White Bridge Education (“we,” “us,” “our,” or the “Company”) is deeply committed to protecting the privacy and security of all individuals who interact with our services. This comprehensive Privacy Policy explains in detail how we collect, use, store, process, share, transfer, and protect your personal information when you access our website at https://www.whitebridgeeducation.com (the “Website”), utilize our educational services, participate in our digital marketing campaigns, submit inquiries or applications, or otherwise engage with our organization.
This Privacy Policy has been carefully designed to ensure compliance with major global data protection and privacy regulations, including but not limited to:
- The European Union General Data Protection Regulation (EU GDPR)
- The California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA)
- The Brazilian General Data Protection Law (Lei Geral de Proteção de Dados – LGPD)
- Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
- The Digital Personal Data Protection Act of India (DPDP)
- The UK General Data Protection Regulation (UK GDPR)
- The Australian Privacy Act 1988
- South Africa’s Protection of Personal Information Act (POPIA)
- Singapore’s Personal Data Protection Act (PDPA)
- Other applicable privacy, data protection, and consumer protection laws worldwide
By accessing or using our Website, submitting personal information, or engaging with our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, please discontinue use of our services immediately.
We encourage you to read this Privacy Policy carefully and review it periodically for any updates or changes.
1. SCOPE AND APPLICATION
This Privacy Policy applies to all personal information collected by White Bridge Education through:
- Our official website and any associated subdomains or microsites
- Mobile applications or platforms we may operate
- Email communications, newsletters, and marketing campaigns
- Social media channels and advertisements (Facebook, Instagram, LinkedIn, YouTube, Twitter, etc.)
- Online forms, surveys, webinars, and virtual events
- Telephone, SMS, or WhatsApp communications
- In-person interactions at educational fairs, exhibitions, or our physical offices
- Third-party platforms where we conduct advertising or lead generation activities
2. DEFINITIONS AND KEY TERMS
For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:
Personal Information/Personal Data: Any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, email address, telephone number, mailing address, IP address, cookie identifiers, device identifiers, location data, educational background, demographic information, and any other data that can directly or indirectly identify you.
Processing: Any operation or set of operations performed on personal data, whether automated or manual, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, erasure, or destruction.
Data Controller: The entity that determines the purposes and means of processing personal data. White Bridge Education acts as the data controller for the personal information collected through our services.
Data Processor: A third party that processes personal data on behalf of the data controller in accordance with documented instructions.
Data Subject: An identified or identifiable natural person whose personal data is being processed. In the context of this Privacy Policy, this refers to you, the individual user or prospective student.
Consent: Any freely given, specific, informed, and unambiguous indication of your wishes by which you signify agreement to the processing of your personal data.
Cookies: Small text files placed on your device that collect information about your browsing activities and preferences.
Sensitive Personal Information: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, health data, or data concerning sex life or sexual orientation. We do not intentionally collect sensitive personal information unless specifically required and authorized.
