PRIVACY POLICY
Enigma Business School (EBS) is committed to protecting the privacy and personal information of our students, faculty, staff, alumni, partners, and visitors. This Privacy Policy explains how EBS collects, uses, stores, manages, and protects personal data across all digital platforms, including the website, Student Portal, Virtual Campus, LMS, and associated systems.
By accessing or using EBS services, users agree to the terms outlined in this Privacy Policy.
1. INFORMATION WE COLLECT
EBS collects personal information only for legitimate academic and administrative purposes.
A. Personal Identification Data
Full name
Date of birth
Nationality
Gender (if required)
Contact information (email, phone)
Identification documents (passport, ID card)
Photographs (for academic records)
B. Academic Information
Enrollment data
Course participation
Assignments, quizzes, exams
Grades and evaluations
Graduation records
RPEL and Credit Transfer documentation
C. Financial Information
Tuition payment records
Billing details
Transaction data
Information processed through PayPal, Wise, Stripe, or credit card gateways
EBS does not store full credit card numbers or sensitive banking information.
D. Technical and Usage Data
IP address and device details
Browser type and system configuration
LMS login and interaction logs
Website navigation behavior
Cookies and analytics data
E. Communication Records
Emails
Support tickets
Chat interactions
Complaint and appeal submissions
2. HOW WE USE YOUR INFORMATION
EBS processes data for the following purposes:
A. Academic Operations
Enrollment and student verification
Course delivery
Assessment and grading
Issuing certificates, transcripts, and degrees
Academic support and communication
B. Administrative Services
Tuition processing
Scheduling and academic management
Maintaining student records
C. Platform Functionality
Improving website and LMS performance
Personalizing the learning experience
Monitoring academic progress
D. Security and Integrity
Identity verification
Fraud detection and prevention
Ensuring compliance with academic integrity policies
Cybersecurity monitoring
E. Legal and Regulatory Compliance
Responding to legal requests
Maintaining academic and institutional records
EBS does not use personal data for unauthorized marketing or commercial distribution.
3. LEGAL BASIS FOR DATA PROCESSING
EBS processes personal data based on:
Student consent
Institutional legitimate interests
Academic and administrative requirements
Contractual obligations
Legal compliance
Users may withdraw consent at any time where applicable.
4. COOKIES AND TRACKING TECHNOLOGIES
EBS uses cookies to enhance user experience and improve site functionality.
Cookies may be used to:
Recognize repeat visitors
Analyze website performance
Support login functionality
Monitor technical activity
Users may adjust browser settings to disable cookies. However, certain features may not function properly without them.
A separate Cookies Policy page provides detailed information.
5. DATA STORAGE AND RETENTION
EBS stores personal information on secure servers with controlled access.
Data retention follows these guidelines:
Academic records may be stored indefinitely for verification purposes
Payment and financial data are retained according to legal requirements
Technical logs are retained temporarily for system monitoring
Communication records are stored based on operational necessity
Data no longer required will be deleted securely.
6. DATA SHARING AND THIRD-PARTY ACCESS
EBS does not sell or rent personal data to third parties.
Data may be shared only with:
Payment processors (PayPal, Wise, Stripe)
LMS and hosting providers
Academic partners for dual/triple degree programs
Verification authorities (upon student request)
Legal authorities if required
All third-party providers comply with international security standards.
7. DATA SECURITY MEASURES
EBS uses advanced cybersecurity protocols to protect personal data:
SSL/TLS encryption
Encrypted data storage
Multi-factor authentication (where applicable)
Access control restrictions
Continuous system monitoring
Regular security audits
Users are also responsible for protecting their login credentials.
8. INTERNATIONAL DATA TRANSFER
As a global institution, EBS may process data across different regions.
EBS ensures:
Compliance with international data protection standards
Secure transfer protocols
Contracts with third-party processors ensuring data protection
9. USER RIGHTS
Students and users have the right to:
Access their personal data
Request corrections of inaccurate information
Request deletion (where applicable)
Restrict processing
Object to certain uses of data
Receive explanation of data processing practices
Requests may be submitted through Academic Services.
10. DATA BREACH RESPONSE
In the event of a data breach, EBS will:
Investigate immediately
Notify affected users
Report incidents to legal authorities if required
Take corrective steps to prevent recurrence
EBS maintains a formal incident response protocol.
11. LINKS TO EXTERNAL SITES
EBS may provide links to third-party websites for academic or informational purposes. EBS is not responsible for the privacy practices or content of external sites.
Users are encouraged to review their privacy policies independently.
12. UPDATES TO THIS POLICY
EBS may update the Privacy Policy periodically to reflect:
Technological changes
Legal requirements
Institutional improvements
Updated versions will be published on the website, and users are encouraged to review the policy regularly.
13. CONTACT INFORMATION
For privacy-related inquiries or requests, contact:
Data Protection Office
Email: privacy@enigmabusinessschool.id
Website: www.enigmabusinessschool.id
INSTITUTIONAL STATEMENT
EBS is dedicated to protecting the privacy and security of its global academic community. Our Privacy Policy reflects our commitment to ethical data management, responsible digital governance, and the preservation of trust between EBS and its students, faculty, alumni, and partners.