Privacy Policy

1. Introduction and Overview

EduFlex Academy ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, online learning platform, mobile applications, and related services (collectively, the "Services").

This policy applies to all users of our Services, including students, instructors, corporate clients, and visitors to our website. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

2. Information We Collect

We collect various types of information to provide and improve our Services, personalize your learning experience, and communicate with you effectively.

2.1 Information You Provide Directly

• Account Information: Name, email address, password, phone number, profile photo, professional title, and company affiliation
• Payment Information: Credit/debit card details, billing address, and transaction history (processed securely through third-party payment providers)
• Profile Information: Educational background, professional experience, learning goals, skills, and interests
• Course Activity: Course enrollments, progress, completion status, quiz and assignment submissions, grades, and certificates earned
• Communications: Messages sent through our platform, customer support inquiries, survey responses, and feedback
• User-Generated Content: Forum posts, comments, questions, project submissions, and reviews

2.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers
• Usage Data: Pages viewed, time spent on pages, courses accessed, video watch time, navigation paths, and interaction with course content
• Location Data: General geographic location based on IP address (we do not collect precise GPS location unless you explicitly grant permission)
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and collect analytics data

2.3 Information from Third Parties

• Social Media: If you connect your account through social media platforms (e.g., LinkedIn, Google), we may receive basic profile information
• Employers and Organizations: For corporate training programs, we may receive employee information from your employer
• Payment Processors: Transaction confirmation and payment status information
• Analytics Providers: Aggregated usage statistics and demographic information

3. How We Use Your Information

We use the information we collect for the following purposes:

Marketing Communications: We will only send you promotional emails if you have opted in to receive them. You can unsubscribe at any time using the link in our emails or by updating your account preferences.

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Cloud hosting and infrastructure (AWS, Google Cloud)
• Payment processing (Stripe, PayPal)
• Email delivery and marketing automation (SendGrid, Mailchimp)
• Analytics and performance monitoring (Google Analytics, Mixpanel)
• Customer support tools (Zendesk, Intercom)
• Content delivery networks (Cloudflare)

These providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

4.2 Corporate Clients

If you access our Services through a corporate or enterprise account provided by your employer, we may share your learning progress, completion status, and performance data with your organization's administrators as specified in the enterprise agreement.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Compliance with subpoenas, court orders, or legal processes
• Protection of our legal rights and property
• Investigation of fraud, security issues, or violations of our Terms
• Protection of the safety of our users or the public

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you choose to publish your profile or achievements publicly.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Here's what you need to know:

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (e.g., session management, security)
• Performance Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Used to deliver relevant ads (only with your consent)

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies (not recommended)

For more information about managing cookies, visit www.allaboutcookies.org.

6. Data Security and Retention

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Information: Retained while your account is active and for up to 3 years after account closure for legal and operational purposes
• Course Progress Data: Retained indefinitely to provide lifetime access to completed courses and certificates
• Transaction Records: Retained for 7 years for accounting and tax compliance
• Marketing Data: Retained until you unsubscribe or request deletion
• Cookies and Analytics: Typically retained for 26 months

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights (All Users)

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Receive your data in a structured, commonly used format
• Objection: Object to certain processing activities, such as marketing communications

GDPR Rights (European Union Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to restriction of processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to not be subject to automated decision-making

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@eduflex-academy.com. We will respond to your request within 30 days. You may need to verify your identity before we can process your request.

8. International Data Transfers

EduFlex Academy is based in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

We implement appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for transfers to countries with adequate data protection laws
• Binding Corporate Rules for transfers within our corporate group

By using our Services, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection laws.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

For users between 13 and 18 years old, we require parental or guardian consent before creating an account and participating in our courses.

10. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by EduFlex Academy. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of third parties, and we encourage you to read their privacy policies before providing any information to them.

Examples of third-party services we may integrate with include:

• Social media platforms (LinkedIn, Facebook, Twitter)
• Payment processors (Stripe, PayPal)
• Video hosting services (Vimeo, YouTube)
• Collaboration tools (Slack, Microsoft Teams)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you by:

• Posting a notice on our website
• Sending an email to the address associated with your account
• Displaying an in-platform notification

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Privacy Team using the information below. We are committed to resolving privacy-related issues promptly and transparently.