3. CATEGORIES OF PERSONAL INFORMATION COLLECTED
We collect various categories of personal information from multiple sources and through different channels. The types of information we collect include:
3.1 Information You Provide Directly
When you voluntarily interact with our services, submit forms, or communicate with us, we may collect:
- Contact Information: Full name, email address, telephone number(s), mailing address, city, state/province, postal code, country of residence
- Educational Information: Academic qualifications, educational background, field of study, current institution, graduation year, grade point average (GPA), standardized test scores, transcripts, certificates, and diplomas
- Professional Information: Work experience, employment history, job title, employer name, professional certifications, career objectives
- Program Interest Information: Desired program or course, preferred universities or institutions, intended start date, program level (undergraduate, graduate, doctoral), field of interest, study destination preferences
- Demographic Information: Age, date of birth, gender, nationality, citizenship, language proficiency
- Financial Information: Information related to scholarships, financial aid requirements, budget considerations (we do not collect credit card or banking details directly)
- Communication Content: Messages, inquiries, feedback, comments, reviews, survey responses, testimonials, and any other content you submit to us
- Identity Verification Documents: Passport copies, national ID cards, visa documents, or other identification materials (only when necessary for application processing)
3.2 Information Collected Automatically
When you access our Website or digital platforms, we automatically collect certain technical and usage information:
- Device Information: Device type, model, operating system, browser type and version, screen resolution, device identifiers (IDFA, Android ID)
- Network Information: IP address, internet service provider (ISP), approximate geographic location derived from IP address
- Usage Data: Pages viewed, time and date of visits, time spent on pages, navigation paths, links clicked, scroll depth, mouse movements, form interactions
- Referral Information: Referring website or source, search engine queries that led you to our Website, campaign parameters (UTM tags)
- Session Data: Session duration, frequency of visits, user agent strings, HTTP headers
3.3 Information from Cookies and Tracking Technologies
We deploy various tracking technologies to enhance user experience and analyze Website performance:
- Essential Cookies: Required for Website functionality, security, and user authentication
- Analytics Cookies: Track visitor behavior, traffic patterns, and Website performance (Google Analytics, Adobe Analytics)
- Advertising Cookies: Deliver targeted advertisements, measure ad effectiveness, support retargeting campaigns (Google Ads, Meta Pixel, LinkedIn Insight Tag)
- Functional Cookies: Remember user preferences, settings, and previous interactions
- Web Beacons/Pixels: Small graphic images embedded in emails and web pages to track email opens and user engagement
- Local Storage: Browser-based storage mechanisms for preserving data across sessions
You can control cookie preferences through your browser settings or our cookie consent management tool. However, disabling certain cookies may limit Website functionality.
3.4 Information from Third-Party Sources
We may receive personal information about you from external sources, including:
- Marketing and Advertising Platforms: Google Ads, Facebook/Meta Business Suite, LinkedIn Campaign Manager, YouTube Ads, Twitter Ads, TikTok Ads, programmatic advertising networks
- Educational Partners: Universities, colleges, educational institutions, and partner organizations with whom we collaborate
- Lead Generation Services: Third-party lead providers, affiliate networks, and co-marketing partners who have obtained your consent
- Analytics Providers: Companies providing data analytics, market research, and audience insights
- Social Media Platforms: When you interact with our social media pages or authorize integration
- Public Databases: Publicly available information from government databases, professional directories, or academic registries (where legally permitted)
4. PURPOSE FOR PROCESSING
We process your personal information for specific, legitimate purposes and in accordance with applicable legal requirements. The purposes for which we use your personal data include:
4.1 Service Delivery and Customer Support
- Responding to inquiries, questions, and information requests
- Processing applications for educational programs and services
- Providing personalized educational counseling and guidance
- Facilitating communication between you and partner institutions
- Delivering requested information about programs, courses, and services
- Managing your account and preferences
4.2 Marketing and Communications
- Sending marketing emails, newsletters, and promotional materials about educational opportunities
- Conducting digital advertising campaigns across multiple platforms
- Creating custom and lookalike audiences for targeted advertising
- Retargeting website visitors with relevant advertisements
- Delivering personalized content based on your interests and behaviors
- Sending SMS messages, WhatsApp communications, or phone calls (where permitted)
- Inviting you to webinars, events, and educational workshops
4.3 Analytics and Performance Improvement
- Analyzing Website traffic, user behavior, and engagement patterns
- Measuring the effectiveness of marketing campaigns and advertising efforts
- Conducting A/B testing and user experience optimization
- Generating statistical reports and business intelligence
- Understanding demographic trends and user preferences
- Improving service quality, Website functionality, and user experience
4.4 Legal Compliance and Protection
- Complying with applicable laws, regulations, and legal obligations
- Responding to lawful requests from government authorities, courts, or law enforcement
- Protecting our legal rights, property, and interests
- Preventing, detecting, and investigating fraud, security breaches, or illegal activities
- Enforcing our Terms of Service and other agreements
- Maintaining records for audit, compliance, and accountability purposes
4.5 Business Operations and Administration
- Managing business relationships and partnerships
- Conducting internal research and development
- Performing accounting, auditing, and financial reporting
- Facilitating corporate transactions such as mergers, acquisitions, or asset sales
- Maintaining business continuity and disaster recovery capabilities
5. SHARING AND DISCLOSURE OF PERSONAL INFORMATION
We may share your personal information with third parties in the following circumstances and under strict contractual safeguards:
5.1 Service Providers and Business Partners
We engage trusted third-party service providers to support our business operations, including:
- Technology and Infrastructure Providers: Website hosting, cloud storage, content delivery networks (CDNs), database management
- Marketing and Advertising Platforms: Google (Ads, Analytics), Meta/Facebook, LinkedIn, email service providers (Mailchimp, SendGrid), SMS gateway services
- Customer Relationship Management (CRM): Salesforce, HubSpot, Zoho, or similar platforms for managing leads and customer interactions
- Analytics and Data Intelligence: Companies providing web analytics, business intelligence, and market research services
- Payment Processing: Third-party payment processors for handling financial transactions (if applicable)
- IT Support and Security: Cybersecurity firms, IT consultants, and technical support providers
These service providers are contractually obligated to process personal data only on our behalf and in accordance with our instructions, maintaining appropriate security measures.
