GO Solutions

Privacy Policy

Last Updated: June 6, 2025

1. Introduction

AssetWorks Risk Management Inc. d/b/a Go Solutions (“we”, “our”, or “us”) is committed to protecting the privacy of our users, including students, educators, and children. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with applicable data protection laws, including:

1. Family Educational Rights and Privacy Act (FERPA) – USA
2. Health Insurance Portability and Accountability Act (HIPAA)-USA
3. California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) – California, USA

By using our web-based software and services (collectively, the “Service”), you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Personal Information Provided by Users

• Educational Data (FERPA-regulated): Student names, school-issued email addresses, coursework submissions, grades, and class schedules.
• Health Data (HIPAA-regulated PHI): Protected health information (PHI) such as student medical records, health screening results, diagnoses, treatment information, and any other individually identifiable health information shared by a covered entity.
• Parent/Guardian and Educator Information: Contact information, titles, and school affiliations.
• Account Information: Names, usernames, passwords, payment and billing details.
• Communications: Support tickets, chat logs, and user feedback.

2.2 Automatically Collected Data

• Device and Usage Information: IP address, browser type, device information, pages visited.
• Cookies and Similar Technologies: To manage sessions, personalize experiences, and perform analytics.

3. Legal Compliance and Purpose of Processing

We process your personal data only when necessary, under the following legal frameworks:

• FERPA: We handle student educational records only as authorized by educational institutions and in accordance with FERPA requirements.
• HIPAA: We handle protected health information (PHI) only as authorized by covered entities and in accordance with HIPAA requirements.
• CCPA/CPRA: We honor the rights of California residents regarding access, deletion, and opt-out of data sharing.

4. How We Use Your Information

We use the collected information to:

• Provide access to and functionality of the Service
• Support educators and institutions in managing educational activities
• Communicate service updates or support responses
• Conduct analytics to improve performance and usability
• Comply with legal obligations and school agreements

5. Student and Child Privacy

5.1 Compliance with FERPA

• We act as a “School Official” under FERPA, meaning we only access, use, and disclose student education records as permitted by the school or district with legitimate educational interest.
• We do not share or sell FERPA-covered information for marketing or advertising purposes.

5.2 Compliance with HIPAA

• We act as a “Business Associate” under HIPAA, meaning we only access, use, and disclose protected health information (PHI) as permitted by the covered entity and in accordance with a valid Business Associate Agreement (BAA).
• We do not share, use, or sell HIPAA-covered information for marketing, advertising, or any purpose not explicitly authorized by the covered entity or required by law.

6. User Rights

Depending on your jurisdiction, your rights may include:

• Access to your personal data
• Correction of inaccurate information
• Deletion (Right to be forgotten under GDPR; Right to Delete under CCPA)
• Data portability
• Withdraw consent at any time (if applicable)
• Opt-out of targeted advertising or the sale/sharing of personal data
• Requests to exercise these rights can be submitted to [Insert Contact Email].

7. Sharing of Information

We do not sell personal information. We may share it with:

• Authorized School Officials as required under FERPA
• Third-party Service Providers under strict contractual agreements (e.g., hosting, payment processing)
• Government or Legal Entities as required by law
• Business Successors, in case of a merger or acquisition, with notice provided

All third parties are vetted for compliance with applicable privacy laws and required to handle data securely and lawfully.

8. Data Security

We apply industry-standard technical, administrative, and physical safeguards to protect personal data against loss, unauthorized access, misuse, and disclosure. This includes encryption, secure authentication, access controls, and staff training.

9. Data Retention

We retain personal data only as long as necessary to fulfill educational, legal, and operational purposes. School officials may request the deletion of student records at any time, and such requests will be honored in compliance with applicable regulations and contractual obligations.

If a customer cancels their contract with us, all associated records, including student data—will be permanently deleted following a consultation with the customer. This deletion will occur no sooner than thirty (30) days after the cancellation date to allow for any necessary data transfers, audits, or customer requests.

We adhere to strict data security principles and follow industry best practices to prevent the unauthorized retention of data. We do not retain personal data for entities or individuals who are not active clients. Once a contractual or service relationship ends and applicable retention periods have expired, we ensure all personal and sensitive data is securely and permanently disposed of in accordance with relevant data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. When we do, we will revise the “Last Updated” date and notify users as required by law or institutional agreement.

11. Contact Us

For privacy questions, access requests, or data deletion inquiries:

Email: info@gosolutions.com

Mailing Address: 5920 Enterprise Drive, Lansing, MI 48911