Privacy Policy

This Privacy Policy explains how BidandStudy collects, uses, and protects the personal data of school staff who interact with our platform — typically the authorized representative who registers the school and any colleagues who manage bids, offers and the resulting enrollments from your dashboard.

Personal data provided is kept as long as the commercial relationship is maintained and as required by commercial or fiscal regulations. Processing is legitimized by your school's registration and use of our services, by the Master Services Agreement (MSA) you accept, or by your explicit consent within the forms on this site.

For information about how we handle student personal data — for example when a student you respond to later accepts your offer — see our student-facing Privacy Policy.

School Account Information

• Full name, title/role and work email of the contact person who registers the school
• Phone number (optional)
• School name, website, countries and cities where you operate
• Languages taught, association memberships and accreditations
• Quality and safeguarding self-declarations made during registration
• Markets you choose to exclude (countries you don't want to receive bids from)

Commercial & Contract Information

• The commission collection model you select (confirmation fee from student, traditional invoice, or a custom proposal)
• Your Master Services Agreement choice — accepted, deferred, or replaced by your own contract uploaded for review
• Custom contract files you upload, stored privately on encrypted object storage
• Your school's own course cancellation and refund policy when you publish it

Operational Data

• Bid responses, offers and acceptance history attributable to your school
• Messages exchanged with BidandStudy support and ops
• Dashboard activity (logins, settings changes, offer authorship)

Payment Information

• Bank or payout details you provide so we can transfer commissions you owe us, or receive payouts when you've granted us authority to collect from the student on your behalf
• Transaction history and invoices issued to your school
• Payment data is processed by PCI-compliant third-party providers (e.g. Stripe); we do not store complete card or bank credentials

Technical Data

• IP address and browser type
• Cookies and usage analytics
• Device information

Service Provision

To register your school, route relevant student bids to your dashboard, surface your offers to students, manage the acceptance and post-sale flow, and provide the operational support our platform offers as your education agency.

Communication

To send bid notifications, dashboard alerts, contractual notices (such as MSA updates), and to respond to your inquiries.

Commission & Payment Processing

To collect the commission due to BidandStudy at the rates the School declared at registration (the Agreed Rates) under the model the School chose — either from the student at offer acceptance (confirmation fee) or by invoicing the School directly under standard agent terms — and to process those payments through PCI-compliant providers. BidandStudy does not act as an escrow agent: tuition paid by the student goes to the School under its own payment guidelines.

Quality Assurance

To monitor response times, moderate disputes, manage the review system and ensure platform security and fraud prevention.

Legal Compliance

To comply with applicable laws, tax obligations and other regulatory requirements.

Students Who Accept Your Offer

When a student accepts an offer your school authored, we share the contact and identification details necessary to complete enrollment (name, email, phone, course preferences). Until acceptance, your school's identity is shielded from the student and the student's identity is shielded from your school — we mediate the bidding round on both sides.

Payment Providers

We use PCI-compliant payment processors (e.g. Stripe) to charge students confirmation fees, invoice schools, and disburse balances. We never store complete card or bank credentials, only payment tokens.

Service Providers

We may share data with hosting providers, analytics services, email delivery services, and other third-party services necessary for platform operation. All such providers are bound by data protection agreements.

Legal Disclosures

We may disclose data to comply with applicable law, lawful requests by public authorities, or to protect our rights, property and the safety of our users.

We always limit the information shared with third parties to the minimum required for service provision.

Essential Cookies

We use cookies to maintain sessions, save preferences, and ensure content is displayed in the preferred language.

Analytics

We use analytics services to detect website errors, understand usage patterns, and provide a better user experience. These services may collect anonymized usage data.

Cookie Management

You can manage cookie preferences at any time through our Cookie Preferences panel in the footer, or by adjusting browser settings.

Encryption

Personal data is encrypted in transit using industry-standard SSL/TLS, and contract files uploaded to our object storage are encrypted at rest.

Access Controls

We implement technical and organizational measures to protect against unauthorized access, modification or disclosure. Access to school data inside BidandStudy is limited to staff who need it to operate the service.

Data Storage

Data is stored on infrastructure located in Ireland (European Union), with appropriate safeguards and access controls under the EU General Data Protection Regulation (GDPR).

Regular Audits

We regularly review and update our security measures to ensure continued protection of information.

Depending on the location of your school's contact person and applicable data protection law (e.g. GDPR, LGPD, CCPA), you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal and contractual retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdrawal: Withdraw consent at any time, where processing is based on consent

Some rights may be limited by legal obligations — for example, tax and commercial law requirements for invoice and contract retention.

Active Accounts

We retain school account and operational data for as long as your school keeps an active account with us.

Contract & Commercial Records

Master Services Agreements, custom contracts and invoices are retained for the periods required by tax and commercial law in the United States and in the school's jurisdiction.

Payment Data

Payment information is retained only as long as necessary for transaction processing, dispute resolution, and legal compliance.

Automatic Deletion

After the commercial relationship ends, personal data is deleted automatically once the required archiving periods expire.

For questions about this Privacy Policy or to exercise your rights, contact us: