Last Updated: August, 2026
This Privacy Policy explains how our preparatory school (“we,” “our,” or “us”) collects, uses, shares, and protects personal data from users (“you” or “students/parents”) in compliance with the General Data Protection Regulation (GDPR).
As a preparatory school providing non-accredited courses, exam preparation, and educational resources, we act as the Data Controller for the personal information you share with us.
- Data We Collect
We collect only the data necessary to provide our educational preparation services. This includes:
Identity Data: First name, last name, and date of birth (for student verification).
Contact Data: Email address, phone number, and physical billing address.
Academic Data: Target exam details, subjects of interest, and practice test scores.
Technical Data: IP address, browser type, and cookies used to improve your website experience.
- How We Use Your Data (Legal Basis)
Under the GDPR, we rely on the following lawful bases to process your information:
Contractual Necessity: To register you for classes, deliver prep materials, and communicate course updates.
Legitimate Interests: To analyze website performance, improve our prep curriculum, and prevent fraudulent activity.
Consent: To send marketing emails, newsletters, or promotional updates (which you can withdraw at any time).
- Data Retention
We store your information only for as long as necessary to fulfill your preparatory training or to comply with financial and legal reporting obligations (typically up to 1 year after your course completion).
- Your GDPR Rights
If you are in the European Economic Area (EEA), you possess the following rights regarding your data:
Right of Access: You can request copies of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): You can request that we delete your data under certain conditions.
Right to Restrict or Object: You can object to us processing your data for direct marketing.
Right to Data Portability: You can request a digital copy of your data to transfer to another service.
- Third-Party Sharing
We do not sell your personal data. We only share data with trusted third-party service providers essential to running our business, such as:
Secure payment processing platforms.
Email delivery networks for lesson updates.
Website analytics tools.
All third-party processors are strictly bound by data processing agreements to keep your information secure.
- Contact Our Data Representative
If you have questions about this policy, want to exercise your GDPR rights, or wish to file a request, please contact our administrative team at:
Email: postmaster@cbipc.eu
Response Window: We respond to all verified GDPR rights requests within 30 days.