We use this privacy notice to disclose the privacy practices of Personalized Educational Solutions, Inc and its dba, Education Station Hopkinton, hereinafter referred to jointly as “PES”, and in accordance with privacy regulations, such as the General Data Protection Regulation (GDPR). We aim to help you understand what personal data we collect, how we use it, how it is secured, and what control you have over it. This notice applies solely to data collected by PES websites, domains, software, and/or through other means by PES employees or contractors.
This notice will define the following:
What personal data is collected from these websites, domains, and softwares.
How personal data is collected, used, shared, stored, and otherwise processed.
The security procedures implemented to protect your data.
Your choices and rights regarding the use of your data.
How you can contact us for issues such as to correct inaccuracies of your data or to request the removal of your personal data.
Please read the following privacy notice to understand the processing, collection, sharing, protection, and your rights associated with your personal data.
Who We Are
Personalized Educational Solutions, Inc is a boutique educational consulting firm that also does business as Education Station Hopkinton, an extension of Personalized Educational Solutions, Inc centered around small-group academic programs. For the purposes of this notice, Personalized Educational Solutions, Inc and Education Station Hopkinton will be jointly referred to as PES. It is PES’ mission to provide students and their families with academic support at all stages of their educational journeys, and to do so we collect and use personal data that you provide.
For the purposes of this notice, we act as the “data controller.” We take on this role as we determine how your personal data is used and processed.
We have appointed a Data Protection Officer for assisting with questions, requests, and complaints in regards to this privacy notice and the collection and processing of your personal data. For details on how to contact us, see the Contact Information section at the end of this notice.
Data We Collect
We have access to any data that you voluntarily provide via use of our websites, email, telephone, mail, forms, video call, user registration, surveys, inputted cookie preferences, and sharing of documents.
Through these means, we collect the following types of data:
Dates of birth
Individual Educational Plans (IEPs)
Credit card information
Information about any complaints, inquiries, and communication you make with us
Details on services received from us
Your IP address and cookie preferences may be collected through CookieYes, acting as the Data Processor for PES. This data is voluntarily collected in order to store your cookie preferences and is deleted at the end of your session on a PES website.
Any or all of the above data listed may be collected through any of the following Google Suite products: Gmail, Drive and Docs, Calendar, and Groups for Business. Any data collected in this manner is thus additionally subject to the Google Cloud Privacy Notice, found here: https://cloud.google.com/terms/cloud-privacy-notice?hl=en
How We Use Your Data
Your personal data may be used for the following purposes:
Customization of content and user experience.
Identify you when you use PES websites, domains, or softwares.
Record cookie or data preferences.
Account set up and administration.
Conducting polls, surveys, and contests.
Internal research and development.
Fulfillment of obligations outlined in any contracts with users.
Fulfillment of necessary pre-contract steps
Gathering feedback and opinions on our provided services.
Notification to users of changes to our services.
Respond to your requests and comments.
Process your transactions.
Provide appropriate services.
Legal Basis of Processing
We process personal data for the purpose of performing a contract between PES and the data subject or in order to take steps at the request of the data subject prior to entering into a contract. We take only the personal data that is necessary to perform this contract or take pre-contractual steps, including but not limited to building a student profile, conducting a free profile review, or performing a baseline tutoring assessment.
We also process personal data for other purposes of our own legitimate interests, granted that those interests do not override any of our users own interests, rights, and freedoms. Such legitimate interests include processing for the purposes of marketing, research, and business development.
Special Category Data
Special category data may be collected voluntarily and processed by PES including personal data revealing racial or ethnic origin, personal data revealing political opinions, personal data revealing religious or philosophical beliefs, data concerning health: Neuropsychological evaluations and other health history (when writing essays, or to provide context for our services/help us to better server clients), and data concerning a person’s sexual orientation.
Specific Data Use
To engage our services, you must voluntarily provide contact information (eg. name and billing address), personal information (eg. academic history and neuropsychological evaluations), and financial information (eg. credit card number and expiration date). This data is used to contact you, suggest appropriate products and services, and provide requested services.
