Privacy Policy

Effective Date: 11/26/2024

At STEM Success Tutoring, we are committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our tutoring services. By using our website or services, you agree to the terms outlined in this policy.

1. Information Collected Through the Website

1.1 Website Data Collection:
When you visit our website, we may collect data automatically through integrated services such as Squarespace and Google Analytics/Ads:

  • Standard Data Collected by Squarespace:

    • Visitor IP addresses.

    • Browser types and versions.

    • Operating systems.

    • Pages visited, time spent on pages, and referral URLs.

  • This data is used to monitor website performance and improve your browsing experience.

1.2 Google Analytics and Google Ads:

  • We use Google Analytics to understand website traffic and visitor behavior. The data collected via Google Analytics is anonymized and used solely for advertising purposes, such as tailoring Google Ads to better serve potential clients.

  • For more details, please review Google’s Privacy Policy.

1.3 Cookies and Tracking Technologies:

  • Cookies are used to enhance your experience on our website. These may include:

    • Essential Cookies: Necessary for website functionality.

    • Performance Cookies: Help us understand website usage to improve services.

    • Marketing Cookies: Used for personalized advertising.

  • Where required by law, we will obtain your consent before placing non-essential cookies. You can manage or disable cookies through your browser settings.

2. Information Collected From Clients

2.1 Personal Data:
When you book tutoring services or engage with us as a client, we may collect the following information:

  • Contact Information: Name, email address, phone number.

  • Tutoring Data: Assignments, grades, essays, or other documents provided to tailor our tutoring services.

2.2 Data Handling Practices:

  • All data is securely encrypted using end-to-end encryption methods, including elliptic curve cryptography (ECC Curve25519) and the OpenPGP standard.

  • Clients have full transparency over their data via a shareable cloud link containing all collected information.

  • Data is never shared with third parties without explicit client consent.

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Contractual Necessity: To deliver tutoring services, including learning plans and session materials.

  • Consent: When you voluntarily provide personal information, such as tutoring materials or contact details.

  • Legitimate Interests: To improve services, monitor website usage, and communicate effectively, while ensuring data protection.

For U.S.-based clients, we comply with the California Consumer Privacy Act (CCPA) and other applicable data protection laws.

4. Children’s Privacy

4.1 Data Collection for Minors:

  • Our services are not intended for individuals under the age of 13.

  • We do not knowingly collect data from children. If we become aware that a minor has provided personal data without parental consent, we will promptly delete it.

4.2 Parental Responsibilities:

  • Parents or guardians booking on behalf of minors retain responsibility for managing the minor’s interactions and ensuring compliance with our Terms & Conditions.

5. Data Protection and Security

5.1 Security Measures:

  • All client information is encrypted using end-to-end encryption.

  • Data access is restricted to authorized personnel for service delivery purposes only.

5.2 Transparency and Access:

  • Clients have access to all data collected about them via a shareable cloud link.

  • You can request corrections, deletions, or updates to your data at any time.

5.3 Third-Party Data Sharing:

  • We do not sell or share personal data with third parties, except:

    • With explicit client authorization.

    • When required by law (e.g., subpoenas or legal proceedings).

  • Subcontractors or service providers (e.g., payment processors, cloud storage services) are used solely for service delivery and are contractually obligated to protect client data.

6. Breach Notification

6.1 Incident Response:

  • In the unlikely event of a data breach compromising personal information, affected clients will be notified promptly, in compliance with applicable laws.

  • We will report breaches to relevant regulatory authorities within legally required timeframes.

7. Data Retention and Deletion

7.1 Retention Periods:

  • Contact Information: Retained for up to two years after the last interaction.

  • Session Notes and Materials: Retained for up to two years after service completion unless deletion is requested.

  • Billing Records: Retained for seven years to comply with tax and legal obligations.

7.2 Deletion Requests:

  • Clients may request that their data be permanently deleted from our servers and cloud storage at any time. Upon request, we will confirm the removal of all data.

8. Your Rights

Clients have the following rights regarding their data:

  • Access: Review the data we have collected.

  • Correction: Request corrections to inaccuracies in their data.

  • Deletion: Request permanent deletion of data from our servers.

  • Data Portability: Receive a copy of their data in a usable format upon request.

  • Opt-Out: Manage cookies and other tracking technologies via browser settings.

To exercise these rights, contact us via the methods listed in Section 10.

9. Updates to This Privacy Policy

9.1 Policy Revisions:

  • We may update this Privacy Policy to reflect changes in our practices or applicable laws. Updates will be posted on our website with a clear Effective Date listed at the top.

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: stemsuccesstutoring@protonmail.com

By using our website or tutoring services, you agree to the terms outlined in this Privacy Policy. We are committed to maintaining your trust and ensuring the security of your information.