Privacy Policy

2. Personal Data We Collect

We collect information in two main ways: (a) information you provide to us directly, and (b) information collected automatically when you browse the site. We limit collection to what is reasonably necessary for educational inquiries, site security, and basic measurement of how our materials are used.

• Identity and contact details: name, email address, and phone number (if you provide it).
• Form content: messages you send, program interests, learning goals, and any details you choose to share in your inquiry.
• Technical data: IP address, browser type, device type, operating system, language settings, and approximate location inferred from IP (city/region level).
• Usage data: pages viewed, time on page, referrer/entry page, and interactions such as clicking navigation links (where analytics is enabled by consent).
• Cookies and identifiers: small files and identifiers that remember cookie choices and, with consent, help measure usage or advertising conversions (see Section 4).
• Conversion events: records that a form was sent or that a key page was reached (for example, a thank-you page), where marketing measurement is enabled by consent.

We do not ask for special-category data (such as health information, biometric data, political opinions, or religious beliefs) and we do not request government identification numbers. Please avoid including sensitive personal information in the message field of our contact form.

3. Why We Process Data & Legal Basis

We process personal information for purposes that support educational service delivery, website operations, and security. Where the GDPR or UK GDPR applies (for example, if you access the site from the EEA or UK), we also identify a legal basis under Article 6.

• Responding to inquiries and providing requested information: to answer questions about programs, recommend pathways, and provide outlines and materials. Legal basis: GDPR Art. 6(1)(b) (steps prior to entering a contract) and, where consent is collected in the form, Art. 6(1)(a).
• Operating and securing the website: to maintain availability, prevent abuse, and investigate suspicious activity. Legal basis: GDPR Art. 6(1)(f) (legitimate interests in security and fraud prevention).
• Analytics (optional): to understand what content is most useful and improve clarity of educational materials. Legal basis: GDPR Art. 6(1)(a) (consent).
• Marketing and advertising measurement (optional): to measure campaign performance and limit irrelevant advertising. Legal basis: GDPR Art. 6(1)(a) (consent).
• Legal compliance: to meet legal obligations, respond to lawful requests, and keep required records. Legal basis: GDPR Art. 6(1)(c).

Automated decision-making: We do not engage in automated decision-making or profiling that produces legal or similarly significant effects for you under GDPR Article 22.

In Canada, we also aim to follow applicable privacy principles, including those found in the Personal Information Protection and Electronic Documents Act (PIPEDA) and similar provincial laws where relevant. If you have a question about our Canadian privacy approach, contact us at [email protected].

4. Cookies & Tracking Technologies

Cookies are small text files stored on your device. Some cookies are essential to make the site work reliably. Others are used only if you opt in, for example to measure site usage (analytics) or to measure marketing performance (marketing cookies). We also use similar technologies such as pixel tags and server-side event calls, which may send identifiers and event information to a partner platform when enabled by consent.

Essential (always active)

Essential cookies support core site functions such as session continuity, basic security, and remembering your cookie preferences. These cookies do not require opt-in consent in many jurisdictions because they are necessary for the website to function.

• _site_session: supports session continuity. Retention: session.
• cookie_consent: stores your cookie preference selection. Retention: 12 months.

Analytics (requires consent)

When enabled, analytics help us understand how visitors navigate our educational content: which pages are read most, what topics are searched for, and where clarity can be improved. We configure analytics to reduce collection where possible (for example, IP anonymization features where available). Retention for analytics data is typically set to 14 months.

• Google Analytics 4 (GA4): may set cookies such as _ga and _ga_XXXXXXXXXX (where X represents a GA4 property identifier). Typical cookie retention: 2 years.

Marketing (requires consent)

When enabled, marketing cookies and related tags help measure advertising effectiveness and limit repeated or irrelevant ads. This may include tracking events like page views and form submissions and associating them with an advertising click identifier. Marketing cookies are typically short-lived (for example, 90 days).

• Google Ads: may set _gcl_au (typical retention: 90 days).
• Meta: may set _fbp and _fbc (typical retention: 90 days, where applicable).

For additional detail, see our Cookie Policy, which lists categories, examples, and retention.

5. Consent (EEA/UK) and Managing Choices

Users in the EEA and UK receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent (GDPR Art. 6(1)(a)). Your consent choice is recorded in the cookie_consent cookie and stored for up to 12 months.

You can withdraw consent at any time by using the “Manage cookie preferences” link in the footer or by clearing cookies in your browser settings. Withdrawal does not affect the lawfulness of processing based on consent before the withdrawal.

6. Sharing With Advertising & Service Partners

We use carefully selected service providers to help operate the site and, where you consent, to measure usage and marketing performance. We do not sell personal information. When we share data with vendors, we do so for the purposes described in this Privacy Policy and subject to contractual safeguards where applicable.

