This privacy policy explains how personal data is collected, processed and stored in connection with the IB tutoring, IB course and IA Grader services provided through ibcourses.net (the "Site"). It is prepared in accordance with the EU General Data Protection Regulation (GDPR) and applicable data-protection law.
1. Data We Collect
- Contact form / WhatsApp: name, email, phone and message content.
- Payment: payment details are processed through Stripe; card numbers are never stored on our servers.
- IA Grader: uploaded report files are processed temporarily for analysis and deleted once the result is produced; the IP address is kept only to enforce the daily usage limit.
- Site usage data: anonymous analytics such as browser type, pages visited and session duration.
2. Purposes of Processing
- Providing and maintaining the services offered.
- Responding to requests and enquiries.
- Carrying out payment transactions securely.
- Meeting our legal obligations.
- Improving site performance and content (anonymised).
3. Legal Basis for Processing
We process personal data on the following GDPR legal bases: performance of a contract (delivering the services you request), your consent (e.g. optional analytics), our legitimate interests (securing and improving the Site) and compliance with legal obligations (e.g. retaining payment records).
4. Third Parties
We use the following third-party service providers to deliver our services:
- Vercel: site hosting and CDN.
- Stripe: payment processing (PCI-DSS certified).
- Upstash Redis: usage counters and session management.
- WhatsApp: user-initiated communication.
5. International Transfers
Some of our processors may store or process data outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Cookies
The Site uses strictly necessary and functional cookies to improve the user experience. You can manage or delete cookies through your browser; however, some features may then not work correctly.
7. Data Retention
Personal data is kept only for as long as the purpose of processing requires. Contact requests are kept for up to 24 months and payment records for the period required by law. Files uploaded to the IA Grader are deleted once analysis is complete.
8. Your Rights Under the GDPR
Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, as well as to object to processing and to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority. To exercise these rights, please reach us via our contact page.
9. Contact
For questions about this privacy policy: info@ibcourses.net