Privacy policy

Who we are

BasicsConnect (“we”, “us”) operates basicsconnect.com and related channels. We are the controller of personal information described in this policy.

Information we collect

• Account information: name, email, role, password (stored as a salted hash), phone (optional).
• Student information: name, grade, school and learning supports you choose to share, entered by a parent or a self-managed student.
• Service information: bookings, tickets, messages, documents you upload and session notes.
• Payment information: collected and processed by Stripe on its secure checkout page. We receive and keep the payment confirmation, amount, card brand and last four digits, your Stripe customer ID, the name and organization you add for invoices, and the date you accepted our terms. We never receive or store your full card number or security code.
• Security information: sign-in times, IP address and device or browser type for active sessions and the mobile app, used to protect your account (for example, to sign you out of all devices).
• Usage information: with your consent, analytics (Google Analytics 4) about pages visited and actions taken.

How we use information

• To provide services you request, including scheduling, assessments, events and support.
• To send critical account emails such as verification codes, receipts and booking confirmations.
• To send newsletters, only if you subscribe.
• To keep the platform secure, prevent fraud and meet legal obligations.
• To improve the platform using aggregated analytics, only with your consent.

Legal bases (GDPR)

Where the GDPR applies we rely on: contract (to provide services), legitimate interests (security and service improvement), consent (analytics, marketing, newsletters) and legal obligation (tax and accounting records).

Sharing

We do not sell or rent personal information. We share it only with service providers who help us operate, under contracts that protect your data, or when required by law:

• Cloudflare: hosting, storage, transactional email and bot protection.
• Stripe: payment processing, saved payment methods for memberships, refunds and fraud prevention. We share your name, email, order details and amounts. Stripe also processes data as an independent controller for fraud prevention and legal compliance under the Stripe Privacy Policy.
• Newsletter provider (Mailgun or Amazon SES): only if you subscribe.
• Google Analytics: only with your consent.

Partners never receive personal information unless you choose to redeem a partner offer that requires it.

Mobile app

This policy also covers the BasicsConnect mobile app. The app uses the same account and stores sign-in tokens securely on your device. Signing out, changing your password or using “sign out of all devices” revokes them.

Retention

We keep account information while your account is active. Invoices, payment, refund and dispute records are kept as required by tax and accounting law (generally seven years), even if you delete your account. Student documents are deleted 24 months after your last service unless you ask us to delete them sooner.

Your rights and choices

• Access and download your data from Privacy & preferences.
• Correct inaccurate information in your profile.
• Request deletion of your account and data.
• Withdraw consent for analytics or marketing at any time using cookie preferences.
• Object to or restrict certain processing, and lodge a complaint with your data protection authority.

California, Colorado, Virginia and other U.S. state residents have similar rights. We honor Global Privacy Control signals as an opt-out of analytics and marketing cookies.

Children

Students under 13 can only use BasicsConnect through a parent-managed account. Parents can review, change or delete their child’s information at any time.

Security

We use encryption in transit, private storage, access controls, audit logging and bot protection. No system is perfectly secure; we will notify you of any breach as required by law.

International transfers

Our infrastructure runs on Cloudflare’s global network. Where data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses.

Contact

Email privacy@basicsconnect.com or use our contact form.