Introduction

Online Bright Academy^® ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our tutoring services. OBA^® is a registered trademark.

We understand that student privacy is paramount. We treat all personal information with the utmost care and maintain strict confidentiality standards in compliance with international data protection regulations.

1. Information We Collect

Personal Information

When you register for our tutoring services, we collect:

• Full name and date of birth
• Email address and phone number
• Current exam level (IGCSE, O-Level, A-Level)
• Subjects of interest and academic goals
• Payment information (processed securely through third-party providers)
• Academic performance data and progress reports

Session Data

During tutoring sessions, we may collect:

• Session recordings (only with explicit student/parent consent)
• Notes and feedback from tutors
• Mock test results and performance metrics
• Communication records (emails, messages)

Automatic Information

We automatically collect certain information when you use our website:

• IP address and device information
• Browser type and operating system
• Pages visited and time spent on each page
• Referring website information

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide tutoring services and manage your account
• Communication: To send updates, confirmations, and educational materials
• Improvement: To enhance our services and user experience
• Academic Support: To track progress and provide personalized learning recommendations
• Payment Processing: To process tuition payments securely
• Compliance: To comply with legal obligations and regulations
• Safety: To protect against fraud and unauthorized access

3. Data Security & Protection

We implement comprehensive security measures to protect your personal information:

• Encryption: All data is encrypted in transit using SSL/TLS protocols
• Secure Servers: Data is stored on secure, password-protected servers
• Access Control: Only authorized personnel have access to student data
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Backup Systems: Data is regularly backed up to prevent loss
• Privacy Training: All staff members receive privacy and data protection training

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining reasonable safeguards.

4. Student Privacy Protection

We place special emphasis on protecting the privacy of our student users:

• No Third-Party Sharing: We do not sell or share student data with third parties for marketing purposes
• Parental Controls: Parents/guardians can review and control their child's data
• Age-Appropriate Practices: We comply with COPPA and similar regulations for students under 13
• Consent Requirements: We obtain explicit consent before collecting sensitive information from minors
• Data Minimization: We collect only the information necessary to provide our services
• Limited Retention: We retain data only for as long as necessary to provide services

5. Third-Party Services

We use select third-party services to enhance our platform:

• Video Conferencing: Zoom and Google Meet (encrypted, GDPR-compliant)
• Payment Processing: Stripe and PayPal (PCI-DSS compliant)
• Analytics: Google Analytics (anonymized data only)

All third-party providers are carefully vetted and contractually obligated to maintain the same privacy standards we uphold.

6. Your Rights

You have the following rights regarding your personal information:

• Access: You can request access to your personal data at any time
• Correction: You can request correction of inaccurate information
• Deletion: You can request deletion of your data (subject to legal requirements)
• Portability: You can request your data in a portable format
• Opt-Out: You can opt out of marketing communications
• Withdraw Consent: You can withdraw consent for data processing

To exercise any of these rights, please contact us at [email protected].

7. Cookies & Tracking

We use cookies to enhance your experience on our website. Cookies are small files stored on your device that help us remember your preferences and improve functionality. You can control cookie settings through your browser preferences. Disabling cookies may affect some website features.

8. International Compliance

We comply with major international data protection regulations including:

• GDPR (General Data Protection Regulation) - European Union
• CCPA (California Consumer Privacy Act) - United States
• COPPA (Children's Online Privacy Protection Act)
• Local data protection laws in countries where we operate

9. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or by posting a notice on our website. Your continued use of our services constitutes your acceptance of the updated Privacy Policy.