To fully access the website and the services offered by PES, you, as a user, can voluntarily register for an account by completing a registration form. Certain data is collected during this process, including your name and email address. This data is used to contact you, suggest appropriate products and services, provide requested services, and improve your user experience.
Personal data may be used without knowledge or consent in situations when legally required or permitted, or when personal data has been anonymized or pseudonymized so it is no longer associated with the user. This means we have removed personally identifying information so the data we’re left with cannot be tied back to you as an individual.
How We Share Your Data
Personal data may be shared with regulators in compliance with legal regulations.
Personal data may also be shared with third parties when it is necessary to provide services to users, and/or for other legitimate interests. Third parties include service providers, professional advisors, and other members of PES’ network.
Third parties that may access personal data are fulfilling the following services: web hosting, scheduling, billing, analytics, IT and cloud services. These parties do not retain, share, or use personal data beyond the defined purpose of fulfilling the service.
Where We Process Your Data
If you are visiting a PES website from outside the United States, be aware you are sending personal information to our servers located in the US.
Under certain circumstances, your personal data that we collect may be transferred to other countries for various purposes outlined below.
We have implemented security measures and controls to ensure data remains appropriately protected in these jurisdictions, including data transfer agreements.
How Long We Store Your Data
We will only retain personal data for the duration necessary to fulfill the purposes for which it was collected. Personal data may also be retained for longer periods if it is solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes. When defining the appropriate retention length, we adhere to relevant legal requirements. See our retention schedule, located here, for details for data retention periods.
How We Protect Your Data
Securing your data is a priority for us, while both online and offline. We have implemented appropriate safeguards to prevent personal data from being lost, misused, accessed, altered, or disclosed by unauthorized parties.
We collect credit card information when you place an order. This data is encrypted and secured throughout its transmission. Secure web access can be verified by the lock icon in your internet browser address bar and by the use of “https” at the beginning of the web address, where the “s” indicates a secure connection.
Employees and third parties are provided only with personal data on a need-to-know basis and only the minimum amount they require to complete their specific job. All employees are also subject to data agreements and undergo biannual training on the proper handling of sensitive data. Contractors are subject to data agreements and undergo initial training on the proper handling of sensitive data.
Procedures have been developed and tested to handle a potential data breach. These procedures are designed to ensure affected individuals and regulators are notified of the breach and damages can be minimized. In the event of a data breach, we have a dedicated incident response team at Coalition who will respond to the event quickly to mitigate any threat that may compromise your personal data.
Information from Web Browsers
This information includes and is not limited to browser type, language preference, date and time each visitor requests. We may also collect IP address information to monitor and protect the security of our website and infrastructure.
Useful information about cookies, including information about deleting or blocking cookies, can be found at: https://www.allaboutcookies.org
- If you wish to withdraw your consent at any time, you will need to delete your cookies using your internet browser settings.
Your Rights Regarding Your Personal Data
We aim to maintain data that is accurate and up-to-date. Under the circumstance that your personal data changes (e.g. moving addresses), please notify us of any changes.
In certain instances, you have the legal right to the following:
Request all data we have collected about you, if any.
Request correction to the personal data we have collected about you.
Request we delete or remove personal data when there is no legitimate need for us to continue processing it.
Object to the processing of personal data.
Request transfer of your personal data.
Opt out of contact with us at any time.
Express any concern about any data we have collected about you.
To exercise these rights, please contact us via the email or mail information provided below in the “Contact Information” section.
Note: If you choose to withdraw your consent at a later date this will not change the fact that your personal data was legally processed up to that point.
On our website, you may encounter links to other websites. Be aware that we are not responsible for the content or privacy practices of these other sites. We encourage all users to read the privacy notices of any other sites that collect your personal data.
For any questions, concerns, or requests to exercise your rights outlined in this privacy notice, please contact us via email at firstname.lastname@example.org or mail us at:
Personalized Educational Solutions, Inc
PO Box 630
Hopkinton, MA 01748
Changes to This Privacy Notice
This privacy notice was last updated on July 25, 2022.
Any changes to this privacy notice can be found on our website at https://www.personalizededucationalsolutions.com/privacy.