Effective Date 11-15-2023

This Privacy Statement (“Privacy Statement”) is published by IonTuition, CP (referred to in this Privacy Statement as “IonTuition,” “we” “us” or “our”) to explain our privacy practices for any information we receive via https://IonTuition.us and any page or application controlled by us that links to this Privacy Statement (together, the “Site”).

By using the Site or receiving any services of IonTuition (the “Services”) you consent to the terms of this Privacy Statement. If you do not agree to the terms and conditions of this Privacy Statement, including having your Personal Information (as defined below) used in any of the ways described in this Privacy Statement, do not provide us with your information. Please note, however, that if you don’t provide us with your information, you may not be able to use certain parts or features of our Site or we may not be able to provide you certain Services.

IonTuition may update this Privacy Statement from time-to-time in our sole discretion by posting such revised Privacy Statement on the Site. Please note the Effective Date of this Privacy Statement at the top of the page. It is your responsibility to review this Privacy Statement regularly for any changes each time that you use the Site and/or the Services or provide us information.

Use of the Site or the Services by you following our posting of a new Privacy Statement on our Site constitutes your acceptance of the Privacy Statement as modified and will apply to all information received after the Effective Date of the modification. In the event we materially change the way in which we use your Personal Information that we previously collected, we will provide you with notice and ask you to affirmatively accept the new uses. This Privacy Statement is incorporated as part of the Terms of Use that apply with respect to your use of the Site or Services.

Information Collected

There are cases in which IonTuition may ask you to provide personal information. As used in this Privacy Statement, “Personal Information” means any information that may be used, either alone or in combination with other information, to personally identify an individual as defined by applicable laws. We may collect certain information, including Personal Information, from and about our users in various ways:

directly from you,
from third parties, or
automatically when you use our Services.

Directly from You

To access and utilize our Services, we will ask you to provide us with some important information about yourself. This information is either required by law, necessary to provide the requested Services, or is relevant for certain specified purposes, described in greater detail below. As we add new features and Services, you may be asked to provide additional information. We may ask you to provide us with one or more of the following categories of information:

Identifiers, including real name, postal address, email address, telephone number, date of birth, credit card information
Professional or Employment Related Information, including employment history, current employment status, employer’s name, salary, credentials, employee classification, resume, cover letter, past employer’s name, position held, salary, disciplinary record, wage preferences, job preferences, training or certifications
Education Information, including date of birth, grade point average, estimated graduation date, hours remaining and completed, graduation date, any certifications, credentials, honors, awards, program you attend, description of the program and length, degrees available, financial information such as how you pay for school, types of financial products you have used, amounts of outstanding financial obligations
Sensitive Personal Information, including race, ethnic origin, social security number, driver’s license number, state identification number, passport number

Special Category Information

Some of the personal information that we may collect as a result of providing the Services is particularly sensitive (e.g., information revealing racial or ethnic origin, social security number, driver’s license number, state identification number, passport number). We only collect this information as provided by or consented by you. Such sensitive personal information is only shared for the purpose of providing the Services you request or as consented for and will not be shared or used by us for any other purposes.

Collection of Your Personal Information from Third Parties

In addition to collecting some Personal Information directly from you, we may collect Personal Information from third parties including our Affiliates and Subsidiaries. You agree that the third-party providers of data, not IonTuition, are responsible for maintaining your information with proper and sufficient accuracy and authority in accordance with all governing laws and regulations. We make no effort to verify any information for any purpose, including accuracy, legality, or non-infringement that we properly receive from third parties. We also collect personal information automatically when you use visit our Site and while receiving our services.

We gather and consolidate available account information from institutions with which you have a relationship, including your or your dependent’s government-guaranteed 20 USC 1070 Title IV loan type data, account information, personal data, payment data, historical account data, and other data on each of your loans under the Title IV program (“Account Information”). You acknowledge and agree that the Account Information is obtained from various third-party entities (“Data Providers”) on your behalf, and as your agent and service provider. Such Data Providers include the U.S. Department of Education’s (“ED”) National Student Loan Database System, your institution, your employer, your Title IV lender or loan servicer appointed by the lender, the guaranty agency or the ED from time to time or any private student loan lender you have authorized data to be provided from. The Account Information is obtained by using data access credentials you provide at the time of registration, or pursuant to these Terms of Use and through an agreement between us and the applicable Data Provider. All of your Account Information is stored in our databases for your use in connection with the Services.

You agree that the Data Providers, not Site Provider, are responsible for maintaining Account Information with proper and sufficient accuracy and authority in accordance with all governing laws and regulations. Site Provider makes no effort to verify any Account Information for any purpose, including accuracy, legality, or non-infringement.

Information Automatically Collected When You Use Our Services

We may automatically collect information about you when you use our Services including the Site. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics so that we can improve our Services. We may ask you to provide us with one or more of the following categories of information about you:

Identifiers, including internet protocol (IP) address, cookies
Commercial Information, including products or services purchased obtained or considered and other purchasing or consuming histories or tendencies
Internet or Other Similar Network Activity, including browsing history; type; language; search history; information regarding your interaction with our Site including specific pages you accessed on our Site or prior to visiting; web logs; length of time you spent on our Site; cookies; application; advertisement; clickstreams; scrolling activity; device information and operating system used; domain name and type; contents, sender, recipients, format, or location of the sender or recipients at any point during electronic communication; time or date electronic communication was created, sent or received; IP address
Geolocation Data, including IP address, zip code

Do-Not-Track and Use of Cookies

Like many other websites, we and our partners use cookies (a small, removable data file that is stored by the web browser on your computer that identifies your computer and browser when you visit our Site or use our Services) and various technologies to collect and store information when you visit our Site or use a Service, and this may include sending one or more cookies or anonymous identifiers to your device. We also use cookies and anonymous identifiers when you interact with Services we offer to our partners.

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support Do Not Track requests at this time, which means that we collect information about your online activity while you are using our Site and may track which website you visit immediately before or after accessing the Site.

Purpose of Collection

IonTuition uses the Personal Information we collect above for the following purposes:

Create, maintain, customize, and secure your account
Fulfill an order or provide Services
Provide customer service, feedback or support
Provide, administer, expand, support, personalize, improve, and develop our Site, products, and services
Investigate, detect, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats
Collect resumes, employment applications or other information relating to employment
Accept and process payments
Protect the security and integrity of our services
Gather demographic information about our user base
Remember user settings and items added to our service selection
Determine whether your system meets the minimum requirements needed to use our Site and Services
Comply with legal and regulatory requirements
Meet other business purposes
Fulfill or meet the reason you provided the information

How We Disclose the Information Collected

We do not sell, share, or otherwise disclose Personal Information collected from our Services to third parties for monetary or other valuable consideration, unless otherwise stated below or with your consent:

Service Providers & Contractors. We may share your Personal Information with service providers and contractors to perform tasks on our behalf and to assist us in providing our Services, including but not limited to internal and business operations, security, and related services. Service providers and contractors may use the information only as necessary to provide the services to us and are contractually required to keep your information confidential and secure.
Business Partners. We may share your personal information with business partners to provide you with a product or service you have requested. We may also share your personal information to business partners with whom we jointly offer products or services.
Advertising Partners. We may share your personal information with third-party advertising partners, such as Google Display Advertising and Remarketing services. These advertising partners may use first- and third-party cookies together to inform, optimize, and serve ads based on your past visits to this website. You can opt out of these services using the Ads Preferences Manager or you can use the Google Analytics opt-out browser add-on. These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks, commonly referred to as “interest-based advertising.”
Authorized Representatives. If another individual is managing your account on your behalf (for example, a wife managing the account of her husband), as authorized by you or as a personal representative under applicable law, that person can view all Personal Information about you in our Services.
In the Event of Merger, Sale, Divestitures or Change of Control. We may transfer or assign Personal Information to an entity that acquires or is merged with us as part of a merger, acquisition, sale of ownership or assets, or other change of control.
Other Disclosures. We may disclose your Personal Information if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our Terms of Use or Terms of Sale, including investigations of potential violations thereof; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to our, your, or third parties’ rights, property, or safety.

We may share de-identified and/or aggregate analytics with third-party partners about how users interact with our Services, including usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the Service.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Your Choices About Your Personal Information

You have choices about how we use your information. Please understand that if you choose not to disclose information to us, it may affect your ability to use some features of our Services.

