PRIVACY POLICY
LAST UPDATED 06 Oct 2020
CoderCookies Inc. is a company incorporated in Ontario, Canada. This privacy policy explains how CoderCookies Inc. uses and protects any information that it collects about you when you use its website and any other services provided by CoderCookies Inc.
PURPOSE AND SCOPE
This privacy notice aims to give you information on how CoderCookies Inc. collects and processes your personal data through your use of this website and any other services provided by CoderCookies Inc, including any data you may provide through this website when you create an account.
This website and any other services provided by CoderCookies Inc is not intended for children and we do not knowingly collect data relating to children. Parental supervision is required if children are to use this website.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Our website and services operate in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) which is a directly binding legislative act. CoderCookies Inc. is committed to maintaining the trust and confidence of our visitors to our website and any other services provided by CoderCookies Inc. This Privacy Policy explains the types of personal data that we may collect from you, how we use it, the limited conditions under which we may disclose it to others, how we keep it secure, and your rights regarding your personal data.
CONTROLLER
CoderCookies Inc. is the controller and is responsible for your personal data (collectively referred to as “we”, “us” or “our” in this privacy notice).
PERSONAL DATA WE COLLECT
- Contact Data includes your name, email address, telephone number, postal address, postcode
- Background Data (only applicable to tutors) includes your date of birth, ID numbers, Photo ID, Address ID, CRB/DBS documentation, and change of name documentation.
- Technical Data includes your IP address, browser details, operating system details, pages visited, actions taken.
- Login Data includes your username, password, and any unique account ID numbers.
- Tutor Profile Data (only applicable to tutors) includes the subjects you may tutor, the level at which you may tutor those subjects, your prices, any previous tutoring or experience you may have, your travel preferences, qualifications, native language, details regarding your education and employment, any photos or videos that you choose to upload, information received from references that you provide, feedback from students who have used your services as a tutor, and information you provide in your biography.
- Student Profile Data (only applicable to students) includes the subject in which you desire tutoring and your level of education.
- Messaging Data includes any information provided by your use of the website’s messaging system.
- Aggregate Data. Aggregate data may be derived from your personal data but this data does not directly or indirectly reveal your identity. For example, we may aggregate certain usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregate data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
- Special Category Data. We do collect certain special category data from Tutors (see above, Background Data).
CONFIDENTIALITY OF YOUR PASSWORD
Where you have chosen a password, which enables you to access certain parts of our Platforms, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
IF YOU FAIL TO PROVIDE YOUR PERSONAL DATA
Where we need to collect personal data by law, under the terms of a contract we have with you, or where we will be otherwise unable to provide you with service, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel the service we provide to you or our website may not work for its intended purpose, but we will notify you if this is the case.
HOW WE COLLECT PERSONAL DATA
We collect your personal data in several ways, but always in compliance with the law. We will collect your personal data in the following manners:
- Online Forms. Most information collected from you is collected via an online form that you fill out.
- Cookies and Automatic Collection. Certain information is collected by placing a cookie on your computer. Some cookies are required for the operation of our website and are automatically loaded onto your computer. Other cookies are non-essential cookies and require you to opt-in before they will be loaded onto your computer. In addition, certain information may be collected automatically, including your IP address, your type of operating system, browser type, and the pages you visited and actions you have taken on our website.
