEMA output is AI-generated draft content. I will review, edit and approve all AI-generated lesson plans, assessments, questions, grades and feedback before using them with, or sharing them with, any student. I will not use AI-generated output as the sole basis for any decision that materially affects a student, including any decision on a grade, placement, promotion, progression, discipline or referral.
9. Volume of the student licence. I will not add or share more students than the Bundled TutorCloud student licences available to me, and I understand that each Bundled Licence is allocated to one named student only.
10. No re-identification or repurposing. I will not use the Service or any output of it to identify, single out, profile, rank, monitor or make public any student, and I will not publish, post or share with any third party AI-generated content that contains a student's personal data.
11. No marketing use. I will not use student data or AI-generated output for advertising, promotional, commercial or non-educational purposes, and I will not market third-party products or services to students through the Service.
12. Prohibited and unlawful content. I will not upload any content that is unlawful, infringing, defamatory, discriminatory, sexually explicit, violent or harmful to a minor, and I will not use the Service to circumvent any safeguarding or age-assurance control.
13. Incident and withdrawal reporting. I will notify TutorCloud without undue delay (and in any event within 24 hours) if: a parent or guardian withdraws consent; a student leaves my tuition; I become aware of any unauthorised access, loss or disclosure of student data; or a safeguarding concern arises in connection with the Service. On withdrawal, I will stop using the Service for that student and remove the student's licence promptly.
14. Handling of parent and guardian requests. I will pass to TutorCloud, without undue delay, any request from a parent, guardian or eligible student to access, correct, export or delete the student's data held by TutorCloud, and I will not obstruct such a request. I understand that TutorCloud will respond to such requests in accordance with the applicable regional law described in Part B.
15. Children's data and the role of AI. I understand that the Provider's policy, consistent with UAE child-protection law, is that the parent or lawful guardian of any student under the age of eighteen (18) must consent before that student is added to the Service. I confirm that no student personal data will be used for behavioural monitoring, profiling or targeted advertising directed at children, and that I will inform the student and the parent or guardian that artificial intelligence is used to generate draft content, in accordance with the Provider's obligations under the DIFC data-protection framework for autonomous and semi-autonomous systems.
16. Retention and production of evidence. I will ensure that the parent or guardian consent, together with the parent or guardian's acknowledgement, is retained — whether by me or, where it is captured in the application, by the application — for as long as the student is active on the Service and for such further period as applicable regional law requires, and I will produce that evidence to TutorCloud within five (5) business days of a written request.
17. Reliance and consequences. I understand that TutorCloud relies on the statements in this Part A for the purposes of complying with the applicable data-protection, child-safety and applicable law. I understand that a materially false or misleading attestation is a breach of the Agreement and may result in suspension or termination of my licence and of the Bundled Licences.
18. Independence and liability. I confirm that I am responsible, as between me and the parent or guardian, for obtaining and maintaining the consents and authorisations described above, and that nothing in this Consent limits my own obligations under the Agreement or under applicable law.