Marketing. From time to time if you have supplied your email address, IonTuition and its affiliates may send you marketing or informational emails. If you prefer not to receive any or all of our marketing and promotional communications, you may opt-out of these communications by following the opt-out prompts on these communications. You also may ask us not to send you other marketing or informational communications by contacting us as specified in the Contact Us section below, and we will honor your request. Please note that even after you are removed from our marketing lists, we may still send you non-promotional communications, such as responding to your support requests.

International Visitors

Our services are hosted in the United States and are intended solely for visitors located within the United States. If you do not reside in the United States and provide personal data to us, please note that your Personal Information will be transferred, processed, collected, used, accessed and/or stored in the United States and subject to U.S. laws. The laws in the United States may not provide the same protections for your Personal Information as the jurisdiction in which you are located. Do not provide your Personal Information to us if you do not want this information to be transferred or processed outside of your country, or if the laws in your country restrict such transfers.

Information Retention

We will only keep your personal information for as long as necessary to fulfill the purposes set out in this Privacy Statement, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this Privacy Statement will require us to keep your personal information for longer than six (6) months past the termination of the user’s account.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize your information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Third-Party Sites

Our Privacy Statement does not apply to services offered by other companies or individuals, including products or websites that may be displayed to you in search results, websites that may include IonTuition Services, or other websites linked from our Site. This Privacy Statement does not cover the information practices of other companies and organizations who advertise our Services, and who may use cookies, pixel tags and other technologies to serve and offer relevant ads.

Correcting & Updating Your Information

You can edit, correct or remove any or all of the personal information you provide us by accessing the account you create when you subscribe for a Service. Remember, however, that removing personal information may limit your ability to access some or all of the features of the Services and Websites. In addition, to keep you in control of your personal information and the communications directed to you, we allow you to opt-out of receiving communications from us about new Services or Website features.

Confidentiality and Security

We maintain reasonable safeguards to protect the Personal Information we collect. While we implement these measures, please note that 100% security is not possible, and we cannot guarantee that the security measures we have in place to safeguard personal information will never be defeated or fail, or that those measures will always be sufficient or effective.

IonTuition may assign you a user ID and a password when you as part of your participation and access to the Site and your account. Only you may use your user ID and password. You may not share your user ID and password with anyone else, and you are solely responsible for maintaining and protecting the confidentiality of your user ID and password. You are fully responsible for all activities that occur under your user ID. You play a role in protecting your information as well.

Children’s Privacy

We do not knowingly collect or solicit personal information from children under the age of 16. By using the Site or Services, you represent that you are at least 16 years old. If you are under 16, please do not attempt to register for an account or send any Personal Information about yourself to us. If we become aware that we have inadvertently received or collected Personal Information from a user of the Site who is under the age of 16, we will attempt to immediately delete that information from our files and records. Furthermore, we encourage users of the Site that are minors that are 16 years of age or older to ask their parents or guardians for permission before sending any information about themselves over the Internet.

If you believe a child who is under the age of 16 has provided us with Personal Information, please contact us using the information below.

Visitors from Switzerland, United Kingdom and the European Economic Area

This section describes our privacy practices with respect to personal information that is subject to the European Union’s General Data Protection Regulation and the UK Data Protection Act of 2018 (collectively, the “GDPR”) In the event that we collect Personal Data (as defined in the GDPR) that is subject to the GDPR, this section will also apply, but only to such Personal Data. Terms in this section are to be understood in a manner consistent with GDPR including the definition of such term in the GDPR. Such term may have a different definition or meaning in other portions of this Privacy Policy.

Identification of Data Controller:

If we are providing Services directly to you, we, are the controller. To contact us, please see our contact information below. Otherwise, the institution through which we service your account is the controller.

Identification of Primary Member State Supervisory/Data Protection Authority

You have the right to lodge a complaint regarding the processing of your Personal Data with us by contacting our Data Protection Officer listed above. You also may lodge a complaint with the Data Protection Authorities in the Member State where you habitually reside, work, or where an infringement occurred. You can find a list of Data Protection Authorities here.