5.2 Educational Institutions and Partners
We may share your personal information with universities, colleges, educational institutions, and partner organizations for the following purposes:
- Processing applications and admissions inquiries
- Facilitating program enrollment and registration
- Providing information about scholarships, financial aid, and funding opportunities
- Coordinating joint marketing campaigns and educational events
We only share information with educational partners who have legitimate educational interests and who are subject to privacy obligations.
5.3 Legal and Regulatory Authorities
We may disclose personal information to government agencies, law enforcement, courts, or regulatory bodies when:
- Required by law, legal process, subpoena, or court order
- Necessary to comply with legal obligations or respond to lawful requests
- Required to protect our rights, property, or safety, or that of others
- Necessary to prevent, investigate, or address fraud, security issues, or illegal activities
5.4 Business Transfers and Corporate Transactions
In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or substantially all of our assets, personal information may be transferred to the successor entity or acquiring party. We will provide notice before personal data is transferred and becomes subject to a different privacy policy.
5.5 With Your Consent
We may share your personal information with third parties when you have provided explicit consent for such disclosure, including sharing testimonials, success stories, or participating in co-branded marketing initiatives.
5.6 Aggregate and De-identified Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. This data may be used for research, analytics, reporting, or other business purposes without restriction.
6. SALE AND SHARING OF PERSONAL INFORMATION (CCPA/CPRA)
Important Notice for California Residents:
White Bridge Education does not sell personal information for monetary consideration. We do not exchange personal data for money or other valuable consideration.
However, under the broad definition of “sale” or “sharing” in the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), certain data sharing activities for targeted advertising purposes may constitute a “sale” or “sharing” even without monetary exchange. These activities may include:
- Allowing advertising platforms (Google, Meta/Facebook, LinkedIn) to use cookies and pixels to deliver targeted advertisements
- Sharing hashed email addresses or phone numbers for creating custom audiences
- Enabling third-party analytics providers to track user behavior across different websites
Your Right to Opt-Out:
California residents have the right to opt-out of the sale or sharing of personal information. You may exercise this right by:
- Visiting our “Do Not Sell or Share My Personal Information” page on our Website
- Adjusting your cookie preferences through our consent management platform
- Contacting us directly using the information provided in Section 17
We will not discriminate against you for exercising your opt-out rights. You will continue to receive the same quality of service regardless of your privacy choices.
7. INTERNATIONAL DATA TRANSFERS
White Bridge Education operates globally and may transfer, store, and process your personal information in countries outside your country of residence. These countries may have different data protection laws than your jurisdiction.
