Privacy Policy – Diploma Collective

Last Updated: February 11, 2025

Diploma Collective, a DBA (Doing Business As) of BananaEdu LLC, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using our website and services, you consent to the practices described in this Privacy Policy.

1. Who We Are

Diploma Collective provides educational resources for students and teachers. Our registered business entity is BananaEdu LLC.

We are the data controller responsible for your personal information under GDPR.

2. What Information We Collect

We collect different types of information depending on your use of our services.

a) Information You Provide to Us

When registering, purchasing, or using our services, you may provide:

  • Personal Information: Name, email address, account details, and school affiliation.
  • Payment Details: Billing information (processed securely through third-party payment processors).
  • Communications: Messages, support requests, and feedback.
b) Information We Collect Automatically

When you visit our website, we may collect:

  • Technical Data: IP address, browser type, device information.
  • Usage Data: Pages visited, time spent on pages, interaction with content.
  • Cookies & Tracking Technologies: See Section 7 for more details.
c) Information from Third Parties

We may receive data from:

  • Payment providers (e.g., Stripe, PayPal) to confirm transactions.
  • Analytics providers (e.g., Google Analytics) to analyze website traffic.
3. How We Use Your Information

We use your personal data for the following lawful purposes:

PurposeLegal Basis under GDPR
To create and manage your accountPerformance of a contract
To process payments and ordersPerformance of a contract
To provide customer supportLegitimate interest
To send important service updatesLegitimate interest
To improve our website and servicesLegitimate interest
To comply with legal and regulatory requirementsLegal obligation
To send promotional emails (if opted-in)Consent

We do not sell or rent your personal data to third parties.

4. How We Share Your Information

We only share data when necessary and always in compliance with GDPR. Your data may be shared with:

✅ Service Providers – Payment processors, hosting providers, and analytics tools.
✅ Legal & Compliance Partners – If required to comply with legal obligations.
✅ Business Transfers – In case of a company merger, acquisition, or sale.

All third parties are required to process your data securely and in compliance with GDPR.

5. Data Retention & Your Rights
a) How Long We Keep Your Data

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy. Afterward, your data will be securely deleted or anonymized.

b) Your GDPR Rights

Under GDPR, you have the right to:

🔹 Access Your Data – Request a copy of the personal data we hold.
🔹 Correct Your Data – Update inaccurate or incomplete information.
🔹 Request Deletion (Right to Be Forgotten) – Ask us to erase your personal data.
🔹 Restrict Processing – Limit how we use your data.
🔹 Data Portability – Request your data in a portable format.
🔹 Object to Processing – Opt-out of marketing emails.
🔹 Withdraw Consent – If you previously provided consent, you can withdraw it anytime.

📩 To exercise your rights, contact us at diplomacollective@gmail.com. We will respond within 30 days in compliance with GDPR requirements.

6. International Data Transfers

If you access our services from outside the United States, your data may be transferred and stored in countries that do not have the same data protection laws as your home country. However, we ensure all data transfers comply with GDPR and use safeguards such as:

✔ Standard Contractual Clauses (SCCs)
✔ Data Processing Agreements (DPAs) with service providers

By using our services, you acknowledge and agree to these international transfers.

7. Cookies & Tracking Technologies

We use cookies and tracking technologies to enhance your experience.

a) What Are Cookies?

Cookies are small text files stored on your device that help improve website functionality and analytics.

b) Types of Cookies We Use
  • Essential Cookies – Necessary for site functionality.
  • Analytics Cookies – Help us understand how users interact with our website.
  • Marketing Cookies – Used for personalized ads (only if you opt-in).
c) How to Manage Cookies

You can adjust your cookie settings through your browser or use our cookie consent banner.

8. Security Measures

We take data security seriously and implement:

🔐 Encryption – Secure transmission of sensitive data (e.g., payments).
🔐 Access Controls – Restricted access to personal data.
🔐 Regular Audits – Monitoring and reviewing security practices.

While we take every precaution, no system is 100% secure. Please use strong passwords and keep your login credentials confidential.

9. Third-Party Links

Our website may contain links to third-party sites (e.g., IB-related resources, educational partners). We are not responsible for their privacy practices. Please review their policies before providing personal data.

10. Changes to This Privacy Policy

We may update this policy from time to time. Significant changes will be notified via email or website announcement. Continued use of our services means you accept any modifications.

11. Contact Information

If you have any questions, concerns, or data protection requests, please contact:

📧 Email: diplomacollective@gmail.com

Data Protection Officer (DPO): [Insert Name or Contact Info if applicable]

Acknowledgment

By using Diploma Collective, you acknowledge that you have read, understood, and agreed to this Privacy Policy.