Privacy Policy PRIVACY POLICYEnigma Business School (EBS) is committed to protecting the privacy and personal information of our students, faculty, staff, alumni, partners, and visitors. This Privacy Policy explains how EBS collects, uses, stores, manages, and protects personal data across all digital platforms, including the website, Student Portal, Virtual Campus, LMS, and associated systems.By accessing or using EBS services, users agree to the terms outlined in this Privacy Policy.1. INFORMATION WE COLLECTEBS collects personal information only for legitimate academic and administrative purposes.A. Personal Identification DataFull nameDate of birthNationalityGender (if required)Contact information (email, phone)Identification documents (passport, ID card)Photographs (for academic records)B. Academic InformationEnrollment dataCourse participationAssignments, quizzes, examsGrades and evaluationsGraduation recordsRPEL and Credit Transfer documentationC. Financial InformationTuition payment recordsBilling detailsTransaction dataInformation processed through PayPal, Wise, Stripe, or credit card gatewaysEBS does not store full credit card numbers or sensitive banking information.D. Technical and Usage DataIP address and device detailsBrowser type and system configurationLMS login and interaction logsWebsite navigation behaviorCookies and analytics dataE. Communication RecordsEmailsSupport ticketsChat interactionsComplaint and appeal submissions2. HOW WE USE YOUR INFORMATIONEBS processes data for the following purposes:A. Academic OperationsEnrollment and student verificationCourse deliveryAssessment and gradingIssuing certificates, transcripts, and degreesAcademic support and communicationB. Administrative ServicesTuition processingScheduling and academic managementMaintaining student recordsC. Platform FunctionalityImproving website and LMS performancePersonalizing the learning experienceMonitoring academic progressD. Security and IntegrityIdentity verificationFraud detection and preventionEnsuring compliance with academic integrity policiesCybersecurity monitoringE. Legal and Regulatory ComplianceResponding to legal requestsMaintaining academic and institutional recordsEBS does not use personal data for unauthorized marketing or commercial distribution.3. LEGAL BASIS FOR DATA PROCESSINGEBS processes personal data based on:Student consentInstitutional legitimate interestsAcademic and administrative requirementsContractual obligationsLegal complianceUsers may withdraw consent at any time where applicable.4. COOKIES AND TRACKING TECHNOLOGIESEBS uses cookies to enhance user experience and improve site functionality.Cookies may be used to:Recognize repeat visitorsAnalyze website performanceSupport login functionalityMonitor technical activityUsers may adjust browser settings to disable cookies. However, certain features may not function properly without them.A separate Cookies Policy page provides detailed information.5. DATA STORAGE AND RETENTIONEBS stores personal information on secure servers with controlled access.Data retention follows these guidelines:Academic records may be stored indefinitely for verification purposesPayment and financial data are retained according to legal requirementsTechnical logs are retained temporarily for system monitoringCommunication records are stored based on operational necessityData no longer required will be deleted securely.6. DATA SHARING AND THIRD-PARTY ACCESSEBS does not sell or rent personal data to third parties.Data may be shared only with:Payment processors (PayPal, Wise, Stripe)LMS and hosting providersAcademic partners for dual/triple degree programsVerification authorities (upon student request)Legal authorities if requiredAll third-party providers comply with international security standards.7. DATA SECURITY MEASURESEBS uses advanced cybersecurity protocols to protect personal data:SSL/TLS encryptionEncrypted data storageMulti-factor authentication (where applicable)Access control restrictionsContinuous system monitoringRegular security auditsUsers are also responsible for protecting their login credentials.8. INTERNATIONAL DATA TRANSFERAs a global institution, EBS may process data across different regions.EBS ensures:Compliance with international data protection standardsSecure transfer protocolsContracts with third-party processors ensuring data protection9. USER RIGHTSStudents and users have the right to:Access their personal dataRequest corrections of inaccurate informationRequest deletion (where applicable)Restrict processingObject to certain uses of dataReceive explanation of data processing practicesRequests may be submitted through Academic Services.10. DATA BREACH RESPONSEIn the event of a data breach, EBS will:Investigate immediatelyNotify affected usersReport incidents to legal authorities if requiredTake corrective steps to prevent recurrenceEBS maintains a formal incident response protocol.11. LINKS TO EXTERNAL SITESEBS may provide links to third-party websites for academic or informational purposes. EBS is not responsible for the privacy practices or content of external sites.Users are encouraged to review their privacy policies independently.12. UPDATES TO THIS POLICYEBS may update the Privacy Policy periodically to reflect:Technological changesLegal requirementsInstitutional improvementsUpdated versions will be published on the website, and users are encouraged to review the policy regularly.13. CONTACT INFORMATIONFor privacy-related inquiries or requests, contact:Data Protection OfficeEmail: privacy@enigmabusinessschool.idWebsite: www.enigmabusinessschool.idINSTITUTIONAL STATEMENTEBS is dedicated to protecting the privacy and security of its global academic community. Our Privacy Policy reflects our commitment to ethical data management, responsible digital governance, and the preservation of trust between EBS and its students, faculty, alumni, and partners.Enigma Business School (EBS)