Data retention summary
This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.
Site
Category
- Site Information and System Data
This section covers information that relates to the overall operation of our ABC VLE platform. It includes system settings, site-wide announcements, platform configurations, administrative activity logs, and aggregated usage statistics that help us manage and improve the service.
Purpose
- Purpose - Site
We retain this data to:
- Keep the platform secure, stable, and running smoothly.
- Monitor system performance and fix technical issues.
- Support administrative functions and ensure compliance with legal and regulatory requirements.
- Understand how the platform is used across the organisation, so we can improve the learning experience.
How Long We Keep This Data
We only keep system and site-level data for as long as necessary. For example:
- System logs (such as login attempts and user activity) are typically retained for up to 10 years before being securely deleted or anonymised.
- Essential configuration and historical records may be kept longer if needed for audit, legal, or operational reasons.
Some data may be aggregated or anonymised so it can no longer identify any individual — this may be used for reporting or analysis without time limits.
You have the right to access, correct, or request deletion of your personal data at any time. For more information, or to make a data request, please contact our Data Protection Officer:dpo@abceduonline.com
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
Users
Category
- User Account Information
This category includes the core personal data required to create and maintain a user’s account within the ABC VLE platform. It encompasses identifying details such as the user’s full name, username, email address, profile picture, and authentication credentials (stored securely in hashed form). Additional information may include user preferences (such as language, timezone, and notification settings) and any custom profile fields defined by the institution (e.g., student ID, department, or job title).
This data is essential for enabling secure access to courses and personalised learning experiences. It supports user identification, communication within the platform, and appropriate role-based permissions across courses and activities. Authentication method information (e.g., manual, LDAP, or single sign-on) is also retained to ensure secure and seamless login processes.
User account information is retained for the duration of the individual’s active affiliation with the institution or until the account is deactivated or deleted in accordance with institutional policies. After a defined period of inactivity, accounts may be archived, anonymised, or removed to comply with data minimisation and privacy principles under regulations such as GDPR.
Users may update their account information at any time through their profile settings, and requests for data access, correction, or deletion are handled in line with the organisation’s data protection policies and ABC VLE privacy tools.
Purpose
- User Identification
Data Categories
- Full name, username, email address
- Profile picture, custom profile fields
- Password (hashed)
- User preferences (language, timezone, etc.)
- Authentication method (e.g., manual, LDAP, OAuth)
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
Course categories
Category
- Course Enrolment and Participation Data
This includes records of your enrolment in courses, your activity within them (such as accessing materials, submitting assignments, and participating in discussions), as well as your progress and completion status. It also covers grades, feedback from instructors, and any certificates you earn.
We retain this data to support your learning, assess your progress, maintain academic records, and meet institutional, accreditation, or legal requirements. This information is kept for the duration of your course and for a set period afterward, typically several years, depending on academic record policies. After this period, your data may be securely archived or deleted.
Purpose
- Course Categories - Purpose
- Track learning progress and achievement
- Support academic records and reporting
- Enable instructors to assess student performance
- Maintain historical records for accreditation or audits
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
Courses
Category
- Courses - Data
The "Courses" category includes all data related to the structure, content, and administration of individual courses within the Moodle platform. This encompasses course titles, descriptions, syllabi, learning materials (such as files, videos, links, and quizzes), learning outcomes, schedules, and associated metadata. It may also include settings for enrolment, completion tracking, visibility, and grading configurations.
Retention Period:
Courses are typically retained for the duration of their active use and for a defined period afterward, usually 7 to 10 years, depending on institutional policies and regulatory requirements. Inactive courses may be archived to preserve content while restricting access. After the retention period, courses are securely deleted or anonymised, unless preservation is required for legal, academic, or historical reasons.
Purpose
- Courses - Purpose
This data is retained to:
- Deliver and manage educational content and learning activities.
- Support teaching and learning continuity across academic terms.
- Maintain institutional records of course offerings and curricula.
- Enable reuse or archiving of course materials for future sessions.
- Comply with accreditation, audit, and quality assurance requirements.
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
Activity modules
Category
- Activities - Communication, Assessment, and Submission Data
This category includes all content you create and submit as part of your learning activities in ALC VLE. It covers assignment submissions, quiz attempts, discussion forum posts, peer and instructor feedback, comments on course materials, and any collaborative work within courses. This data reflects your academic engagement and assessment history within the platform.
This category includes all content you create or share within the ABC VLE as part of your learning activities, including:
- Assignment submissions (files, text entries, and drafts)
- Quiz attempts and responses
- Forum posts, replies, and comments
- Peer feedback and collaborative contributions (e.g., in wikis or workshops)
- Instructor feedback, grading notes, and annotations
- Plagiarism reports (if tools like Turnitin are used)
- Comments on resources or activities
Purpose
- Activities - Purpose
We retain this data to:
- Support your learning and academic progress.
- Enable instructors to assess your work and provide feedback.
- Facilitate collaboration and discussion within courses.
- Maintain a record of academic performance for transcripts, appeals, or accreditation.
- Ensure academic integrity and support investigations if needed.
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |
Blocks
Category
- Block Data
"Block" refers to data generated or stored by ABC VLE blocks — reusable components that display information in sidebars or dashboards across the site or within courses. Examples include recent activity logs, course summaries, calendars, messaging alerts, completion tracking, and third-party content (e.g., news feeds or social media widgets). Some blocks may collect or display user-specific data such as access history, notifications, or personalised content.
Retention Period:
Block-related data is typically retained only as long as it remains active and relevant. Most block content is dynamic and linked to underlying user or course data (e.g., calendar events or recent posts), so it is automatically removed or updated when associated records are deleted or archived. Personalised block settings (such as user preferences for display or visibility) are deleted when a user account is removed or after a defined period of inactivity, in accordance with overall user data retention policies.
Purpose
- Block Data - Purpose
This data is retained to:
- Enhance user experience by providing quick access to relevant tools and information.
- Support navigation, course engagement, and time management.
- Enable functionality such as progress tracking, reminders, and announcements.
- Ensure consistency and usability across the learning platform.
- Retention period
- 10 years
| Lawful bases | |
|---|---|
| Consent (GDPR Art. 6.1(a)) | The data subject has given consent to the processing of his or her personal data for one or more specific purposes |