Privacy Policy
Last Updated: [September 2025]
1. Introduction
This Privacy Policy describes how Utoplearn/comfortLMS (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our online tutoring platform (“Platform”) for English Language, Educational Research, Editing and Proofreading, Presentation and Public Speaking, and IELTS/TOEFL Exam Coaching services.
We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable privacy laws.
2. Information We Collect
2.1 Personal Information You Provide
When you register and use our Platform, we collect:
Account Information:
- Full name
- Email address
- Phone number
- Date of birth
- Profile picture (optional)
- Billing address
- Emergency contact information (if provided)
Educational Information:
- Current education level
- Learning goals and objectives
- Subject preferences
- Language proficiency level
- Previous test scores (for IELTS/TOEFL coaching)
Payment Information:
- Credit/debit card details (processed securely through third-party processors)
- Billing history
- Transaction records
2.2 Information Collected Automatically
Technical Information:
- IP address
- Browser type and version
- Device information
- Operating system
- Log files and usage data
- Cookies and similar technologies
Platform Usage Data:
- Login times and frequency
- Pages viewed and features used
- Class attendance records
- Quiz scores and progress
- Learning material downloads
- Search queries within the platform
2.3 Information from Third-Party Services
Zoom Integration:
- Meeting attendance records
- Session duration
- Technical quality metrics (with your consent)
- Recording metadata (when recordings are made with consent)
Payment Processors:
- Transaction confirmation data
- Payment method verification
- Fraud prevention data
3. How We Use Your Information
3.1 Primary Service Delivery
- Providing tutoring services and educational content
- Scheduling and managing appointments
- Processing payments and managing billing
- Facilitating Zoom video sessions
- Delivering learning materials, quizzes, and assessments
- Tracking educational progress and performance
3.2 Communication
- Sending appointment confirmations and reminders
- Providing customer support
- Sending educational updates and course materials
- Notifying about platform updates or policy changes
- Marketing communications (with your consent)
3.3 Platform Improvement
- Analyzing usage patterns to improve services
- Developing new features and content
- Ensuring platform security and preventing fraud
- Conducting quality assurance and training
- Generating anonymized analytics and reports
3.4 Legal and Business Purposes
- Complying with legal obligations
- Protecting our rights and preventing misuse
- Resolving disputes and enforcing agreements
- Business transfers or acquisitions (with proper notice)
4. Legal Basis for Processing (EU Users)
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
- Contract Performance: To provide tutoring services you’ve requested
- Legitimate Interests: To improve our services, ensure security, and conduct business operations
- Consent: For marketing communications and optional features
- Legal Obligation: To comply with applicable laws and regulations
5. Information Sharing and Disclosure
5.1 We Do NOT Sell Your Personal Information
We do not sell, rent, or trade your personal information to third parties for monetary consideration.
5.2 Authorized Sharing
We may share your information with:
Service Providers:
- Payment processors (Stripe, PayPal, etc.)
- Zoom (for video conferencing)
- Email service providers
- Cloud storage providers
- Analytics services (Google Analytics, etc.)
- Customer support platforms
Tutors and Educational Staff:
- Relevant educational information to provide personalized instruction
- Progress reports and assessment results
- Scheduling and contact information
Legal Requirements:
- When required by law or legal process
- To protect our rights or the safety of users
- In connection with business transfers
- With your explicit consent
5.3 International Transfers
If you are located outside [Your Country], your information may be transferred to and processed in [Your Country] where our servers are located. We ensure appropriate safeguards are in place for international transfers.
6. Data Security
6.1 Security Measures
We implement comprehensive security measures including:
- SSL/TLS encryption for data transmission
- Secure data storage with encryption at rest
- Regular security audits and monitoring
- Access controls and authentication procedures
- Staff training on data protection
6.2 Session Recordings
- Video sessions may be recorded only with prior consent from all participants
- Recordings are used solely for educational and quality assurance purposes
- Recordings are stored securely and deleted according to our retention schedule
- You can request deletion of your recordings at any time
7. Cookies and Tracking Technologies
7.1 Types of Cookies We Use
Essential Cookies:
- Authentication and account access
- Shopping cart and payment processing
- Security and fraud prevention
Functional Cookies:
- User preferences and settings
- Language selection
- Accessibility features
Analytics Cookies:
- Website usage statistics
- Performance monitoring
- Feature optimization
Marketing Cookies (Optional):
- Advertising personalization
- Social media integration
- Campaign effectiveness measurement
7.2 Cookie Management
You can control cookie preferences through:
- Your browser settings
- Our cookie consent manager
- Opt-out links in marketing communications
8. Your Privacy Rights
8.1 Access and Control
You have the right to:
- Access your personal information
- Update or correct inaccurate data
- Delete your account and associated data
- Download your data in a portable format
- Restrict certain types of processing
- Object to processing for marketing purposes
8.2 EU/UK Specific Rights (GDPR/UK GDPR)
- Right to be forgotten (erasure)
- Right to data portability
- Right to object to automated decision-making
- Right to lodge a complaint with supervisory authorities
8.3 California Rights (CCPA)
California residents have additional rights including:
- Right to know what information is collected
- Right to delete personal information
- Right to opt-out of sale (though we don’t sell data)
- Right to non-discrimination for exercising privacy rights
9. Data Retention
9.1 Retention Periods
- Active Accounts: Data retained while account is active
- Inactive Accounts: Data deleted after [X] years of inactivity
- Payment Records: Retained for [X] years for tax and legal purposes
- Session Recordings: Deleted after [X] months unless requested otherwise
- Marketing Data: Retained until you opt-out or [X] years, whichever is sooner
9.2 Deletion Process
When data is deleted:
- Removed from active systems within 30 days
- Backup systems purged within 90 days
- Some data may be retained in anonymized form for analytics
10. Children’s Privacy
10.1 Age Requirements
- Users under 13: Not permitted without parental consent
- Users 13-17: Parental consent required
- We do not knowingly collect data from children under 13 without consent
10.2 Parental Controls
Parents/guardians of minor users can:
- Access their child’s information
- Request deletion of their child’s data
- Limit data collection and use
- Monitor their child’s platform activity
11. Third-Party Links and Services
Our Platform may contain links to third-party websites and services. This Privacy Policy does not apply to:
- External websites and their privacy practices
- Third-party applications or services
- Social media platforms and their data collection
We encourage you to review the privacy policies of any third-party services you access through our Platform.
12. International Users
12.1 Data Processing Location
Your information may be processed in [Your Country/Region]. By using our services, you consent to this transfer and processing.
12.2 Specific Regional Compliance
- EU/UK: GDPR/UK GDPR compliance measures
- California: CCPA compliance procedures
- Canada: PIPEDA compliance standards
- Other regions: Local privacy law requirements
13. Updates to This Policy
13.1 Change Notification
We may update this Privacy Policy periodically. When we make material changes:
- You’ll be notified via email
- A notice will appear on our Platform
- The “Last Updated” date will be revised
13.2 Continued Use
Continued use of our Platform after policy updates constitutes acceptance of the revised terms.
14. Contact Information
14.1 Privacy Questions
For privacy-related questions or concerns:
Email: [email protected]
Phone: +201150466038
14.2 Data Protection Officer (if applicable)
DPO Email: [email protected]
14.3 Exercising Your Rights
To exercise your privacy rights or submit requests:
- Email: [email protected]
14.4 Complaints
If you’re not satisfied with our response, you may contact:
- Your local data protection authority
This Privacy Policy is effective as of the date listed above and applies to all users of our Platform. By using our services, you acknowledge that you have read and understood this Privacy Policy.