Privacy Policy
Effective date: October, 2025
Legal Entity: Edutopia Studios S.A. ("Edutopia", "we", "us")
Website: https://www.edutopia-studios.com (the "Site")
Contact: info@edutopia-studios.com
0. Scope; Applicability
This Privacy Policy (the “Policy”) describes how Edutopia Studios S.A. ("Edutopia", "we", "us") collects, uses, discloses, and safeguards Personal Information in connection with access to and use of the edutopia-studios.com website and the online features and services made available through it (the “Site” and the “Online Services”). Personal Information means information that identifies or can reasonably be linked to an identifiable individual, as determined under applicable law.
This Policy does not govern the provision of our commercial services, licensing programs, content deliveries, or project deployments, which are subject to separate written agreements (e.g., MSA/SOW/MELF, License Agreements, Data Processing Agreements – DPAs). Where those agreements address privacy or data protection, those terms control for the relevant relationship or project.
Children’s data (COPPA and similar laws). If a client deployment involves the collection or processing of children’s personal information, the processing will be governed by the applicable agreements and notices and by mandatory laws (including, where relevant, the U.S. Children’s Online Privacy Protection Act – COPPA), which require, among other things, online notice, direct notice to parents, and verifiable parental consent before collecting a child’s personal information. Where Edutopia acts as a processor, the parties will execute a DPA allocating roles and responsibilities.
By accessing or using the Site, you acknowledge that you have read and understood this Policy and, where required by law, you consent to the processing of Personal Information as described herein. If you do not agree with this Policy, you must not access or use the Site.
1. Personal information we collect
We collect the following categories of information:
(a) Information you provide directly (e.g., via the contact form or email):
Contact details (name, work email, company/organization, role/title);
Message content you choose to share.
(b) Information collected automatically (strictly necessary for Site operation and security):
Technical data such as IP address, browser/user‑agent, device type, referring URL, timestamps, and basic event logs (page views, errors);
Cookies that are strictly necessary to deliver pages and manage the contact form. We do not use third‑party advertising cookies on the Site.
We do not intentionally collect special‑category data (e.g., health, biometrics), student records, or children’s personal information through the Site.
2. Purposes of processing
We process Personal Information for the following purposes and only to the extent reasonably necessary to:
(a) Respond to and manage inquiries, requests for information, and other communications initiated by you;
(b) Provide, operate, administer, maintain, and support the Site and the Online Services, including hosting, availability, performance, and customer support;
(c) Preserve security, integrity, and availability of the Site; detect, prevent, and investigate fraud, abuse, security incidents, and other harmful or unlawful activity; and enforce our Terms of Use and applicable policies;
(d) Monitor, assess, and improve the performance, functionality, and user experience of the Site (including analytics performed on aggregated or de‑identified information, where feasible);
(e) Comply with legal and regulatory obligations, respond to lawful requests, and maintain appropriate records;
(f) Establish, exercise, or defend legal claims; and
(g) Plan and effect corporate transactions (e.g., restructurings, mergers, acquisitions), to the extent permitted by law.
We will not process Personal Information for purposes that are materially different, unrelated, or incompatible with those stated above without providing notice and, where required by applicable law, obtaining your consent. See Section 3 (Legal bases) for information about our legal grounds for processing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
3. Legal bases
Territorial scope. This Section applies only to the extent our processing falls within the territorial scope of the EU General Data Protection Regulation (GDPR) or the UK GDPR.
Legal bases. Where GDPR/UK GDPR applies, we rely on the following legal grounds:
Legitimate interests (Art. 6(1)(f)) to operate, administer, secure, and improve the Site; to respond to inquiries; to prevent fraud/abuse; and to enforce our Terms.
Legal obligation (Art. 6(1)(c)) where processing is necessary to comply with applicable law (e.g., record‑keeping, responding to lawful requests).
Consent (Art. 6(1)(a)) for non‑essential cookies/technologies (if deployed in the future) and for certain categories of communications, where required by law. Under the ePrivacy rules, we will seek consent before placing or reading any non‑essential cookies on your device.
Contract/pre‑contractual steps (Art. 6(1)(b)), where we process Personal Information at your request to evaluate or take steps prior to entering into a contract with your organization (e.g., responding to RFPs or quotes).
