Privacy Policy

Last Updated: January 2025

1. Introduction

PeakVarsity ("we," "our," or "us") is committed to protecting your privacy and ensuring transparent handling of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Data Controller Information

3. Information We Collect

3.1 Information You Provide Directly

Data Type	Purpose	Legal Basis	Retention Period
Name and Designation	Service provision, communication	Legitimate interest, Contract	7 years after last contact
Institution/University	Service customization, qualification	Legitimate interest	7 years after last contact
Email Address	Communication, service delivery	Contract, Legitimate interest	7 years after last contact
Phone Number (Optional)	Direct communication	Consent, Legitimate interest	7 years after last contact
Message/Inquiry Details	Service provision, consultation	Legitimate interest	7 years after last contact

3.2 Information Collected Automatically

• Analytics Data: We use Google Analytics to understand website usage patterns, including pages visited, time spent, and user interactions
• Technical Data: IP address, browser type, device information, and operating system
• Cookies: Essential cookies for website functionality and analytics cookies (with your consent)
• Server Logs: Standard web server information for security and performance monitoring

4. How We Use Your Information

4.1 Primary Purposes

• Responding to your inquiries about our services
• Providing consultation and ranking enhancement services
• Communicating about our methodologies and offerings
• Maintaining confidential client relationships
• Improving our website and service delivery

4.2 Legal Bases for Processing (GDPR)

• Legitimate Interest: Providing ranking consultancy services, improving our offerings
• Contract: When you engage our services
• Consent: For marketing communications and optional data collection
• Legal Obligation: Compliance with applicable laws and regulations

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

• Netlify: Website hosting and form processing (Data Processing Agreement in place)
• Google Analytics: Website analytics (anonymized data)
• Brevo (Sendinblue): Email communication platform (GDPR-compliant)

5.2 We Do NOT Share Data With

• Competitors or other ranking consultancy firms
• Universities or academic institutions (unless part of agreed services)
• Marketing or advertising networks
• Data brokers or aggregators

5.3 Legal Disclosures

We may disclose information only when required by law, court order, or to protect our legal rights and the safety of our users.

6. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure with Netlify
• Access controls and authentication protocols
• Regular security assessments and updates
• Confidentiality agreements with all team members

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@peakvarsity.com. We will respond within 30 days.

8. Cookies and Tracking Technologies

8.1 Essential Cookies

Required for website functionality, including form submissions and security features.

8.2 Analytics Cookies

Google Analytics cookies help us understand website usage. These require your consent and can be disabled through our cookie banner or browser settings.

8.3 Managing Cookies

You can control cookies through:

• Our cookie consent banner
• Browser settings
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

9. International Data Transfers

Your data may be processed in the United States through our service providers (Netlify, Google). These transfers are protected by:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Appropriate safeguards as required by GDPR

10. Data Retention

We retain personal data for:

• Contact inquiries: 7 years after last contact
• Client data: 7 years after contract termination
• Analytics data: 26 months (Google Analytics default)
• Marketing data: Until consent is withdrawn

Data is automatically deleted after retention periods expire unless longer retention is required by law.

11. Children's Privacy

Our services are intended for higher education institutions and professionals. We do not knowingly collect data from individuals under 16 years of age.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Website notification
• Email notification to existing contacts
• Updated "Last Modified" date

13. Contact Information

14. Supervisory Authority

If you're in the EU/EEA and have concerns about our data processing, you can contact your local data protection authority. For other jurisdictions, contact the relevant privacy regulator.

This policy ensures we maintain the highest standards of privacy protection while delivering exceptional ranking enhancement services to academic institutions worldwide.