HOW WE USE PERSONAL DATA
The following table outlines the various purposes and activities for which we will use your data as well as the lawful basis that allows us to use the data:
Purpose/Activity | Type of data | Lawful basis for processing |
General Website | ||
To improve the security of our website and protect against online attacks (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data). | Technical Data | Legitimate Interests (provision of network and IT services, network security, and administration, to prevent fraud) |
To use data analytics to improve our website, services, marketing, customer relationships, and experiences. | Technical Data | Legitimate Interests (to define types of users of our services, to keep our website updated with relevant content, to develop our business, and to inform our marketing strategy) |
Enable unregistered users to search for Tutors. | Contact Data Student Profile Data |
Consent |
Enable all users to contact customer service via email. | Contact Data | Consent |
To manage our relationship with you, including notifying you about changes to this privacy policy or any other changes or updates related to the website. | Contact Data | Consent Legal Obligation |
To administer Student and Tutor accounts, relationships, and use of the website, including statistical analysis to better understand their use of the website and website maintenance. | Contact Data Technical Data Login Data Tutor Profile Data Student Profile Data Messaging Data |
Consent Legitimate Interests (maintenance of user accounts, comply with user requests, and ensure the integrity of the user’s experience) Performance of a Contract |
To administer payment processing. | Contact Data | Consent Performance of a Contract |
Student | ||
To register new Students. | Contact Data Student Profile Data Login Data |
Consent Legitimate Interests (verifying applicant is not a malicious user) Performance of a Contract |
To search, select, and provide Students with a Tutor or Tutors. | Contact Data Student Profile Data |
Consent Performance of a Contract |
To connect the Student and the Tutor and to allow them to communicate via the website messaging system. | Contact Data Student Profile Data Messaging Data |
Consent Legitimate Interests (preventing malicious use of the messaging system, improper and illegal communications, and abuse of the website and service) Performance of a Contract Legal Obligation |
Tutor | ||
To register new Tutors. | Contact Data Tutor Profile Data Login Data |
Consent Legitimate Interests (verifying applicant is not a malicious user) Performance of a Contract |
To verify Tutor’s identity and complete a security check. | Background Data | Consent Legitimate Interests (ensure Tutor is not ineligible for use of website) Performance of a Contract |
To create a Tutor profile to include in the Tutor directory. | Tutor Profile Data | Consent Performance of a Contract |
To connect the Tutor and the Student and to allow them to communicate via the website messaging system, including automated profiling of the Tutor during the process of matching the Student and Tutor. | Contact Data Tutor Profile Data Messaging Data |
Consent Legitimate Interests (preventing malicious use of the messaging system, improper and illegal communications, and abuse of the website and service) Performance of a Contract Legal Obligation |
To provide a reference for a Tutor. | Contact Data | Consent Legitimate Interests (ensure Tutor is not ineligible to use the website) Performance of a Contract |
We will only use your personal data in compliance with the law. Most commonly, we will use your personal data in the following circumstances:
- Internal record keeping.
- To provide you with services and manage your account.
- To improve our products and services.
- To customize the website according to your interests.
If you have opted to receive direct marketing materials, we will send you promotional emails about new products, special offers, or other information which we think you may find interesting.
From time to time, we may also use your information to contact you by email or text regarding offers or promotions from carefully selected third parties if you have agreed to being contacted in this way.
MINORS (AGE 13 AND UNDER)
CoderCookies Inc. does not knowingly collect personally identifiable information from children under the age of 13. If you are under the age of 13, please do not provide your contact information or any other personally identifiable information to CoderCookies Inc. If you are the parent or legal guardian of someone under the age of 13 who may have provided us with information without your knowledge or consent, please contact us to have this information
removed. All contact, including tutoring sessions, between a tutor and any minor should, of course, only take place in ‘a supervised setting.’
HOW WE PROTECT YOUR PERSONAL DATA
We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical, and physical safeguards to protect personal data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal data in our possession. All live servers utilize firewalls and the latest security patches are installed and updated regularly. We also ensure data encryption, password protection, and other access and authentication controls.
WHEN PERSONAL DATA MAY BE SHARED
- Third party businesses who process payments on our behalf.
- Third party businesses who help us develop our business, inform our marketing strategy, and maintain our website with relevant services.
- Third party businesses who provide cloud storage services.
- Third party businesses whom we use to provide identity verification for Tutor background checks.
- Third party businesses who provide communication software we use to contact you in accordance with this Privacy Policy.
- If you are a tutor: we may provide your contact data to students.
- Another organization if we sell or buy (or negotiate to sell or buy) any business or assets.
- With our professional advisers who have a reasonable need to see it.
- We will disclose your information if we are required to by law. We may disclose your information to enforcement authorities if they ask us to, or to a third party in the context of actual or threatened legal proceedings, provided we can do so without breaching data protection laws.
HOW DO WE USE AND MODERATE YOUR MESSAGES?
We may review, scan, or analyze the messages you exchange with other members of our community through our Platforms for fraud prevention, service improvement, customer support purposes, enforcement of the contracts entered into with our members (such as our Terms and Conditions). For example, in order to prevent the circumventing of our online search engine, we may scan and analyze messages sent through our Platforms to check that they do not include any contact details or references to other websites.