7.1 Transfer Safeguards
When we transfer personal data from the European Economic Area (EEA), United Kingdom, Switzerland, or other jurisdictions with comprehensive data protection laws to countries that do not provide an adequate level of protection, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs): EU-approved contractual clauses that require the recipient to protect personal data to European standards
- Adequacy Decisions: Transfers to countries recognized by the European Commission as providing adequate protection
- Binding Corporate Rules (BCRs): Internal policies for international data transfers within corporate groups
- Privacy Shield Framework: Where applicable and valid, certification under recognized privacy frameworks
- Additional Security Measures: Encryption, pseudonymization, and other technical and organizational measures
7.2 Countries of Processing
Your personal information may be processed in the following regions:
- United States of America
- European Union member states
- United Kingdom
- India
- Singapore
- Other countries where our service providers, partners, or offices are located
By using our services, you acknowledge and consent to these international transfers. You have the right to request information about the safeguards we have implemented for international transfers.
8. YOUR PRIVACY RIGHTS
Depending on your location and applicable laws, you may have the following privacy rights regarding your personal information:
8.1 Rights Under GDPR (EU/UK/EEA Residents)
- Right of Access: Request confirmation of whether we process your personal data and obtain a copy of such data
- Right to Rectification: Request correction of inaccurate or incomplete personal information
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data under certain circumstances
- Right to Restriction of Processing: Request limitation of how we use your personal information in specific situations
- Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller
- Right to Object: Object to processing based on legitimate interests, direct marketing, or for research/statistical purposes
- Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of processing before withdrawal
- Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., Information Commissioner’s Office in the UK, CNIL in France)
8.2 Rights Under CCPA/CPRA (California Residents)
- Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third-party sharing
- Right to Delete: Request deletion of personal information, subject to certain exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out of Sale/Sharing: Opt-out of the sale or sharing of personal information for targeted advertising
- Right to Limit Use of Sensitive Personal Information: Restrict the use and disclosure of sensitive personal information
- Right to Non-Discrimination: Exercise privacy rights without discrimination in service quality or pricing
8.3 Rights Under Other Privacy Laws
Residents of Brazil (LGPD), Canada (PIPEDA), India (DPDP), Australia, Singapore, South Africa, and other jurisdictions may have similar or additional rights under their respective privacy laws, including rights to access, correction, deletion, portability, and to opt-out of certain processing activities.
8.4 How to Exercise Your Rights
To exercise any of your privacy rights, please contact us using the methods specified in Section 17. When submitting a request, please provide:
- Your full name and contact information
- A clear description of the right you wish to exercise
- Sufficient information to verify your identity and locate your data
- Any specific details relevant to your request
We will respond to your request within the timeframes required by applicable law:
- GDPR: Within 30 days (extendable to 60 days for complex requests)
- CCPA/CPRA: Within 45 days (extendable to 90 days for complex requests)
- Other jurisdictions: As required by applicable local law
You may designate an authorized agent to submit requests on your behalf. The agent must provide proof of authorization, and we may require you to verify your identity directly.
9. DATA RETENTION
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, regulatory, and business requirements.
9.1 Retention Periods
- Active Leads and Prospects: Up to 3 years from last interaction or until you request deletion/unsubscribe
- Customer Records: Duration of relationship plus 5-7 years for legal and compliance purposes
- Marketing Communications: Until you unsubscribe or opt-out, plus any legally required retention period
- Application Materials: Up to 2 years after application submission or program completion
- Analytics and Technical Data: Up to 26 months (in accordance with Google Analytics retention policies)
- Legal and Compliance Records: Duration required by applicable law (typically 5-10 years)
- Backup and Archival Data: Deleted from active systems but may remain in backups for up to 90 days
9.2 Deletion and Anonymization
Upon expiration of the retention period or when personal information is no longer necessary for its original purpose, we will:
- Securely delete or destroy personal information
- Anonymize data so it can no longer identify you
- Archive data in accordance with legal and regulatory requirements
10. DATA SECURITY MEASURES
We implement comprehensive technical, administrative, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:
10.1 Technical Safeguards
- Encryption: Data encrypted in transit (TLS/SSL) and at rest using industry-standard encryption protocols
- Access Controls: Role-based access controls, multi-factor authentication, and principle of least privilege
- Network Security: Firewalls, intrusion detection systems, and regular security monitoring
- Secure Development: Secure coding practices, regular code reviews, and vulnerability assessments
- Data Backup: Regular encrypted backups with secure storage and tested recovery proceduresTEXT
10.2 Administrative Safeguards
- Employee training on data protection and privacy best practices
- Confidentiality agreements and data protection clauses in employment contracts
- Incident response and data breach notification procedures
- Regular security audits, penetration testing, and compliance assessments
10.3 Physical Safeguards
- Restricted access to facilities where personal data is stored or processed
- Secure disposal procedures for physical documents and storage media
- Environmental controls to protect equipment and data storage systems
Important Limitation:
While we strive to protect your personal information using industry best practices, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge the inherent risks of online data transmission.
