This notice explains the personal information involved in EduCareersPath and the proposed standards for handling it. It covers the student platform and direct enquiries; independent universities and other providers issue their own notices for their services.
01Who handles your information
The responsible operator is [LEGAL BUSINESS NAME — TO BE CONFIRMED], at [FULL BUSINESS ADDRESS — TO BE CONFIRMED]. Contact the existing support channel, admin@educareerspath.com, about privacy. The designated grievance contact is listed on the support & grievances page once appointed.
The final production vendor list, processing locations and retention schedule require verification before this draft becomes effective. This notice does not assert that those reviews or all privacy controls have already been completed.
02Information involved in the service
- Account and profile: name, email, age, account role, learner stage, credentials, and optional phone, city or profile information you provide.
- Assessments and planning: answers, progress, completion records, scores, reports, interests, shortlists and saved career-planning information.
- Lumen and generated material: prompts, conversation history, submitted attachment content, relevant context used for a response, outputs and saved work.
- Purchases: selected plan, order and payment references, payment status, invoices, coupons and refunds. Hosted checkout providers process payment-instrument information under their own notices; do not send card details, PINs or OTPs to our support team.
- Requests and applications: contact details, messages, selected courses or institutions, application information and records of permissions for the relevant submission.
- Technical and referral information: session identifiers, browser or device information, network and security logs, stored preferences and referral attribution associated with your visit or account, where processed by the relevant feature.
03Purposes and your choices
Information is used to create and secure accounts, save assessment progress, calculate and deliver reports, personalise requested guidance, process purchases, fulfil enquiries, prevent abuse, handle disputes and meet legal obligations. We should collect only information reasonably needed for the relevant purpose.
Optional information should remain optional unless it is necessary for a specific requested service. A notice at collection should identify the relevant purpose and recipients. General acceptance of terms is not blanket permission for unrelated marketing, admissions disclosure or training an AI model on personal data.
Where processing depends on consent, you may withhold or withdraw it through admin@educareerspath.com. Withdrawal may prevent us from continuing a service that needs that information, but does not invalidate earlier lawful processing or remove records lawfully required for tax, security, disputes or other obligations.
04AI processing and confidentiality
Lumen uses an external AI service. The current integration supports Xiaomi’s MiMo service; prompts, relevant conversation context, submitted content and assessment context selected for personalised guidance may be sent to that provider. Its processing and storage locations depend on the production configuration and must be confirmed before activation.
Provider retention and model-training settings require an explicit review; this draft does not promise zero retention or that an external provider never uses data for training. Do not submit passwords, government identity documents, financial credentials, confidential third-party records or unnecessary sensitive information to AI tools. Read the AI & assessment disclaimer.
05Recipients and sharing
Information needed to operate a requested feature may be handled by our authorised personnel and service providers for hosting, databases, payments, AI, communications and security, subject to appropriate contractual and access restrictions. We do not grant every school, parent, counsellor or partner automatic access to every student’s private results.
For admissions, the flow must explain which partner and selected institution receive the submitted details and why. Review that disclosure before consenting. The recipient’s own processing is governed by its notice. Contact us about stopping future sharing; a recipient may need a separate request to deal with information already lawfully received.
We may disclose information when legally required, to protect rights or investigate a credible security or fraud concern, with appropriate safeguards. A business transfer must preserve applicable privacy duties and trigger any notice or permission required by law. Unrelated commercial disclosure is not authorised merely by this policy.
06Retention and security
The proposed retention standard is to keep information only while reasonably necessary for its disclosed purpose or a legal obligation. Assessment histories, purchases, applications, support records, backups and security logs can require different periods. The category-specific production schedule remains to be approved; there is no promise of immediate deletion from every backup.
Security measures must be proportionate to the information and risks, including access restrictions and monitoring. No internet service can guarantee absolute security. We do not describe conversations as end-to-end encrypted or claim a certification without verification. Personal-data incidents must be assessed, contained and reported to affected people and authorities as required by applicable law.
07Access, correction, erasure and complaints
Send a request to admin@educareerspath.com describing the account and the information or permission concerned. You may ask about access to your information, corrections, erasure, consent withdrawal and rights available under applicable law. A profile-edit lock does not remove a statutory correction right. Self-service account deletion is not currently represented as an available feature.
We may reasonably verify identity or authority before releasing or changing private records. Do not email a password, OTP or excessive identity documents. Any necessary verification method should be explained separately. Requests must be handled within applicable legal deadlines, with reasons for lawful refusals or retention and information about escalation.
Deleting one chat or clearing browser storage is not necessarily account deletion or erasure of all server-side, payment or backup records. Read Cookies & browser storage and support & grievances.
08Children and institutional accounts
Under-18 use requires the safeguards described in the children & parental consent policy. A school contract alone is not assumed to replace every parental permission or student privacy right. The institution’s role, the operator’s role and permitted report access must be identified before student information is transferred or a school account is enabled.
A question about this policy?
Email admin@educareerspath.com or read our support & grievance process.