Who we are
Riza operates a global directory in which member schools publish sustainability initiatives and baseline assessment results. Accounts belong to verified member schools and are operated by the student sustainability representatives and staff leads the school authorises.
Data we collect
From the account holder: name, school email address and password credentials managed by our authentication provider.
From the institution: school name, country, city, school type, student count band, an optional logo URL and an optional descriptive bio.
Content submitted by the school: baseline assessment answers and scores, and initiative records including title, category, description, measured result, cost band, start date, lessons learned and an optional image URL.
Basic technical data needed to operate the service, such as request logs and error reports.
Personal data we do not hold
We hold the name and school email address of each account holder, named and verified by their school. Schools must not submit personal data about students who are not account holders — names, contact details, identifiable images or attainment records — in any free-text field, image or linked file.
How we use it
To authenticate account holders, to publish approved school profiles and initiatives to other signed-in members, to calculate and display Riza Scores, and to produce aggregate network counts such as the number of member schools, countries and published initiatives.
What is visible to others
Once a school is approved, its profile, Riza Score tier and published initiatives are visible to other signed-in member schools. Aggregate counts shown publicly contain numbers only, never records. Account holders' email addresses are never published.
Storage, security and retention
Data is stored with our hosting and database provider and protected by row-level access rules so that a school can only edit its own records. We keep every assessment submission so schools can track change over time. Institutional records are retained while the account is active and deleted on request.
Your rights
Member schools may request access to, correction of, export of or deletion of their data by writing to us. We will respond within one month.
Contact
This document is a working draft prepared for the Riza network and should be reviewed by a qualified legal or safeguarding professional before launch.