Privacy Policy

1. Introduction

MAS Math & Computing Academy ("we," "our," "us," or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (including all related pages, subdomains, and variants thereof) and use our services, including booking tutoring consultations through our online form.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website or services. By accessing and using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you use our booking form or communicate with us, including:

• Contact Information: Full name, email address, phone number
• Educational Information: Grade level/band, subject or topic, academic goals, school course names, and context about your tutoring needs
• Communication Data: Any messages, notes, or context you provide in the booking form or through email
• Consent Information: Your agreement to be contacted regarding your inquiry

Providing this information is voluntary, but some fields marked as required are necessary to process your booking request and respond to your inquiry.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and usage, including:

• Device Information: Device type, operating system, browser type and version, unique identifiers
• Usage Information: Pages visited, time spent on pages, referring/exit pages, click patterns, search queries
• Technical Information: IP address (may be partially anonymized), approximate geographic location (city/region level), internet service provider
• Performance Data: Page load times, errors, performance metrics

This information is collected through cookies, web beacons, pixels, and similar tracking technologies, as well as through our web analytics service (Vercel Web Analytics).

2.3 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. Specifically:

• Essential Cookies: Required for basic website functionality, form submission, and security
• Analytics Cookies: Used by Vercel Web Analytics to understand site usage patterns and improve our website
• Preference Cookies: Remember your settings and preferences

Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, blocking cookies may affect your ability to use certain features of our website.

2.4 Third-Party Data

We do not intentionally collect information from third parties about you, except as may be provided to us in your booking inquiry or referral.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: Processing your booking request, scheduling consultations, confirming appointments, and delivering tutoring services
• Communication: Responding to your inquiries, sending confirmations, providing updates about your sessions or services, and following up within 24 hours as stated on our website
• Improvement: Analyzing website usage, improving our services, fixing technical issues, and enhancing user experience
• Marketing & Outreach: Sending emails about our services, promotions, updates, or other relevant information (only if you have not opted out)
• Legal Compliance: Complying with legal obligations, enforcing our terms of service, and protecting against fraud or abuse
• Analytics: Understanding traffic patterns and user behavior to optimize our website and services
• Consent Management: Managing your communication preferences and tracking your consent to contact

We process personal data only for purposes that are necessary, lawful, and fair. We do not use your information for purposes that would be considered invasive or inconsistent with this Privacy Policy without obtaining your prior explicit consent.

4. Legal Basis for Processing

Under data protection laws (including GDPR and PIPEDA), we process your personal information on the following legal bases:

• Contract: Processing necessary to perform our contract with you for tutoring services
• Consent: Where you have given explicit consent (e.g., checkbox to be contacted)
• Legitimate Interests: Improving our website, preventing fraud, and protecting our legal rights (balanced against your rights)
• Legal Obligation: Complying with applicable laws and regulations

5. Information Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties.

5.2 When We Share Information

We may share your information only in the following limited circumstances:

• Service Providers: Third-party service providers who assist us in operating our website and providing services, including Formspree (form handling) and Vercel Analytics (analytics). These providers are contractually obligated to use your information only to provide the specific services requested and to maintain the confidentiality of your data.
• Team Members: Our tutors and staff may access your booking information (name, contact details, grade level, topic, goals) only as necessary to provide your tutoring services and respond to your inquiry.
• Legal Requirements: If required by law, court order, or government request, we may disclose information when we have a good faith belief that disclosure is necessary to comply with the law or protect our rights, privacy, safety, or property.
• Business Transfers: If we are involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if such a change occurs.

5.3 International Data Transfers

Our website and services are based in Canada. If you are accessing our website or services from outside Canada, your information will be transferred to, stored in, and processed in Canada or other countries where we or our service providers operate. These countries may have different data protection laws than your home country. By using our website and services, you consent to the transfer of your information to countries outside your country of residence, which may have different privacy rules.

6. Data Security

We implement appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encrypted transmission of sensitive data (SSL/TLS encryption)
• Restricted access to personal information (only authorized personnel)
• Regular security assessments and updates
• Secure storage of booking form submissions through Formspree's secure infrastructure

However, no security system is completely secure, and we cannot guarantee absolute security of your information. While we strive to protect your personal data, transmission over the internet is inherently risky. You are responsible for maintaining the confidentiality of any passwords or account credentials you use.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specifically:

• Booking Form Data: Retained for at least 2 years to manage service delivery, respond to inquiries, and address any follow-up questions or disputes
• Communication Records: Retained for up to 3 years for record-keeping and service quality purposes
• Analytics Data: Retained and aggregated according to Vercel's data retention policies (typically 90 days for granular data)
• Cookies: Session cookies are deleted when you close your browser; persistent cookies are retained according to their expiration date (typically up to 1 year)

After the retention period expires, we will securely delete or anonymize your information unless we are required to retain it longer for legal, tax, or accounting purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and portable format within 30 days of your request.

8.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information. We will make reasonable efforts to correct your information promptly.

8.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (such as where we are legally required to retain the data). We will delete your information within 30 days unless deletion would violate legal obligations.

8.4 Right to Withdraw Consent

If we process your information based on your consent (e.g., to contact you about your booking), you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.

8.5 Right to Object

You may object to certain types of processing, such as marketing communications. To opt out of marketing emails, you can click "unsubscribe" in any promotional email or contact us directly.

8.6 Right to Data Portability

You have the right to request your information in a portable format and to transmit it to another service provider without hindrance.

8.7 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with your local data protection authority.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at arhumfaysal07@gmail.com or call/text +1 437-259-5042. Please include sufficient information to identify you and your request. We will respond to your request within 30 days and may request additional information to verify your identity.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information and terminate the child's use of our website.

For students between 13 and 18, parents or guardians may submit booking requests on their behalf. We require that parent/guardian contact information be provided in the booking form. Any information collected about minors will be treated with the same protections as adult information and will be used only for tutoring service purposes.

10. Third-Party Links

Our website may contain links to third-party websites and services that are not operated by us, including Formspree (form processing), Vercel (analytics and hosting), and Google Fonts. This Privacy Policy does not apply to these third-party websites. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing your information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional privacy rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information is collected, the purpose for collection, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. (We do not sell personal information.)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at arhumfaysal07@gmail.com. Requests will be processed within 45 days.

12. European Privacy Rights (GDPR)

If you are located in the European Union, United Kingdom, or other countries covered by the General Data Protection Regulation (GDPR), you have enhanced privacy rights. You have the right to lodge a complaint with your local supervisory authority if you believe we are not complying with your rights. For residents of the EU, you can contact your national data protection authority.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy. If we make significant changes that affect your rights or how we use your information, we will provide additional notice, such as email notification or a prominent notice on our website.

Your continued use of our website or services after changes to this Privacy Policy means you accept the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us: