Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, disclosure, storage, and protection of personal information by Institut Universitaire de Développement International, operating as IUDI University ("we", "our", "us", or "the Institution"). By accessing or using our online learning management and student information platform (the "Platform"), you acknowledge that you have read, understood, and agree to be bound by this Policy.

This Policy applies to all users of the Platform, including students, administrators, faculty, and visitors. It covers all personal data collected through our Platform, website, mobile applications, and any related services we provide.

2. Definitions

• Personal Information: Any information that identifies, relates to, describes, or can be reasonably linked to a specific individual, including but not limited to names, email addresses, identification numbers, biometric data, and academic records.
• Sensitive Personal Information: Special categories of personal data including academic performance, financial information, health information, and biometric identifiers.
• Processing: Any operation performed on personal information, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, transmission, dissemination, alignment, combination, restriction, erasure, or destruction.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you:

• Create or update your account profile
• Enroll in courses or academic programs
• Submit assignments, assessments, or coursework
• Participate in discussions, forums, or communications
• Make payments or financial transactions
• Contact our support services or administrative staff
• Complete surveys, evaluations, or feedback forms
• Upload documents, images, or other content

This information may include, but is not limited to:

• Full legal name, date of birth, and government-issued identification numbers
• Contact information (email addresses, phone numbers, postal addresses)
• Academic records, transcripts, grades, and educational history
• Financial information, payment card details, billing addresses, and transaction history
• Profile photographs and other biometric identifiers
• Emergency contact information
• Communication records and correspondence

3.2 Information Collected Automatically

We automatically collect certain information when you access or use the Platform, including:

• Device information (IP addresses, browser type, operating system, device identifiers)
• Usage data (pages visited, time spent, features used, search queries)
• Location information (general geographic location based on IP address)
• Log files (access times, referring URLs, system configuration)
• Cookies and similar tracking technologies (see Section 8)
• Performance and diagnostic data

3.3 Information from Third Parties

We may receive personal information from third parties, including:

• Educational institutions and academic partners
• Payment processors and financial institutions
• Authentication and identity verification services
• Government agencies and regulatory bodies
• Service providers and business partners

4. How We Use Your Information

We process your personal information for the following lawful purposes:

4.1 Provision of Educational Services

• Enrollment, registration, and account management
• Delivery of courses, curriculum, and instructional materials
• Assessment, grading, and academic progress tracking
• Issuance of certificates, transcripts, and academic credentials
• Student support services and academic advising

4.2 Administrative and Operational Purposes

• Processing payments, invoicing, and financial account management
• Maintaining academic records and institutional archives
• Ensuring platform security, preventing fraud, and detecting unauthorized access
• Conducting audits, compliance reviews, and quality assurance
• Managing institutional communications and announcements

4.3 Legal and Regulatory Compliance

• Compliance with applicable laws, regulations, and legal obligations
• Responding to legal requests, court orders, and government inquiries
• Enforcing our Terms of Service and institutional policies
• Protecting the rights, property, and safety of the Institution and users
• Meeting accreditation requirements and reporting obligations

4.4 Communication and Engagement

• Sending educational updates, announcements, and notifications
• Responding to inquiries, support requests, and feedback
• Facilitating communication between students, faculty, and administrators
• Conducting surveys, research, and institutional analytics

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contractual obligations with you
• Legitimate Interests: Processing necessary for our legitimate institutional interests, including educational delivery and platform security
• Legal Obligations: Processing required to comply with applicable laws and regulations
• Consent: Processing based on your explicit consent, which you may withdraw at any time
• Vital Interests: Processing necessary to protect life or physical safety

6. Information Sharing and Disclosure

6.1 We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6.2 Authorized Disclosure

We may disclose your personal information to the following categories of recipients:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., cloud hosting, payment processing, email delivery) under strict contractual obligations
• Academic Partners: Educational institutions and organizations with whom we have collaborative agreements
• Legal Authorities: Government agencies, law enforcement, and courts when required by law or to protect legal rights
• Accreditation Bodies: Organizations responsible for institutional accreditation and quality assurance
• Business Transfers: Parties involved in mergers, acquisitions, or asset sales, subject to confidentiality obligations

6.3 Disclosure Requirements

We require all third parties to maintain appropriate security measures and use your information only for specified purposes. We do not permit third parties to use your personal information for their own purposes without your explicit consent.

7. Data Security and Protection Measures

We implement comprehensive technical, administrative, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, and destruction:

• Technical Safeguards: Encryption in transit (TLS/SSL) and at rest, secure authentication protocols, regular security assessments, intrusion detection systems, and automated monitoring
• Administrative Safeguards: Access controls, employee training, background checks, confidentiality agreements, and regular security audits
• Physical Safeguards: Secure data centers, restricted access facilities, and environmental controls
• Incident Response: Established procedures for detecting, reporting, and responding to security incidents

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage patterns, and improve our services. These technologies collect information about your device, browsing behavior, and preferences.

Types of Cookies We Use:

• Essential Cookies: Required for platform functionality and security (cannot be disabled)
• Analytics Cookies: Help us understand how users interact with the Platform
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Used to deliver relevant educational content (if applicable)

You can manage cookie preferences through your browser settings, though disabling certain cookies may limit Platform functionality. For more information, see our Cookie Policy.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Our retention practices include:

• Active Student Records: Retained throughout enrollment and for a minimum of seven (7) years after graduation or withdrawal
• Financial Records: Retained for ten (10) years as required by tax and accounting regulations
• Academic Transcripts: Retained permanently as part of institutional archives
• Communication Records: Retained for three (3) years unless longer retention is required
• Deletion: Upon expiration of retention periods, information is securely deleted or anonymized

10. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws through:

• Standard contractual clauses approved by relevant data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Other legally recognized transfer mechanisms

By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: Request copies of your personal information we hold
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your information
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge Complaints: File complaints with relevant data protection authorities

To exercise these rights, please contact us at privacy@iudi.org. We will respond to your request within thirty (30) days, subject to verification of your identity and any applicable legal restrictions.

Note: Certain rights may be limited when information is processed for legal or regulatory compliance, contractual obligations, or institutional archives.

12. Children's Privacy

Our Platform is not intended for individuals under the age of 18 without parental consent. We do not knowingly collect personal information from minors without appropriate authorization. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@iudi.org.

13. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services. This Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our Platform.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. Material changes will be communicated through:

• Email notification to your registered email address
• Prominent notice on the Platform
• Updated "Last Updated" date at the top of this Policy

Your continued use of the Platform after such modifications constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

15. Data Protection Officer

For inquiries, requests, or concerns regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

Email: privacy@iudi.org
Subject Line: Privacy Policy Inquiry

All requests will be handled in accordance with applicable data protection laws and institutional policies.

16. Consent and Agreement

By using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.