Privacy Policy

1. Introduction

At PrepBC (“we”, “us”, or “our”), accessible at prepbc.com, we are committed to protecting the privacy and personal data of our users. We understand the importance of privacy in the digital age, and we are dedicated to maintaining the confidentiality, integrity, and security of your personal information. This Privacy Policy outlines how we collect, use, store, and share your data, as well as your rights under applicable privacy laws—including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope and Data Controller

This Privacy Policy applies to all personal data collected through our website, prepbc.com, and any related services or interactions you may have with us. PrepBC acts as the data controller, meaning we determine the purposes and means of processing your personal data. If you have questions regarding this policy or how your data is handled, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process the following categories of personal data:

a. Usage Data
Data about how you interact with our site, including your browser type, referring URLs, IP address, time zone settings, pages viewed, length of visit, clickstream data, and other diagnostic information.

b. Account Data
Information provided when creating an account, such as your full name, billing and shipping addresses, email address, and telephone number.

c. Profile Data
Information related to your preferences, purchase history, browsing behavior, and activity on our platform.

d. Communication Data
Data arising from your communications with us, including support tickets, chat transcripts, email correspondence, and contact forms submitted via prepbc.com.

e. Technical Data
Information about your device and system, such as operating system, hardware model, unique identifiers, screen resolution, and installed software.

f. Transaction Data
Details of purchases and payments made on the site, including transaction amount, product or service ordered, delivery information, and payment method (note: we do not store full payment card information).

g. Preference Data
Your settings regarding marketing communications, product interests, notification preferences, and data-sharing consents.

4. Legal Bases for Processing

Our collection and use of your personal data are lawful under the following legal bases:

– Consent: Where you have provided clear consent for a specific processing activity (e.g., email marketing).
– Contract: When processing is necessary to fulfill a contractual obligation or to take steps at your request prior to entering into a contract (e.g., creating an account or purchasing products).
– Legal Obligation: When we need to comply with legal or regulatory responsibilities.
– Legitimate Interests: Where processing is necessary for our legitimate business interests, provided your fundamental rights do not override those interests. This includes improving our services, fraud prevention, and network security.

5. Your Rights

Subject to applicable laws and regulations, you have the following rights regarding your personal data:

– Access: Request information or a copy of the personal data we hold about you.
– Rectification: Request correction of any inaccurate or incomplete data.
– Erasure (Right to be Forgotten): Request deletion of your personal data, subject to certain exceptions.
– Restriction of Processing: Request limitation of data processing under specific conditions.
– Data Portability: Request a copy of the data you provided to us in a structured, commonly used, and machine-readable format.
– Objection: Object to processing where it is based on our legitimate interests or for direct marketing purposes.

To exercise any of the above rights, please contact us at [email protected].

6. Security Measures

PrepBC implements industry-standard technical and organizational measures to secure your personal data, including but not limited to:

– Data encryption during transmission and at rest.
– Role-based access control to minimize exposure to sensitive data.
– Firewalls and intrusion detection systems.
– Regular backup and disaster recovery protocols.
– Employee training on data protection principles and security awareness.

While no data transmission method is absolutely secure, we strive to use commercially acceptable means to protect your data.

7. International Data Transfers

If your data is transferred outside of the European Economic Area (EEA) or other jurisdictions with equivalent data protection laws, we ensure appropriate safeguards are in place. Such safeguards may include:

– Data transfer agreements using the European Commission’s Standard Contractual Clauses (SCCs).
– Transfers to countries deemed to have adequate data protection laws by regulatory authorities.
– Other lawful transfer mechanisms approved under applicable law.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which we collected it, subject to any legal, contractual, or regulatory obligations. Typical retention periods include:

– Account Data: for the lifetime of the user account and up to 7 years thereafter for compliance purposes.
– Transaction Data: for up to 7 years to meet tax, accounting, and legal obligations.
– Communication Data: for a maximum of 3 years from the date of last interaction.
– Preference Data: retained until revoked or updated by the user.

9. Cookie Policy

PrepBC uses cookies and similar tracking technologies to enhance your experience on prepbc.com. These are categorized as follows:

– Essential Cookies: Necessary for the core operation of the website (e.g., login functionality, shopping cart).
– Functional Cookies: Allow the site to remember your choices and preferences (e.g., language, location).
– Analytics Cookies: Collect information about user behavior, site usage, and performance (e.g., Google Analytics).
– Performance Cookies: Help diagnose issues and improve performance of our services.

Cookies may be first-party (set by us) or third-party (set by external services).

10. Cookie Management and Legal Compliance

In compliance with the GDPR and CCPA, users are provided the ability to:

– Accept or reject non-essential cookies upon first visit.
– Access a cookie management dashboard to adjust preferences at any time.
– Opt-out of the sale or sharing of personal information (CCPA rights).

In addition, we honor Do Not Track (DNT) signals where supported.

11. Children’s Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal data from anyone under 13. If we learn that we have gathered information from a child without appropriate parental consent, we will take immediate steps to delete such data. Parents or guardians who believe we may have collected information from a child may contact us at [email protected].

12. Policy Updates

We may revise this Privacy Policy from time to time to reflect changes in legislation, technology, or business practices. Users will be notified of material changes through notifications posted on the website or via direct communication, where applicable.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

PrepBC
Email: [email protected]
Website: https://prepbc.com

We are committed to compliance with global data protection laws, and we welcome your feedback. Please don’t hesitate to reach out with any privacy-related concerns.