Privacy Policy
This policy explains how information is used on the DROP website and DROP for Schools platform, who decides the purposes of its use, and how people can make privacy requests. It should be read with each school’s approved service agreement.
Contents
1. Scope and responsible parties
xDROP EG (شركة إكس دروب إيجي لنقل الركاب) operates the DROP website and enquiry form. For school transport information, the school determines the purposes and authorised users; DROP handles that information on the school’s behalf, under its instructions and service agreement.
This policy covers website visitors, school representatives, parents, school staff and bus team users. A school’s own privacy notice should also be consulted for information about its students.
2. Website enquiry information and its source
The enquiry form collects your name, school name and work email, and optionally your phone number and a message. We receive this information directly from you to answer and follow up on your enquiry. Sending an enquiry does not create an account or subscription.
The form is for school enquiries. Please do not include a student’s name, personal details or sensitive information in the message. Unnecessary information received this way is reviewed as part of handling and deleting the enquiry.
3. School platform information and its sources
The school may enter a student’s name or identifier, class, parent contact details, assigned route and stop. Use of the platform may create boarding, drop-off and absence records, trip updates and bus location while a journey is underway. A parent may report an absence through the app.
The school service agreement does not authorise routine collection of health or biometric information. Any such use would require separate assessment and arrangements before it is added to the service.
4. Why information is used
Platform information supports student, route and stop lists; journey management; boarding and absence events; trip-related notifications; school monitoring; and operational reports. Enquiry information is used to reply to schools and follow up on their requests.
Student information is used within the purposes of the service and the school’s approved instructions. Bus location and student records should not be used for a separate purpose without appropriate arrangements and notice.
5. Legal basis and parental consent
The school determines the legal basis on which it provides student information and operates school transport; DROP and the school must document the appropriate basis for processing within their respective roles. The school service agreement requires written parental consent where required before a child’s information is entered.
Consent information should clearly explain the information, purpose and recipients. The school should record required consent and handle withdrawal or objection under the law and agreement. An enquiry through this website is not consent to process a child’s information.
6. Who may access information
The school approves staff, bus supervisor and parent accounts and decides the access available to each role. Users should see only what they need for their role, and must not share credentials or access a student’s information without authorisation.
Authorised DROP support personnel may access the minimum information needed to address a support request or operate the service, subject to confidentiality and the school’s instructions. Student information is not published on the public website.
7. Service providers and disclosures
The contact form sends enquiries through FormSubmit to DROP’s support inbox. The website also loads display fonts from Google Fonts, which may cause your browser to contact Google servers. Information may also be disclosed when applicable law or a competent authority lawfully requires it.
For details of hosting and technical service providers, where a particular school’s information is processed or any international transfers, contact us at the address below.
8. Retention and deletion
DROP’s support inbox retains website enquiries for 90 days from receipt. FormSubmit says in its documentation that it retains a copy of a submission for 30 days. Student information is retained for 90 days from entry of each record.
After the relevant period, information is deleted or returned to the school under its written instructions and service agreement, unless law requires another period. Handling of relevant backups and records is coordinated under the service arrangements and applicable law.
9. Security and incidents
School service agreements set out role-based access, protection of information in transit and at rest, confidentiality, and handling and reporting incidents affecting data in line with the agreement and law.
Users should protect their sign-in details and promptly report suspected unauthorised access to the school or DROP. The public contact form should not be used to send student lists or documents containing student information.
10. Individual rights and parent requests
Depending on the circumstances, a person may request access, correction, erasure or objection, and other rights available under applicable law. Requests about website enquiries may be sent to the DROP address below, with enough information to identify the request and verify the requester.
Requests about a student’s information should first go to the school, which determines the purpose of its use. DROP will assist the school under its instructions. A parent’s or other requester’s authority may need to be verified before a child’s information is disclosed.
11. Cookies and connected website services
The school pages use resources needed to display and operate the website, including a font loaded from Google Fonts. Enquiry information is sent to FormSubmit when you submit the form. Any optional analytics or cookies introduced later should be assessed and reflected in this policy and relevant controls.
Visitors can adjust browser settings to limit some cookies, although that may affect features that rely on them. Browsing the public pages does not require an account.
12. Changes, contact and complaints
This policy may change as the website, platform, providers or legal requirements change. Updates will appear on this page, with appropriate notice of material changes.
For privacy questions or requests, including questions about the data protection officer or hosting location, email support@dropeg.com. You may also complain to the Egyptian Personal Data Protection Center using its available channels.
Contact
Questions about this policy or these terms: support@dropeg.com