Privacy Policy

1 Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Account Information: Name, email address, organization (optional)
• Authentication Data: Encrypted password, email confirmation status
• Profile Information: Any additional information you choose to provide

Usage Information

We automatically collect certain information when you use the platform:

• Log Data: IP address, browser type, pages visited, time spent
• Device Information: Device type, operating system
• Cookies: Session cookies for authentication and preferences

User-Generated Content

If you submit stories, case studies, or other content, we collect and store that content along with metadata such as submission date and your account information.

2 How We Use Your Information

We use the collected information for:

• Account Management: Creating and managing your account, authentication
• Service Provision: Providing access to educational resources and platform features
• Communication: Sending account-related emails (confirmation, password reset)
• Content Moderation: Reviewing and managing user submissions
• Platform Improvement: Analyzing usage to improve our services
• Security: Detecting and preventing fraudulent or unauthorized activity
• Research: Aggregated, anonymized data for educational research purposes

3 Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: When you create an account and agree to our terms
• Contract Performance: To provide the services you've requested
• Legitimate Interests: Platform security, improvement, and research
• Legal Obligations: When required by law

4 Information Sharing

We do not sell your personal information. We may share information with:

• CHERISH Project Partners: For collaborative project activities
• Service Providers: Email services, hosting providers (under strict data protection agreements)
• Legal Authorities: When required by law or to protect rights and safety

User-generated content that is approved and published may be visible to other platform users and the public, as indicated during submission.

5 Data Security

We implement appropriate security measures to protect your information:

• Encrypted password storage using industry-standard hashing
• HTTPS encryption for all data transmission
• Regular security assessments and updates
• Access controls limiting who can view personal data
• Account lockout protection against brute-force attacks

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6 Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Understand how users interact with the platform (anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

7 Your Rights (GDPR)

Under GDPR, you have the following rights:

To exercise these rights, contact us using the information provided below. We will respond within 30 days.

8 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for legal compliance, dispute resolution, or research purposes (in anonymized form) for a limited period.

• Account Data: Deleted upon account closure request
• Published Content: May be retained if publicly shared (anonymized if requested)
• Log Data: Retained for up to 12 months

9 Children's Privacy

CHERISH is designed for educational purposes and may be used by young people under adult supervision. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information, please contact us immediately.

For users aged 13-18, we encourage parental involvement and oversight when using the platform.

10 International Data Transfers

Your information may be processed in countries within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending an email. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12 Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.