Where processing is based on consent, you may withdraw that consent at any time by emailing info@edutopia-studios.com; this will not affect the lawfulness of processing prior to withdrawal.
U.S. children’s privacy (COPPA). Separately from GDPR/UK GDPR, if a deployment involves the collection or processing of personal information from children in the United States, we will comply with the Children’s Online Privacy Protection Act (COPPA) and related FTC rules (including online notice, direct notice to parents, and verifiable parental consent prior to collection). As stated elsewhere in this Policy, the Site is not directed to children under 13 and we do not knowingly collect children’s Personal Information through the Site.
4. Disclosures; Service Providers and Processors
We do not sell Personal Information and we do not “share” Personal Information for cross‑context behavioral advertising as those terms may be defined under applicable law. We also do not authorize our service providers to use Personal Information for their own independent purposes.
We disclose Personal Information only to the following categories of recipients, and only to the extent reasonably necessary for the purposes described in Section 2:
(a) Service providers / processors. Vendors that provide services on our behalf—such as hosting and cloud infrastructure, email/form delivery, customer support tooling, and security/anti‑abuse. We enter into written agreements requiring confidentiality; appropriate technical and organizational security measures; use solely under our documented instructions; assistance with data‑subject rights and security incidents; and deletion or return of Personal Information at the end of services. Where vendors engage sub‑processors, they must impose equivalent obligations.
(b) Professional advisers. Lawyers, auditors, insurers, and accountants subject to professional duties and confidentiality obligations, for legitimate business purposes (including legal advice and compliance).
(c) Corporate affiliates and transactions. Our affiliates (where relevant) and actual or prospective counterparties and their advisers in connection with a corporate transaction (e.g., financing, merger, acquisition, restructuring, or insolvency). We will take steps to ensure appropriate protection and require that any successor entity honors this Policy with respect to Personal Information received.
(d) Legal and safety. Governmental or law‑enforcement authorities, courts, regulators, or other third parties when we believe disclosure is necessary to (i) comply with law, regulation, subpoena, or court order; (ii) protect the rights, privacy, safety, or property of Edutopia, our users, children, or the public; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; or (iv) enforce our Terms of Use and other policies.
(e) Aggregated / de‑identified information. We may disclose aggregated or de‑identified information that does not identify any individual and that we commit not to re‑identify, except as permitted by law.
5. International transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses or equivalent transfer mechanisms) to protect your information.
6. Security
We maintain reasonable technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Access is limited to personnel who need it for their roles.
7. Retention
We retain inquiry records no longer than necessary for the purposes described above—typically up to 24 months from the last interaction—unless a longer period is required by law. Security logs may be kept for a shorter period consistent with our security practices. You may request earlier deletion (see Section 9).
8. Children’s privacy (COPPA alignment)
(a) Audience and age threshold. The Site and Online Services are intended for adults acting in a professional capacity and are not directed to children under 13 years of age (each, a “Child” for purposes of U.S. COPPA). We do not knowingly collect Personal Information from Children through the Site.
(b) No submission of children’s data via general channels. You must not submit, upload, or otherwise provide Children’s Personal Information via the Site’s general contact mechanisms. By using the Site, you represent that you will not provide Children’s Personal Information through the Site unless and until the applicable legal prerequisites (e.g., verifiable parental consent or school authorization where permitted by law) have been satisfied outside the general Site channels and under the governing project agreements.
(c) Parent/guardian inquiries (COPPA). If you are a parent or legal guardian and believe that a Child has provided Personal Information on the Site without the required consents, please contact us at info@edutopia-studios.com with the subject line “COPPA Inquiry.” Include: (i) the Child’s first name and last initial; (ii) a description and approximate date of the interaction; and (iii) your contact details. We will verify your identity/relationship and promptly assess the request and take appropriate steps consistent with applicable law—such as deleting or anonymizing the information—and will not further contact the Child except as permitted by law. We may retain minimal records of the request and our response as required by law.