We will never scan or analyze your messages with other members of our community for commercial and advertising purposes. We may use automated methods to carry out the moderation of these messages, but no automated individual decision-making is performed in this regard.
TRANSFERRING PERSONAL DATA OUTSIDE CANADA
We may transfer, process, and store personal data we collect in centralized databases located in the United States of America. The United States of America may not have the same data protection framework as the country from which you may be accessing our website. When we transfer personal data to the U.S., we will protect it as described in this Privacy Policy and we will comply with applicable legal requirements providing adequate protection for the transfer of personal information from Canada to the United States of America. In addition, we will endeavor to maintain enforceable contracts with all third parties we may send your data to binding them to this Privacy Policy, standard contractual clauses, the PIPEDA , and other standards for data protection that we may set.
YOUR RIGHTS
We respect your desire to maintain the privacy of your data and will always work with you to ensure your data is being used responsibly. Please always feel free to contact us regarding any questions or concerns you may have regarding your data.
You will always have the following rights with respect to your personal data:
- Right to Revoke Consent. You always have the right to revoke any consent you have given for us to use your data.
- Right of Access. You have the right to access any of your personal data we hold. While you may always access your data via your account and account settings, we may also provide your information to you in a structured format, if you so choose.
- Right to Object to Processing. You have the right to object to our processing of your data except where we can demonstrate that our compelling interests, or the compelling interests of a third party, override your interests.
- Right of Rectification. You have the right to rectify or correct any of your data we hold that is incorrect or inaccurate.
- Right of Erasure. Your right to erasure may be accomplished by deleting your account or by contacting us (and we can delete your account). After your account is deleted, any of your personal data we hold is deleted or anonymized except for a brief record demonstrating our compliance with your request.
- Right to Restrict Processing. You have the right to prevent us from processing your data:
- for a period to enable use to verify the data’s accuracy, if you believe the data is inaccurate or incorrect;
- if our processing is unlawful;
- if you require us to maintain the data for purposes of the establishment, exercise, or defence of a legal claim; or
- for a period pending the verification of our legitimate interests, if you have objected to our legitimate interests in using your data.
- Right of Data Portability. You have the right to request we provide you your data in a structured, commonly used, and machine-readable format and the right to transmit that data to another controller.
- Right to Opt-Out of Marketing. You always have the right to opt-out of any marketing emails or other correspondence we may send to you.
- Right to Opt-Out of Automated Profiling. Tutors have the right to opt-out of our automated profiling of tutors related to search result ranking. You may opt-out in your account settings.
You can exercise your rights in several ways:
- By checking (or not checking) certain boxes on the forms we use to collect your data;
- by opting out or exercising certain of your rights via the settings in your account; or
- by contacting our customer support staff:
- Email: info@codercookies.com
- Mail: 544 Matisse Pl, Mississauga, ON, L5W 1M3
- For further information on how your data is used, how we maintain the security of your data, and your rights to access information we hold on you, please contact:
- Email: info@codercookies.com
- Mail: 544 Matisse Pl, Mississauga, ON, L5W 1M3
HOW LONG PERSONAL DATA IS KEPT
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. Please contact our customer service department at info@codercookies.com for more information.
COOKIES
Like many other websites, CoderCookies Inc. website uses cookies. Cookies are small pieces of information sent by an organization to your computer and stored on your hard drive to allow that website to recognize you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. Most web browsers allow some control to restrict or block cookies; however, disabling cookies may affect your ability to use certain parts of our website. See our Cookie Policy.
THIRD-PARTY LINKS/WEBSITES
Our website and services may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
CHANGES TO OUR PRIVACY POLICY
We will notify you of any changes to this Privacy Policy either by email, in your account, by banner notification on the website, or by any other means that is likely to make you aware of the changes.
HOW TO CONTACT US/ DATA PROTECTION OFFICER
If at any time you would like to contact us with your views about our privacy practices, or with any enquiry relating to your Personal Data, please use one of the following means:
- via our contact page; or
- via email to our Data Protection Officer to info@codercookies.com
- via mail: 544 Matisse Pl, Mississauga, ON, L5W 1M3