Privacy Policy

1. Data Controller & Contact

The data controller responsible for this website is:

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above. We aim to respond to all privacy-related inquiries within 48 hours.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Contact Form Submissions: If you use our contact form or email us, we collect your name, email address, and the content of your message solely to respond to your inquiry.
• Voluntary Feedback: If you choose to submit corrections, suggestions, or testimonials, we collect the information you provide.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, scroll depth, click patterns, referring/exit pages, and browser type. Collected via Google Analytics 4.
• Device Data: IP address (anonymized where possible), browser user agent, operating system, screen resolution, and device type.
• Location Data: General geographic location derived from your IP address (country/region level only).
• Cookie Data: See Section 5 for detailed information on cookies and similar technologies.

2.3 What We Do NOT Collect

3. Legal Basis for Processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Consent (Article 6(1)(a)): For non-essential cookies (advertising and analytics cookies), we rely on your consent, which you provide via our cookie banner or browser settings.
• Legitimate Interests (Article 6(1)(f)): For essential website operation, security monitoring, and aggregated analytics that help us improve our educational content.
• Contractual Necessity (Article 6(1)(b)): When you contact us and we need to respond to your inquiry.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Website Operation: To deliver, maintain, and improve our educational guides, checklists, and interactive tools.
• Analytics: To understand how visitors engage with our content, which articles are most helpful, and where we need to improve clarity or depth.
• Advertising: To display relevant advertisements through Google AdSense and generate revenue to support the ongoing research and maintenance of this free resource.
• Communication: To respond to your inquiries, feedback, and correction requests.
• Security: To detect and prevent fraudulent activity, spam, and abuse.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. Cookies & Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We use the following categories:

5.1 Essential Cookies (First-Party)

• Purpose: Necessary for the website to function properly (e.g., maintaining your checklist progress in localStorage, remembering your cookie consent preference).
• Duration: Session to 1 year.
• Legal Basis: Legitimate interest / technical necessity. Cannot be disabled without breaking functionality.

5.2 Analytics Cookies (Third-Party)

• Provider: Google Analytics 4
• Purpose: Aggregated visitor statistics, page performance, and content engagement metrics. IP addresses are anonymized.
• Duration: Up to 2 years.
• Opt-out: You can install the Google Analytics Opt-out Browser Add-on.

5.3 Advertising Cookies (Third-Party)

• Provider: Google AdSense / Google LLC
• Purpose: To serve personalized or contextual advertisements, measure ad performance, and prevent repetitive ads.
• Types: DoubleClick cookies, _gcl_* cookies, and similar tracking technologies.
• Duration: Up to 13 months.
• Opt-out: See Section 6 for detailed opt-out mechanisms.

5.4 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Cookies and site permissions → Manage and delete cookies

Disabling cookies may affect website functionality, particularly advertising personalization and analytics accuracy. Essential cookies required for the checklist tool will continue to function as they are client-side only.

6. Advertising & Google AdSense

This website uses Google AdSense, a third-party advertising service provided by Google LLC ("Google"), to display advertisements. Google AdSense uses cookies and web beacons to:

• Serve personalized or contextual advertisements based on your browsing history and interests.
• Measure the effectiveness of advertisements served on this site.
• Prevent the same ad from being shown to you repeatedly.

6.1 How Google Uses Your Data

Google's advertising cookies enable Google and its partners to serve ads to you based on your visits to this site and/or other sites across the Internet. Google may use your:

• IP address (for geotargeting and fraud prevention)
• Browser type and device information
• Browsing history on this and partner sites
• General interest categories inferred from your online activity

6.2 Your Ad Choices & Opt-Out

You have several options to control personalized advertising:

• Google Ads Settings: Visit Google Ads Settings to manage your ad personalization preferences across Google services.
• NAI Consumer Opt-Out: Visit Network Advertising Initiative to opt out of interest-based advertising from participating companies.
• Your Online Choices (EU): Visit Your Online Choices to manage third-party advertising cookies in the European Union.
• About Ads (US): Visit Digital Advertising Alliance to opt out of personalized ads from participating US companies.

6.3 Google's Privacy Policy

For more information on how Google uses data when you use our site, please visit:

• Google Privacy Policy
• How Google uses information from sites or apps that use our services

7. Third-Party Services

We use the following third-party services to operate and improve our website:

• Netlify: Our website hosting provider. Netlify may process server logs including IP addresses for security and performance monitoring. Netlify Privacy Policy
• Google Analytics 4: Website traffic analytics. Google Privacy Policy
• Google AdSense: Advertising network. Google Advertising Policies
• Google Fonts: Web font delivery. Google Privacy Policy

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies. We do not share your personal information with these services beyond what is technically necessary for them to perform their functions.

8. Data Security

We implement reasonable technical and organizational measures to protect the information we collect:

• Our site is served over HTTPS (TLS encryption) to protect data in transit.
• We use Netlify's built-in security features including DDoS protection and automated threat detection.
• Access to analytics dashboards is restricted to the site operator only.
• We do not store payment information, passwords, or school records on our servers.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You provide information at your own risk.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Analytics Data: Retained for up to 26 months in Google Analytics, then automatically deleted.
• Contact Form / Email Correspondence: Retained for 12 months after the conclusion of our communication, unless you request earlier deletion.
• Server Logs: Retained by Netlify for up to 30 days for security and debugging purposes.
• Advertising Data: Governed by Google's own retention policies. See Google's Privacy Policy.

After these periods, your data is either deleted or anonymized so that it can no longer be associated with you.

10. Children's Privacy (COPPA Compliance)

This website is intended for use by school administrators, IT professionals, educators, and adult researchers — not by children under the age of 13.

• We do not knowingly collect personal information from anyone under 13 years of age.
• Our interactive checklist tool does not require account creation, login, or any personally identifiable information.
• We do not display content specifically targeted at children.
• If you believe a child under 13 has provided us with personal information, please contact us immediately using the details in Section 13, and we will take prompt steps to delete that information.

This policy is designed to comply with the Children's Online Privacy Protection Act (COPPA) and similar international regulations.

11. Your Privacy Rights

11.1 GDPR Rights (For EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have the following rights under the GDPR:

• Right to Access (Article 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Article 17): Request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to Restrict Processing (Article 18): Request that we suspend processing of your personal data.
• Right to Data Portability (Article 20): Request your data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to complain to your local data protection authority if you believe we have violated your rights.

11.2 CCPA / CPRA Rights (For California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: While we do not "sell" personal information in the traditional sense, California law may classify certain advertising cookie practices as a "sale." You have the right to opt out of such sharing. We honor browser-based opt-out signals such as the Global Privacy Control (GPC).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CPRA.

11.3 UK GDPR Rights

If you are in the United Kingdom, you have rights equivalent to those under the EU GDPR, enforceable under the UK Data Protection Act 2018. The UK Information Commissioner's Office (ICO) is your supervisory authority: ico.org.uk.

11.4 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in Section 13. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing your request to prevent unauthorized access to your data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we use. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our homepage for at least 7 days.
• Update the effective date listed in this policy.

Continued use of the Site after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically for the latest information on our privacy practices.

13. Contact Us

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data handling practices, please contact the data controller: