Overview of Your Rights
At BrightMinds Tutoring, we are committed to giving you full control over your personal information. Depending on your location, you may have a range of rights regarding how we collect, use, store, and share your data.
This page summarizes your rights. Some rights may vary based on your location and the applicable laws (e.g., GDPR, CCPA/CPRA, VCDPA, or other local regulations). For complete details, please refer to our full Privacy Policy.
Core Rights Summary
Below are the primary rights you may have under applicable data protection laws:
Right to Access
Request a copy of the personal data we hold about you, including what data, why we collect it, and who it has been shared with.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you at any time.
Right to Erasure
Request deletion of your personal data when it is no longer necessary, consent is withdrawn, or other legal grounds apply.
Right to Restrict Processing
Request that we temporarily stop processing your data in certain situations, such as while a dispute is being resolved.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format and transfer it to another service.
Right to Object
Object to processing based on legitimate interests, direct marketing, or processing for scientific/historical research purposes.
You can exercise most of these rights directly through your account dashboard, by contacting our Data Protection Officer, or by using the forms provided on this page. We aim to respond to all requests within 30 days.
Cookie Choices
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage your cookie preferences below at any time.
Manage Your Cookie Preferences
Use the toggles below to control which cookies you allow. Note that strictly necessary cookies cannot be disabled as they are essential for the website to function.
How to Manage Cookies in Your Browser
Most browsers allow you to control cookies through their settings. Here are links to manage cookies in popular browsers:
| Browser | How to Manage Cookies |
|---|---|
| Google Chrome | Settings → Privacy and Security → Cookies and other site data |
| Mozilla Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Safari | Preferences → Privacy → Cookies and website data |
| Microsoft Edge | Settings → Cookies and site permissions → Manage and delete cookies |
| Opera | Settings → Privacy and security → Cookies |
Blocking or deleting cookies may affect the functionality of our website and your ability to access certain features, including online tutoring sessions and your student dashboard.
Your Data Rights
Depending on your jurisdiction, you have specific legal rights regarding your personal data. Below is a detailed explanation of each right and what it means for you.
👁️ Right to Access (Data Subject Access Request)
▼You have the right to request confirmation as to whether we are processing your personal data, and if so, to access a copy of that data. This includes information about:
- The categories of personal data being processed
- The purposes of processing
- The categories of recipients to whom the data has been disclosed
- The retention period for the data
- The source of the data (if not collected directly from you)
We will provide this information in a commonly used electronic format within 30 days of receiving your request, or within 60 days if the request is complex.
✏️ Right to Rectification
▼If you believe any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will rectify inaccurate data without undue delay and inform any third parties to whom the data has been disclosed about the correction where feasible.
🗑️ Right to Erasure (Right to be Forgotten)
▼You may request the deletion of your personal data in the following circumstances:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent on which processing was based
- You object to the processing and there is no overriding legitimate ground
- The data has been unlawfully processed
- Erasure is required to comply with a legal obligation
Please note that in some cases, we may be legally required to retain certain data even after a deletion request (e.g., for tax, accounting, or legal compliance purposes).
🚧 Right to Restrict Processing
▼You can request that we temporarily stop processing your personal data in these situations:
- You contest the accuracy of the data (while we verify it)
- The processing is unlawful, and you oppose erasure
- We no longer need the data, but you need it for legal claims
- You have objected to processing pending verification of legitimate grounds
While processing is restricted, we will still store your data but will not use it further unless you consent or for specific legal purposes.
📦 Right to Data Portability
▼Where processing is based on consent or a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
This right applies to data you have provided to us, including your profile information, learning preferences, and session history.
🚫 Right to Object
▼You have the right to object to processing of your personal data in the following situations:
- Processing based on legitimate interests — we must stop unless we demonstrate compelling legitimate grounds
- Direct marketing — we must stop immediately with no exceptions
- Processing for scientific, historical research, or statistical purposes
For direct marketing objections, you can use the unsubscribe link in any email or contact us directly.
⚖️ Rights Related to Automated Decision-Making
▼You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. BrightMinds uses automated systems to help match students with tutors, but final recommendations are always reviewed by a human team member. You may request human intervention at any time.
How to Exercise Your Rights
We make it easy to exercise your data rights. Choose the method that works best for you, and we'll process your request promptly.
Methods to Submit a Request
What to Include in Your Request
- Your full name and contact information — so we can verify your identity
- The specific right you are exercising — e.g., access, deletion, correction, portability
- Description of the data — specify which data you are referring to (e.g., account data, tutoring session recordings, communication history)
- Any additional details — context or supporting information that helps us process your request
Identity Verification
To protect your privacy and prevent unauthorized access, we may need to verify your identity before processing certain requests. This typically includes:
- Confirming the email address associated with your account
- Verifying your account credentials (we will never ask for your password)
- In some cases, requesting additional identification documents
Response Timeline
We aim to respond to all requests within 30 days. For complex requests, this may be extended to 60 days, and we will notify you of any extension and the reason for it. If we decline your request, we will explain why and inform you of your right to lodge a complaint with a supervisory authority.
In most cases, there is no charge for exercising your data rights. We may charge a reasonable fee only for manifestly unfounded, excessive, or repetitive requests.
Marketing & Communications
You have full control over the marketing and promotional communications you receive from us. Here's how to manage your preferences.
Unsubscribe from Marketing Emails
You can stop receiving marketing emails from BrightMinds Tutoring at any time by:
- Clicking the "Unsubscribe" link at the bottom of any marketing email
- Updating your notification preferences in your account dashboard
- Contacting us directly at privacy@brightminds.com
SMS & Phone Communications
To opt out of text message notifications, reply "STOP" to any message from us. To opt out of phone calls, simply let our team know during any conversation or contact our support team.
Please note that account-related, billing, and session confirmation messages are considered transactional and are essential for your tutoring services. These cannot be opted out of, but you can control delivery method and frequency.
Do Not Sell or Share My Personal Information
Under California's CPRA and similar state laws, certain consumers have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising.
Our Commitment
BrightMinds Tutoring does not sell your personal information. We do not share or sell student or parent data to third parties for their direct marketing purposes. We share data only with carefully vetted service providers who help us deliver our tutoring services, and only under strict data processing agreements.
How We Use Your Data with Partners
| Category | Purpose | Data Shared | Can Opt Out? |
|---|---|---|---|
| Cloud Hosting | Service delivery | Account data, session data | No (essential) |
| Analytics | Website improvement | Anonymous usage data | Yes |
| Payment Processing | Billing | Payment info (tokenized) | No (essential) |
| Email Services | Communication | Email address, name | Yes |
| Advertising Partners | None | We do not share | N/A |
Global Privacy Control (GPC)
If your browser sends a Global Privacy Control (GPC) signal, we will automatically honor it as an opt-out request for the sale/sharing of your personal information. Make sure your browser settings include GPC support.
We have never sold, and will never sell, your personal information. Your trust is the foundation of our business, and we take our data protection obligations very seriously.
Third-Party Choices
Some of the technologies we use may be provided by third parties. Here's how to manage your preferences with those partners.
Advertising Networks
If you've opted out of our marketing cookies, you may also wish to manage your preferences with advertising networks directly:
- Google Ads: Visit Ads Settings to manage ad personalization
- Facebook/Meta: Visit Ads Preferences to control ad settings
- Network Advertising Initiative: Visit NAI Choices to opt out across multiple networks
- Digital Advertising Alliance: Visit Your Ad Choices for industry-wide opt-out
Analytics Services
Google Analytics: You can prevent Google Analytics from recognizing you across visits by installing the Google Analytics Opt-out Browser Add-on.
Social Media Platforms
When you visit our website, certain social media platforms may set cookies through our social media buttons or embedded content. Visit the privacy settings of each social media platform to manage these:
- Facebook: Settings
- Twitter/X: Settings
- Instagram: Account Settings
- LinkedIn: Preferences
Notice to California Residents (CCPA/CPRA)
This section provides additional information required by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Categories of Personal Information Collected
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, phone, account ID | Account management, communication |
| Commercial Information | Purchase history, session bookings | Service delivery, billing |
| Internet Activity | Browsing data, session activity | Personalization, analytics |
| Education Data | Grades, subjects, learning goals | Tutoring services, progress tracking |
| Geolocation Data | General location for service area | Matching with local tutors |
| Sensitive Personal Information | Minors' data (with parental consent) | Minors' tutoring services |
California-Specific Rights
In addition to the rights described above, California residents have the following rights:
- Right to Know — What personal information is collected, used, shared, or sold
- Right to Delete — Personal information collected through our services
- Right to Correct — Inaccurate personal information
- Right to Opt Out — of the sale or sharing of personal information
- Right to Limit Use — of sensitive personal information
- Right to Non-Discrimination — for exercising CCPA/CPRA rights
California residents may designate an authorized agent to exercise their rights on their behalf. The agent must provide proper authorization. We may require additional verification to ensure the agent is properly authorized.
Shine the Light Law
Under California Civil Code Section 1798.83, California residents may request information about whether we have disclosed personal information to third parties for their direct marketing purposes. Since we do not share data for third-party direct marketing, no disclosures have been made. Requests can be sent to privacy@brightminds.com.
Children's Privacy
BrightMinds Tutoring takes the privacy of children especially seriously. We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable child privacy laws.
Age Requirements
- Under 13: We do not knowingly collect personal information from children under 13 without verifiable parental consent. Parents must create and manage accounts for children in this age group.
- 13–17: In certain jurisdictions, we may require parental consent for users under 18. Parents can review, correct, or delete their child's data at any time.
- 18 and older: Users can create their own accounts and manage their own privacy settings.
Parental Controls
Parents and guardians of students under 18 have the right to:
- Review all personal information we collect from their child
- Request deletion of their child's information
- Refute or correct inaccurate information
- Review and update communication preferences
- Monitor tutoring sessions and progress reports
If you are a parent or guardian and believe we have collected information from your child without proper consent, please contact our Data Protection Officer immediately at privacy@brightminds.com. We will take prompt action to address the situation.
File a Complaint
If you believe we have not addressed your data rights request satisfactorily, or if you have concerns about our data practices, you have the right to lodge a complaint with a supervisory authority.
Our Internal Resolution Process
Before filing an external complaint, we encourage you to contact us first so we can resolve any concerns:
- Contact our Data Protection Officer at privacy@brightminds.com
- Call our support team at (800) 555-1234 and ask for the Privacy team
- Write to us at: BrightMinds Tutoring, Privacy Department, 123 Education Lane, Suite 200, San Francisco, CA 94102
We will investigate all complaints and respond within 15 business days.
External Supervisory Authorities
If you are not satisfied with our response, you may file a complaint with the relevant authority based on your location:
| Region | Supervisory Authority | Contact |
|---|---|---|
| United States (California) | California Privacy Protection Agency (CPPA) | oag.ca.gov/privacy/ccpa |
| United States (General) | Federal Trade Commission (FTC) | reportfraud.ftc.gov |
| European Union | Local Data Protection Authority | Varies by member state |
| United Kingdom | Information Commissioner's Office (ICO) | ico.org.uk |
| Canada | Office of the Privacy Commissioner (OPC) | privacy.gc.ca |
| Australia | Office of the Australian Information Commissioner (OAIC) | oaic.gov.au |
We genuinely want to resolve any privacy concerns to your satisfaction. Please give us the opportunity to address your issue before escalating. Your feedback helps us improve our practices and better serve our community.
🔐 Your Privacy Matters to Us
We're committed to transparency and giving you full control over your personal information. If you have any questions, don't hesitate to reach out.