Protecting Your Student List When Staff Leave

You protect your student list by giving each person access only to what their job needs, masking phone numbers by default, allowing only the owner to export student lists, and keeping an audit log of who did what. Just as important, keep every note and document on the student's record rather than in a counselor's phone, so the history stays when the counselor leaves.

Why this matters

Your student list is one of the most valuable things your consultancy owns. When a counselor leaves, two things can go wrong:

1. They take the list. A copied sheet or a phone full of contacts walks out of the door.
2. The history disappears. Notes, promises and documents were in their personal chats, so the next counselor starts from zero.

No system can stop a determined person from writing down a name. But good controls make taking the list hard, make it visible when someone tries, and make sure the work stays with you.

Step 1: Give each role only what it needs

Set access by role:

• Counselors see only the students assigned to them, and not commissions or company profit.
• Front desk staff see only the queue of new, unassigned enquiries.
• Accountants see finance, not student files.
• Branch managers see their own branch.
• The owner sees everything.

A counselor with access to every student in every branch is a bigger risk than one who sees their own twenty.

Step 2: Mask phone numbers

Show phone numbers partly hidden by default, for example 9841****23. When a staff member truly needs the full number, revealing it should be a deliberate click that is logged. This makes bulk copying slow and visible.

Step 3: Restrict exports to the owner

The fastest way to take a list is an export button. Allow only the owner to export student lists. Counselors don't need it to do their job.

Step 4: Keep an audit log

Record who did what and when: notes added, stages changed, documents reviewed, numbers revealed. You'll rarely need it, but when you do, it settles questions quickly.

Step 5: Keep the history on the record

Make it the rule that notes, documents and messages go on the student's record, not into personal WhatsApp:

• connect your Messenger, Instagram and WhatsApp to a shared inbox. See one inbox.
• have students upload documents to a checklist link, not send photos. See document checklists.
• log calls and meetings as notes

When a counselor leaves, reassign their students. The next counselor sees everything that was said and done.

Step 6: Invite staff, don't let them sign up

Staff should join your workspace by invitation from the owner, and should be removed the day they leave. Public sign-up should be switched off.

When someone leaves: a checklist

1. Remove or deactivate their account the same day.
2. Reassign their students and open follow-ups.
3. Review the audit log for unusual activity in their last weeks.
4. Change any shared passwords they knew.

What software can't do

Controls reduce risk; they don't remove it. Be honest with yourself about the limits:

• Someone with access to their own students can still remember or note down names.
• A counselor who has built trust with a student may keep in touch personally.
• Controls only work if people use the system. A team that still works from personal WhatsApp leaks history whatever the settings say.

So pair the controls with good practice: clear employment terms about client data (ask a lawyer to help with the wording), regular reassignment of students so no one person holds every relationship, and a culture where notes go on the record by default.

How ConsultMarg helps

ConsultMarg has five roles, masks phone numbers with logged reveals, lets only the owner export student lists, keeps an audit log, and admits staff by invitation only. Everything a counselor did stays on the student's record for the next counselor. Read about security or book a demo.