Privacy policy
1. Introduction
2.Information We Collect
2.1 Personal Information
NextBrightPath does not collect or maintain payment information from Trainers or Students. All payments, including enrollment fees and Trainer payouts, are processed securely by third-party payment processors. We rely on these processors to handle all financial transactions and do not store credit card, banking, or other payment details on our systems.
2.2 Non-Personal Information
2.3 Cookies and Tracking Technologies
3.How We Use Your Information
3.2 For Students
3.3 General Use
4. Legal Basis for Processing Data (GDPR Compliance)
8. Your Rights
9. Data Security
While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
11. Changes to This Privacy Policy
Next Bright Path ("we," "us," or "our") operates the NextBrightPath platform ("Platform"). This Privacy Policy outlines how we collect, use, share, and protect your information in compliance with applicable laws, including the General Data Protection Regulation (GDPR) for users in the European Union (EU) and other data protection regulations.
By using the Platform, you consent to the data practices described in this Privacy Policy.
2.Information We Collect
We collect information from Trainers, Students, and visitors to the Platform as follows:
2.1 Personal Information
For Trainers:
- Name, email address, phone number, and business name.
- Course-related information such as descriptions, schedules, and materials.
For Students:
- Name, email address, and enrollment preferences.
- Details about interactions with Trainers (e.g., course progress, feedback).
Note:
NextBrightPath does not collect or maintain payment information from Trainers or Students. All payments, including enrollment fees and Trainer payouts, are processed securely by third-party payment processors. We rely on these processors to handle all financial transactions and do not store credit card, banking, or other payment details on our systems.
NextBrightPath does not collect or store tax-related information, including Social Security Numbers (SSNs), Employer Identification Numbers (EINs), or other sensitive tax details. Trainers are responsible for managing their own tax reporting obligations.
2.2 Non-Personal Information
- Device information (e.g., IP address, browser type, operating system).
- Usage data (e.g., pages visited, clicks, time spent on the Platform).
2.3 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, including:
- Session management.
- Personalization of content.
- Analytics and marketing purposes.
You can manage your cookie preferences through your browser settings.
3.How We Use Your Information
We use your information for the following purposes:
3.1 For Trainers
- To assist in setting up and promoting your courses.
- To facilitate communication with Students.
- To notify you about Platform updates or service changes.
3.2 For Students
- To process course enrollments.
- To provide course access and facilitate communication with Trainers.
- To send transactional emails (e.g., enrollment confirmations).
3.3 General Use
- To improve Platform functionality and user experience.
- To conduct analytics and understand user behavior.
- To comply with legal obligations (excluding tax-related reporting and payment data storage).
4. Legal Basis for Processing Data (GDPR Compliance)
Under GDPR, we process your personal data based on the following legal grounds:
Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time).
Contractual Necessity: To fulfill the services you request, such as processing course enrollments.
Legal Obligation: To comply with regulatory requirements unrelated to tax reporting or payment processing.
Legitimate Interests: To improve our services, protect Platform security, and prevent fraud.
5. Sharing Your Information
We do not sell your personal information. However, we may share your data under the following circumstances:
5.1 With Trainers
Share necessary student information with Trainers to manage enrollments and course delivery.
5.2 With Service Providers
Share data with third-party service providers (e.g., payment processors, email platforms) to facilitate Platform operations. These providers are bound by confidentiality agreements and data protection requirements.
Payment processors handle all financial transactions directly, and NextBrightPath does not store or access payment details.
5.3 With Legal Authorities
Disclose information when required by law or to protect the rights, safety, and security of our users or the Platform.
6. International Data Transfers
As a U.S.-based company, your data may be transferred to and processed in the United States. For users in the EU or other regions with strict data protection laws, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect your data during international transfers.
7. Data Retention
We retain your data only as long as necessary for the purposes outlined in this Privacy Policy, including:
- Compliance with legal obligations.
- Resolution of disputes.
- Enforcing our agreements.
- When data is no longer needed, it is securely deleted or anonymized.
Note: Payment information is not stored or retained by NextBrightPath, and tax-related data is not collected.
8. Your Rights
Under GDPR and applicable laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request corrections to inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal retention requirements).
- Restriction: Request limitations on how we process your data.
- Data Portability: Request transfer of your data to another service provider.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent for specific processing activities (e.g., marketing).
To exercise your rights, contact us at info@nextbrightpath.com.
9. Data Security
We use technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Secure data storage with encryption.
- Regular monitoring for security vulnerabilities.
- Access controls for authorized personnel only.
While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
The Platform is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected such data, we will delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with the updated date. If significant changes are made, we will notify users via email or Platform announcements.
12. Contact Information
If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at: Contact
Next Bright Path, Marlborough, MA USA