Privacy Policy
This page explains what personal data EduConnect collects, how it is used, and what rights you have. EduConnect aims to process this data in line with the General Data Protection Regulation (GDPR / EU 2016/679).
1. Data Controller
The data controller for personal data on this platform is EduConnect. [The legal entity name, registered address, and contact details should be filled in here before the platform goes live.]
2. Data We Collect
At registration: your email address and password (stored irreversibly hashed). When you complete your profile, optionally: full name, phone, address, date of birth, photo, LinkedIn URL, driving licence, profession, education history, work history, languages, skills, and interests. We also keep your membership and payment records for billing purposes.
3. Purpose and Legal Basis
Your data is processed to provide the membership service you signed up for (performance of a contract), based on the explicit consent you gave at registration, and under our legitimate interest in keeping accounts secure and preventing abuse.
4. Sharing Your Data
Your full profile is never shown to other members without your explicit approval -- every profile view request requires your consent, and your name stays hidden in search results until you approve it. Payment details are shared with our payment provider to process transactions. We do not share your data with any other third party except where legally required, and the platform uses no advertising or analytics trackers.
5. Retention Period
Your data is kept for as long as your account is active. When you delete your account, your personal data is permanently erased; only your payment records are kept, with your name and email removed (anonymised), to satisfy legal accounting/tax obligations.
6. Your Rights
You have the right to access, correct, object to the processing of, and request erasure of your data (the "right to be forgotten"). You can edit your profile and education/work history at any time, and permanently delete your account and all personal data from your account settings.
7. Cookies
The platform uses only a required session cookie to remember that you are logged in. No third-party advertising or analytics cookies are used.
8. Data Security
Your password is stored irreversibly hashed, all database queries are protected against injection attacks, a strict Content Security Policy (CSP) is enforced, and every form is protected against CSRF attacks.
9. Changes and Contact
This policy may be updated from time to time; we will notify you of any material changes. If you have questions about your data, please use the contact channels associated with your account.