• Google LLC: analytics and advertising measurement (for example GA4 and Google Ads). Privacy information: https://policies.google.com/privacy.
• Meta Platforms, Inc.: advertising measurement and audience tools (for example Meta Pixel and related services). Privacy information: https://www.facebook.com/privacy/policy.
• Cloudflare, Inc.: content delivery and security services that can process IP addresses for threat detection and performance. Privacy information: https://www.cloudflare.com/privacypolicy/.

These providers may process technical identifiers, cookies, and event data. We do not permit them to use site data for their own independent commercial purposes outside providing services to us, subject to their platform terms and configuration options.

7. International Transfers

We operate in Canada, but some service providers and infrastructure may process data in other countries (including the United States). Where GDPR/UK GDPR applies, transfers outside the EEA/UK may be supported by adequacy mechanisms such as the EU–U.S. Data Privacy Framework (and the UK Extension, where applicable) or by contractual safeguards such as Standard Contractual Clauses (EU 2021/914) and the UK International Data Transfer Addendum/IDTA, depending on the provider and configuration.

For Canadian users, international transfers may still occur through vendors used for hosting, email delivery, security, and analytics. We take reasonable steps to ensure appropriate safeguards are in place with service providers.

8. Retention

We keep personal information only as long as necessary for the purposes described in this Privacy Policy, and then delete or anonymize it unless a longer retention is required by law.

• Contact form submissions: up to 2 years from the last interaction (to support follow-up and continuity), unless you request deletion sooner.
• Email correspondence: for the duration of the inquiry relationship plus up to 1 additional year for administrative continuity.
• Server/security logs: typically up to 90 days, unless extended to investigate abuse or protect the site.
• Analytics data: typically 14 months (where enabled by consent).
• Marketing cookies: per cookie lifetime (often 90 days), where enabled by consent.
• Cookie consent record: up to 3 years for audit and compliance evidence.

9. Your Rights

Depending on where you live, privacy laws may grant you rights over your personal information. We aim to respond promptly and fairly to all requests.

Under GDPR/UK GDPR, you may have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and to object (Art. 21). You may also withdraw consent at any time (Art. 7(3)).

To exercise rights, email [email protected]. We may ask for enough information to verify identity and locate records. We generally respond within 30 days, and may extend by up to 60 days for complex requests.

If you are in the EEA or UK and believe your request has not been handled appropriately, you may lodge a complaint with a supervisory authority. Reference directories: https://edpb.europa.eu (EEA) and https://ico.org.uk (UK).

For Canadian users, you can also ask questions or raise concerns by contacting us. Depending on the situation, you may have the right to complain to the Office of the Privacy Commissioner of Canada (OPC). Information: https://www.priv.gc.ca/.

10. Children

This website is not directed at individuals under 16. We do not knowingly collect personal information from minors. If you believe a child under 16 has provided personal information without appropriate consent, contact us and we will take steps to delete it promptly.

11. Do Not Track

Some browsers include a “Do Not Track” (DNT) signal. This website does not respond to DNT signals in a standardized way. Third-party providers may have their own DNT handling and opt-out mechanisms.

12. Data Deletion Requests

If you want us to delete personal information associated with a contact request, email [email protected] with the subject line “Data Deletion Request”. We may ask for limited verification to ensure we delete the correct record. We aim to complete deletion within 30 days unless we must retain some information to comply with law or to protect the website from abuse.

13. Business Transfers

If HISTORIA Canada Education Inc. is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. If the transfer would materially change how we use personal information, we will provide notice on the website.

14. California (CCPA / CPRA)

If you are a California resident, California privacy laws may provide additional rights regarding personal information. In the last 12 months, we may have collected identifiers (such as name, email, IP address), internet/network activity (such as pages viewed), and inferences (such as content interests). We use this information for site operations, analytics (if consented), and advertising measurement (if consented).

We do not sell personal information as defined by the CCPA. We may share information for cross-context behavioral advertising when marketing cookies are enabled. You can opt out by using the cookie preferences panel (“Manage cookie preferences” in the footer).

• Right to know, delete, and correct.
• Right to opt out of sale/sharing (where applicable).
• Right to non-discrimination for exercising privacy rights.

Submit requests by emailing [email protected] with the subject “California Privacy Request”. We may require verification. Authorized agents must provide proof of authorization.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling producing legal or similarly significant effects.

Submit requests by emailing [email protected] with the subject “Virginia Privacy Request”. If a request is denied, you may appeal by emailing with the subject “Appeal of Refusal — Privacy Request”. We will respond within 60 days.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. If changes are material, we will post a notice on the website at least 14 days before the updated policy takes effect. The “Last Updated” date at the top of this page reflects the most recent version.

18. Contact

Questions about this Privacy Policy or requests relating to personal information can be sent to:

HISTORIA Canada Education Inc.
145 Wellington St W, Toronto, ON M5J 1H8, Canada
Email: [email protected]
Phone: +1 416 554 7819