Before the school processes a child's personal data — especially medical and health information, which is a special category of data — the child's guardian must give explicit consent. YoShule records that consent with a timestamp and keeps it on the student's record.
Consent can be captured two ways.
1. Online (digital)
When a guardian confirms the email address the school holds, they are shown exactly what data the school keeps about their child, with medical/health data flagged, and must tick a consent box before confirming. Confirming does both: it verifies the email and records their consent.
Nothing is required from you for this path beyond making sure the guardian's email is on file and the verification link has been sent — see Verifying your email.
2. Signed paper form (hardcopy)
If a guardian signs a paper consent form instead, an administrator records it by uploading a scan.
- Go to Dashboard → Students and open the student.
- In the Guardian Consent card, click Record signed form.
- Attach the scanned form (PDF, JPG or PNG, up to 10 MB), enter the name of the guardian who signed, and optionally the date they signed.
- Click Save consent. The card now shows the consent as recorded, who uploaded it, and a link to view the scanned form.
The signed form is stored securely against the student's record. The consent is attributed to the staff member who uploaded it.
Checking and withdrawing consent
The Guardian Consent card on the student's record shows the current status:
- Not recorded — no consent captured yet.
- Consented (online) / Consented (signed form) — active consent, with the date and method.
- Withdrawn — consent was withdrawn.
A guardian can withdraw consent at any time. To record a withdrawal, use Withdraw consent on the card. You can record fresh consent afterwards (online or by uploading a new signed form).
Consent also controls the parent portal: a guardian can only open a child's fees, results, attendance, profile and medical pages while an active consent is on record. If consent is not recorded — or is withdrawn — those pages are blocked until consent is captured again.