11. CHILDREN’S PRIVACY
Our services are not directed to children under the age of 16 (or the applicable age of digital consent in your jurisdiction, such as 13 in the United States under COPPA). We do not knowingly collect, use, or disclose personal information from children without verifiable parental consent.
If we become aware that we have inadvertently collected personal information from a child without proper consent, we will take immediate steps to delete such information from our systems. Parents or guardians who believe we may have collected information from a child should contact us immediately at info@whitebridgeeducation.com.
12. MARKETING AND ADVERTISING
With your consent or where permitted by law, we may send you marketing communications about educational opportunities, programs, events, and services that may interest you through:
- Email newsletters and promotional campaigns
- SMS/text messages and WhatsApp communications
- Telephone calls from our representatives
- Targeted advertisements on social media and other digital platforms
Unsubscribe and Opt-Out: You may unsubscribe from marketing communications at any time by:
- Clicking the “unsubscribe” link in our emails
- Replying “STOP” to SMS messages
- Adjusting your cookie and advertising preferences
- Contacting us directly using the information in Section 17
13. COOKIES AND TRACKING TECHNOLOGIES
For detailed information about our use of cookies and tracking technologies, please refer to our separate Cookie Policy, which is incorporated into this Privacy Policy by reference. Key points include:
- We use first-party and third-party cookies for essential functionality, analytics, and advertising
- You can manage cookie preferences through our consent management platform or browser settings
- Blocking certain cookies may affect Website functionality and user experience
- Third-party platforms (Google, Meta) may use cookies subject to their own privacy policies
14. THIRD-PARTY LINKS AND SERVICES
Our Website may contain links to third-party websites, applications, or services (including social media platforms, educational institutions, and partner organizations). We are not responsible for the privacy practices or content of these external sites.
We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by White Bridge Education through our own services.
15. DATA BREACH NOTIFICATION
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify affected individuals within the timeframes required by applicable law (typically 72 hours for GDPR)
- Inform relevant supervisory authorities as required
- Provide information about the nature of the breach, affected data, and mitigation measures
- Take immediate remedial action to secure systems and prevent further breaches
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The “Last Updated” date at the top of this policy indicates when changes were last made.
Material changes will be communicated through:
- A prominent notice on our Website
- Email notification to registered users
- Updated version posted on our Website with revision history
We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Continued use of our services after changes constitutes acceptance of the updated policy.
17. CONTACT INFORMATION AND DATA PROTECTION OFFICER
For questions, concerns, requests, or complaints regarding this Privacy Policy or our data protection practices, please contact us:
White Bridge Education
Email: info@whitebridgeeducation.com
Address: Prasad Chambers #302, Tata Road No.2, Opera House, Mumbai – 400004.
Phone: +91 9136130742
Data Protection Officer (DPO): Manik Bhargava (manik.bhargava@whitebridgeeducation.com)
We will respond to all legitimate requests within the timeframes required by applicable privacy laws.
18. SUPERVISORY AUTHORITY CONTACT
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.
A list of EU supervisory authorities can be found at: https://edpb.europa.eu/about-edpb/board/members_en
For California residents, you may contact the California Attorney General’s Office at: https://oag.ca.gov/contact
ACKNOWLEDGMENT AND CONSENT
By accessing or using our Website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.
If you do not agree with any provision of this Privacy Policy, you should immediately discontinue use of our services and refrain from providing any personal information to us.
For specific consents (such as marketing communications), we will obtain your explicit opt-in consent through checkboxes, forms, or other clear affirmative actions as required by applicable law.