Legal Basis for Processing:

GDPR allows processing of personal data based on one of six legal bases. The legal bases for processing personal data are:

Consent – your freely given, specific, informed and unambiguous indication of your wishes by which you agree to the processing of personal data.
Contract – we need to process your personal data for performance of a contract or processes the information at your request prior to entering into a contract.
Legal Obligation – processing is necessary to comply with a legal obligation.
Vital Interests – your (or someone else’s) health, safety or other vital interests require processing personal data.
Public Interest – we need to process personal data to carry out a task that’s in the public interest.
Legitimate Interest – processing personal data is in our legitimate interests.

Activity	Legal Basis
To monitor and improve the experience of the Site	Consent; Legitimate Interest
To conduct promotional and marketing efforts	Consent; Legitimate Interest
To provide products or services	Contract
To comply with legal obligations and to cooperate with public and government authorities, courts or regulators	Legal Obligation
To comply with judicial proceedings, court orders or legal processes	Legal Obligation

Onward Transfer:

We will not disclose Personal Data to a third party except as stated below:

We may disclose Personal Data to subcontractors and third-party agents. Before disclosing Personal Data to a subcontractor or third-party agent, we will obtain assurances by contractual agreement from the recipient that it will: (i) transfer such data only for limited and specified purposes; (ii) ascertain that the subcontractor or third-party agent is obligated to provide at least the same level of privacy protection as is required by the GDPR; (iii) take reasonable and appropriate steps to ensure that subcontractors and third-party agents effectively process the personal information transferred in a manner consistent with the organization’s obligations under the GDPR; (iv) require subcontractors and third-party agents to notify the organization if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the GDPR; (v) upon notice, including under (iv), take reasonable and appropriate steps to stop and remediate unauthorized processing; and (vi) provide a summary or a representative copy of the relevant privacy provisions of its contract with subcontractors and third-party agents to the Supervisory Authorities upon request.

We may also be required to disclose, and may disclose, Personal Data in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements, or in the event of a merger or acquisition.

Retention of Personal Data:

Personal Data subject to GDPR and obtained by us is adequate, relevant and not excessive in relation to the purposes described in this Privacy Policy. The Personal Data is processed for purposes specified herein and will only be processed consist with these purposes described herein. We will request only the minimum amount of information required to perform the applicable services and will retain such information only for as long as necessary to provide the services or for compatible purposes, such as to provide additional services, to comply with legal requirements, or to preserve or defend our legal rights.

Right of Access to your Personal Data

Data Subjects have the right to access the Personal Data an organization holds about them. If such Personal Data is inaccurate or processed in violation of the GDPR, a Data Subject may also request that Personal Data be corrected, amended, or deleted. When we receive Personal Data, we do so on behalf of the individual submitting such Personal Data. To request access to, or correction, amendment or deletion of Personal Data, Data Subjects should contact us at the address in the “Questions?” section below. We will cooperate with all reasonable requests to assist Data Subjects to exercise their rights under the GDPR.

Choice

Data Subjects have the right to opt out of (a) disclosures of their Personal Data to third parties not identified at the time of collection or subsequently authorized, and (b) uses of Personal Data for purposes materially different from those disclosed at the time of collection or subsequently authorized. Data Subjects who wish to limit the use or disclosure of their Personal Data should submit that request to us. We will cooperate with Data Subjects’ instructions regarding the above Data Subject choices.

Transfers to the United States from the European Union:

When we transfer personal information from the EU to entities within our organization located outside of the EU, we may rely on standard contractual clauses adopted by the European Commission to help establish adequate safeguards. If we transfer personal information from the EU to another party located outside the EU, we may rely on a legal framework that provides appropriate safeguards, which could include the standard contractual clauses, binding corporate rules, or another framework deemed adequate by the European Commission.

Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us at info@iontuition.com.

Changes to this Privacy Policy

This page sets forth our Privacy Policy as of 11/15/2023. All versions of this privacy policy are dated with the effective date (the date on which the policy was posted to the Websites). By continuing to use the Websites, you consent to any changes. We will only use the information we learn about you in the manner described in the Privacy Policy in effect when the information was collected from you. However, we reserve the right to change the terms of this Privacy Policy at any time by posting revisions to our site.