(d) Client deployments involving Children’s data. Where a client deployment involves the collection or processing of Children’s Personal Information, such processing will be governed by the applicable agreements and notices and by mandatory laws (including, where applicable, the U.S. Children’s Online Privacy Protection Act – COPPA and related FTC rules). In particular, the operator must provide: online notice, direct notice to parents, and obtain verifiable parental consent before collecting, using, or disclosing a Child’s Personal Information, and must honor parental rights (e.g., review, deletion, and ability to refuse further use or collection). Data must be limited to what is reasonably necessary for the activity, safeguarded appropriately, and deleted when no longer needed.
(e) Other jurisdictions. In some jurisdictions, the age defining a “child” may be higher than 13. We will comply with applicable mandatory laws in those jurisdictions.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and data portability. Where processing is based on consent, you may withdraw consent at any time. To exercise rights, email info@edutopia-studios.com. We may need to verify your identity to process requests.
Residents of certain jurisdictions (e.g., EEA/UK, certain U.S. states) may have additional rights; we will honor those rights to the extent required by applicable law.
10. Cookies & analytics
We currently use only cookies/technologies necessary to operate the Site and the contact form. We do not use third‑party advertising cookies. If we add analytics or other non‑essential cookies, we will update this Policy and, where required, request your consent via a banner or similar mechanism.
11. Third‑Party Sites, Services, and Embedded Content
The Site may contain links to or integrations with third‑party websites, services, platforms, or content (for example, embedded videos, maps, social widgets, or content delivered via third‑party CDNs) (collectively, “Third‑Party Services”). Third‑Party Services are operated by third parties, not by Edutopia. We do not control and are not responsible for their availability, accuracy, practices, or content. Your access to and use of any Third‑Party Service is subject to the third party’s own terms and privacy policies.
Data collection by third parties. Third‑Party Services may collect information about you through their own cookies, pixels, SDKs, or other technologies when you view or interact with their content—including in some cases without you clicking the link or widget. Such processing is performed by the third‑party controller and governed by that party’s notices.
No endorsement; separate roles. The inclusion of a link or integration does not imply endorsement by Edutopia. Where Third‑Party Services act as our service providers/processors, they are addressed in Section 4 (and bound by contractual safeguards). Where they act as independent controllers, their practices are outside our control; we recommend that you review their terms and privacy policies before engaging.
To the maximum extent permitted by law, Edutopia disclaims any liability arising out of or related to your use of Third‑Party Services.
12. Changes to this Policy
We may amend, update, or replace this Policy at any time in our sole discretion.
We will indicate the date of the latest revision by updating the Effective date at the top of this page and will maintain prior versions upon request where required by law.
For material changes—including changes that materially affect the purposes of processing, the categories of recipients, or your choices and rights—we will provide additional notice (e.g., by posting a banner on the Site or, where you have provided an email address, by email) in advance where feasible.
Unless a later effective date is specified in the notice, amendments take effect upon posting. Changes made to comply with law or regulation or to address security, fraud, or abuse may take effect immediately upon posting.
If you do not agree with the amended Policy, you must cease using the Site. Your continued access to or use of the Site on or after the Effective date of any amendment constitutes your acceptance of the amended Policy. No amendment will retroactively change how we previously processed Personal Information without a lawful basis; where consent is required by law (e.g., for non-essential cookies/technologies), we will obtain it before applying the change to you.
13. Contact
Primary contact: info@edutopia-studios.com
Submitting privacy requests. To exercise your rights (e.g., access, rectification, deletion, restriction, objection, portability, or withdrawal of consent), email info@edutopia-studios.com with the subject line “Privacy Request.” Please include: (i) your full name; (ii) the email address used on the Site; (iii) your country/region; and (iv) a description of your request. We will respond within a reasonable period and in accordance with applicable law.
COPPA/children’s privacy inquiries. If you are a parent or legal guardian and believe that a child under 13 has provided Personal Information on the Site without the required consents, email us at info@edutopia-studios.com with the subject line “COPPA Inquiry.” Include: (i) the child’s first name and last initial; (ii) a description and approximate date of the interaction; and (iii) your contact details. We will verify your identity/relationship and take appropriate steps consistent with applicable law (e.g., deletion or anonymization) and will not further contact the child except as permitted by law. Minimal records of the request and our response may be retained as required by law.
