PRIVACY POLICY
At CollegeHighlites (accessible via collegehighlites.com), we are committed to respecting and safeguarding your privacy. This Privacy Policy outlines how we collect, process, store, and protect personal data, and it reflects our strong commitment to compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. COMMITMENT TO PRIVACY AND DATA PROTECTION
CollegeHighlites ensures that your personal information is handled with care, security, and transparency. Our practices are designed with a privacy-first approach to protect your information and empower you to manage your data effectively. We are dedicated to ensuring that personal data is processed lawfully, fairly, and in a transparent manner.
2. SCOPE OF THIS POLICY AND DATA CONTROLLER ROLE
This Privacy Policy applies to all users who access or interact with collegehighlites.com, including registered users, subscribers, and visitors. CollegeHighlites acts as the “data controller” as defined by GDPR and assumes responsibility for the collection and handling of personal data collected directly or indirectly through our digital platform.
If you are located in jurisdictions that recognize the role of a data controller, you may contact us regarding the processing of your personal data at [email protected].
3. CATEGORIES OF DATA PROCESSED
We may collect and process various categories of personal data depending on your interactions with collegehighlites.com, including but not limited to:
A. Usage Data
Data collected automatically during your visit, such as browser type, IP address, operating system, device identifiers, page views, access times, referring URLs, and session duration.
B. Account Data
Information provided during registration or profile creation, such as your full name, physical address, email address, phone number, and assigned usernames or IDs.
C. Profile Data
Information relating to your preferences, activity history on the site, course interests, past purchases, and content interactions.
D. Communication Data
Data arising from direct correspondence, including support inquiries, chat logs, call recordings (where applicable), feedback submissions, and email exchanges.
E. Technical Data
Information about your hardware and software setup, including operating system version, browser plug-ins, display resolution, language and location settings, and other device characteristics.
F. Transaction Data
Details of purchases made through collegehighlites.com, including product selections, purchase dates, billing and delivery addresses, and payment-related information (processed securely by third-party providers).
G. Preference Data
Information related to your consent for marketing communications, notification settings, and expressed interests in specific products or services.
4. LEGAL BASES FOR PROCESSING
We process your personal data based on one or more of the following legal grounds, as applicable under GDPR and other legislation:
– Legitimate Interests: For improving services, maintaining security, analytics, fraud prevention, and user experience enhancement, provided such interests are not overridden by your rights and freedoms.
– Contractual Necessity: When processing is necessary to fulfill a contract with you, such as access to digital products or services.
– Consent: Where you have voluntarily provided consent, such as opting into marketing communications. You may withdraw your consent at any time.
– Legal Obligation: When processing is necessary to comply with applicable law or enforceable government requests.
5. YOUR RIGHTS
If you are located in the European Economic Area (EEA), California, or other applicable jurisdictions, you may exercise the following rights concerning your data:
– Right of Access: Request information about the personal data we hold on you.
– Right to Rectification: Request corrections to inaccurate or incomplete data.
– Right to Erasure (Right to Be Forgotten): Request deletion of personal data, subject to legal retention obligations.
– Right to Restriction: Request limiting how we use your data in certain circumstances.
– Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
– Right to Object: Object to processing based on legitimate interests or direct marketing.
– Right to Non-Discrimination: You will not be denied services or charged different prices for exercising your rights under CCPA.
To exercise any of the above rights, please contact us at [email protected].
6. SECURITY MEASURES
We take the security of your personal data seriously and apply industry-standard measures, including:
– End-to-end encryption for data transmission.
– Role-based access controls and two-factor authentication for administrative access.
– Regular data backups and encrypted storage.
– Continuous monitoring for unusual or unauthorized activity.
– Staff training and internal policies ensuring data confidentiality and adherence to privacy principles.
7. INTERNATIONAL TRANSFERS
Where personal data is transferred outside of your country of residence, including to countries that may not provide equivalent data protection, we ensure such transfers are compliant with applicable laws. Standard contractual clauses, appropriate safeguards, or other legally recognized mechanisms are used to protect your data.
8. DATA RETENTION
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to legal, contractual, or regulatory obligations.
– Usage and Technical Data: retained for up to 12 months for analytics and troubleshooting.
– Account and Profile Data: retained for as long as user maintains an active account plus 24 months after closure.
– Communication Data: retained for 36 months for service improvement and audit purposes.
– Transaction Data: retained for up to 7 years for accounting and legal provisions.
– Marketing Preferences: retained until unsubscribed or consent is withdrawn.
Upon expiration of these periods, personal data is securely deleted or anonymized.
9. COOKIE POLICY
CollegeHighlites uses cookies and other tracking technologies to enhance user experience and collect data for analytics and personalization. The types of cookies we use include:
– Essential Cookies: Enable site navigation, login, and secure services.
– Functional Cookies: Remember user settings and preferences.
– Performance/Analytics Cookies: Collect usage data to optimize performance and content.
– Marketing Cookies: Used for targeted advertising and user segmentation (only placed with consent, where required).
10. COOKIE MANAGEMENT AND COMPLIANCE
You can control cookie preferences through your browser settings or by interacting with our site’s cookie consent manager upon first access. European visitors will be provided with the ability to accept or reject non-essential cookies in line with GDPR requirements. For California residents, we honor “Do Not Sell My Personal Information” requests and do not knowingly sell personal information as defined by the CCPA.
Detailed cookie settings and opt-out options are accessible through the cookie banner or site footer.
11. CHILDREN’S PRIVACY
CollegeHighlites does not knowingly collect or solicit personal information from users under the age of 13. If we discover that personal data from a child under 13 has been provided without verifiable parental consent, we will remove that information promptly. Parents or legal guardians who believe their child has submitted personal data without consent may contact us at [email protected] to request removal.
12. POLICY UPDATES AND USER NOTIFICATIONS
We reserve the right to modify this Privacy Policy as necessary to reflect legal, operational, or technical changes. Updated versions will be posted to collegehighlites.com. Where changes materially affect the nature of data usage or your rights, we will notify you through direct communication or website banners, as appropriate.
13. CONTACT INFORMATION
For any questions, concerns, requests relating to this Privacy Policy, your personal data, or your rights under applicable laws, please contact us using the following email address:
We are committed to upholding your privacy and will respond promptly to your inquiries.
—
CollegeHighlites affirms its full compliance with the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy regulations. Your trust is our priority, and we are here to support your privacy rights.