GDPR & Data Protection

1. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have several rights regarding your personal data:

• Right to Access: You can request information about what personal data we hold about you
• Right to Rectification: You can ask us to correct inaccurate personal data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can limit how we use your personal data
• Right to Data Portability: You can request your data in a portable format
• Right to Object: You can object to certain types of processing

2. What Data We Collect

• Full Name
• Email Address
• Contact Number (optional)
• User Account Details (login ID, study progress)
• IP Address and Browser Information
• Usage Data (time spent, test results, progress)

3. How We Collect Your Data

• Directly: when you create an account, fill a form, take a test, or contact us
• Automatically: through cookies and analytics tools
• Via Third Parties: when you sign in using Google OAuth or similar tools

4. Legal Basis for Processing

We process your data based on:

• Consent: Where you have given clear consent
• Contract: Where processing is necessary for our service
• Legal Obligation: Where we must comply with legal requirements
• Legitimate Interest: Where we have a legitimate business need

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Inactive accounts may be deleted after 2 years of inactivity.

6. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

7. International Transfers

If we transfer your data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

8. Making a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.

9. Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at gdpr@elevate.com or through our support page. We will respond to your request within 30 days.

10. Contact Our Data Protection Officer

If you have questions about data protection or our GDPR compliance, you can contact our Data Protection Officer at dpo@elevate.com.