Effective Date: July 29, 2025
Last Updated: July 29, 2025

1. Introduction

Prep With Dua ("we," "us," or "our") operates a tutoring service for high school students preparing for AP and IB examinations. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services, website, or interact with our advertisements on social media platforms.

2. Information We Collect

2.1 Personal Information Collected Directly

We collect the following personal information when you:

Fill out our lead forms or contact forms

Schedule consultations or tutoring sessions

Communicate with us via email, phone, or messaging

Categories of Personal Information:

Identifiers: Full name, email address, phone number

Contact Information: Mailing address (if provided)

Educational Information: Student's grade level, subjects needing assistance, academic performance details

Communication Records: Email conversations, session notes, progress reports

2.2 Information Collected Automatically

When you visit our website or interact with our online content:

Technical Information: IP address, browser type, device information, operating system

Usage Data: Pages visited, time spent on site, clickstream data

Cookies and Tracking: We use cookies and similar technologies for website functionality and analytics

2.3 Information from Third Parties

Social Media Platforms: If you interact with our ads on Facebook/Instagram, we may receive information through Meta's advertising tools

Analytics Providers: Google Analytics and similar services provide aggregated usage statistics

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Educational Services

Provide personalized tutoring services

Develop customized study plans

Track student progress and academic performance

Schedule and coordinate tutoring sessions

Communicate with parents/guardians about student progress

3.2 Business Operations

Respond to inquiries and provide customer support

Process payments and maintain billing records

Improve our services and educational materials

Conduct internal analytics and performance monitoring

3.3 Marketing and Communications

Send service-related notifications and updates

Provide information about our tutoring programs

Deliver marketing communications (with consent where required)

Retarget advertisements on social media platforms

3.4 Legal and Safety

Comply with applicable laws and regulations

Protect our rights and prevent fraud

Ensure student safety and appropriate conduct

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

Payment Processors: Stripe/Wise for secure payment processing

Communication Tools: Email service providers, video conferencing platforms

Analytics Services: Google Analytics, Meta advertising tools

Customer Relationship Management: CRM systems for managing client relationships

4.2 Educational Purposes

We may share student progress information with parents/guardians

Academic performance data may be discussed in consultation calls

Anonymized success stories may be used for testimonials (with explicit consent)

4.3 Legal Requirements

We may disclose information when required by law or to:

Comply with legal process or government requests

Protect our rights, property, or safety

Prevent fraud or illegal activities

Respond to emergencies

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction.

5. Data Retention

We retain personal information for as long as necessary to:

Provide ongoing tutoring services

Maintain educational records and progress tracking

Comply with legal obligations

Resolve disputes and enforce agreements

Specific Retention Periods:

Student Records: Retained for 2 years after completion of services

Communication Records: Retained for 3 years

Payment Information: Retained per financial regulations/process of payments

Marketing Data: Retained until consent is withdrawn or 2 years of inactivity

6. Children's Privacy

6.1 COPPA Compliance

Our services are directed toward high school students (typically ages 14-18). While we primarily collect information from parents/guardians, we recognize that some students may be under 13.

For students under 13:

We obtain verifiable parental consent before collecting personal information

Parents have the right to review, delete, or refuse further collection of their child's information

We collect only information necessary for educational purposes

6.2 FERPA Considerations

When working with students, we maintain educational records in accordance with best practices, though FERPA does not directly apply to private tutoring services.

7. Your Privacy Rights

7.1 General Rights

You have the right to:

Access the personal information we hold about you

Request correction of inaccurate information

Request deletion of your information (subject to certain exceptions)

Opt out of marketing communications

Withdraw consent where applicable

7.2 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have additional rights:

Right to Know: Request disclosure of personal information categories, sources, and business purposes

Right to Delete: Request deletion of personal information

Right to Opt-Out: Opt out of sale or sharing of personal information

Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

Note: We do not "sell" personal information as defined by CCPA.

7.3 European Residents (GDPR Rights)

If you are in the European Economic Area, you have rights under GDPR:

Lawful Basis: We process information based on legitimate interests, contract performance, or consent

Data Subject Rights: Access, rectification, erasure, portability, and objection rights

Data Protection Officer: Contact information provided below

8. International Data Transfers

If you are located outside the United States, please be aware that information we collect may be transferred to and processed in the United States, where privacy laws may differ from your jurisdiction.

For international transfers, we implement appropriate safeguards such as:

Standard Contractual Clauses

Adequacy decisions where applicable

Other lawful transfer mechanisms

9. Data Security

We implement reasonable security measures to protect personal information:

Encryption: Sensitive data encrypted in transit and at rest

Access Controls: Limited access on a need-to-know basis

Regular Updates: Security systems regularly updated and monitored

Training: Staff trained on privacy and security best practices

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links and Services

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access.

11. Social Media and Advertising

11.1 Meta Advertising

We use Facebook and Instagram advertising to reach potential clients. When you interact with our ads:

Meta may share limited information about your interaction

We may use Meta's tracking pixels for retargeting

You can control ad preferences through your Facebook/Instagram settings

11.2 Analytics and Tracking

We use various analytics tools to understand website usage and improve our services. You can opt out of tracking through:

Browser settings and privacy controls

Analytics opt-out tools

Cookie preference centers

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will:

Post the updated policy on our website

Update the "Last Updated" date

Notify you of material changes via email or prominent website notice

Obtain consent for material changes where required by law

13. Contact Information

For questions, concerns, or to exercise your privacy rights, contact us:

Prep With Dua
Email: [[email protected]]
Address: [Dufferin, Toronto, ON]

14. State-Specific Privacy Rights

14.1 California

California residents have specific rights under the CCPA/CPRA outlined in Section 7.2 above.

14.2 Virginia, Colorado, Connecticut

Residents of these states have similar rights to California residents under their respective state privacy laws.

15. Complaints and Enforcement

If you believe we have violated your privacy rights, you may:

Contact us directly using the information above

Acknowledgment: By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.