Last updated: December 5, 2024
At ElevatEdu, we are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our global job platform.
This Privacy Policy applies to all users of ElevatEdu worldwide, including:
As a global platform, we comply with multiple data protection regulations including: GDPR (European Union), CCPA/CPRA (California), PIPEDA (Canada), and other applicable international privacy laws.
By using our services, you consent to the collection and use of your information as described in this Privacy Policy.
We may use your information to comply with legal obligations, enforce our Terms of Service, protect our rights and property, prevent fraud, and ensure the security of our platform and users.
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:
| Legal Basis | Purpose | Examples |
|---|---|---|
| Contractual Necessity | To provide requested services | Processing job applications, managing profiles |
| Legitimate Interests | Platform improvement and security | Analytics, fraud prevention, marketing |
| Legal Obligation | Compliance with laws | Tax reporting, legal requests |
| Consent | Optional features | Newsletters, certain cookies |
Where we rely on your consent, you may withdraw it at any time through your account settings or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
As a global platform, your data may be transferred to, stored, and processed in countries outside your country of residence, including:
Standard Contractual Clauses (SCCs)
For transfers from EEA/UK to third countries
Adequacy Decisions
Where applicable, for transfers to adequate countries
Data Protection Agreements
With all service providers and partners
You may request information about the specific safeguards applied to international transfers of your data by contacting our Data Protection Officer.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Data encrypted in transit and at rest using industry standards
Strict access limitations and authentication requirements
Continuous security assessments and penetration testing
In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable laws (within 72 hours for GDPR-covered breaches).
Important: While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Type | Retention Period | Basis |
|---|---|---|
| Active User Accounts | Until account deletion + 30 days | Service provision |
| Inactive Accounts | 2 years of inactivity | User convenience |
| Job Applications | 5 years from application | Legal claims |
| Payment Records | 7 years | Tax requirements |
| Marketing Data | Until consent withdrawal | Consent basis |
You may request deletion of your data at any time (see Section 9). We will delete or anonymize your data upon request, except where retention is necessary for legal compliance, dispute resolution, or security purposes.
Right to access your data and receive it in a portable format
Right to correct inaccurate data and request deletion
Right to restrict processing and object to certain uses
All rights under Articles 15-22 of GDPR, including right to data portability, right to object to processing, and rights related to automated decision-making.
Right to know, delete, correct, and opt-out of sale/sharing of personal information. Right to non-discrimination for exercising CCPA rights.
We respect privacy rights under applicable laws in Canada (PIPEDA), Brazil (LGPD), Australia, Singapore, and other jurisdictions.
Through Your Account
Many rights can be exercised directly in account settings
Email Request
Submit requests to hr@elevatedu.org
Verification Process
We verify your identity before processing requests (for security)
We respond to all legitimate requests within 30 days (or within legal deadlines if shorter). Complex requests may require additional time, in which case we will notify you.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us using the information below.
For questions about privacy
Response time: Typically within 2-3 business days
For GDPR-related inquiries
We are committed to addressing all privacy-related inquiries promptly. For GDPR data subject requests, we will respond within 30 days as required by law. For general inquiries, we aim to respond within 3 business days.
For privacy-related inquiries, to exercise your data rights, or to contact our Data Protection Officer, please use the information below.
hr@elevatedu.org
hr@elevatedu.org
(If required under GDPR Article 27)
You have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.
You have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.
For authorities not listed, search for "[Your Country] data protection authority" or visit the EU Data Protection Authorities directory
