Privacy Policy

Updated on December 8^th, 2020

Studybay (hereinafter referred to as “Platform”, “we”, “our” and “us”) is always committed to maintaining the accuracy, confidentiality, and security of the Personal Data of each user and is a privacy-conscious organization.

The term “Website” used in the present provisions is a reference to studybay.com.

The term “Services” means the technical and marketing services are being provided by Edutec Limited to enable and facilitate the Platform for Users of the Platform.

1. What information may we collect from you?

Once you interact with the website, such as register your personal account on the Platform and use our Services via a browser on any electronic device, the Personal Data begins to be automatically obtained:

a.1) obligatory regarding a Client:

The email address;
The date and time of registration, the date and time of authorization on the Platform, and the details of visits to our site, including access time;
The source of arrival to the Platform;
The country, region, and city of location;
The password and the Username;
The IP address;
The financial information* you provide while dealing with a Project, or other transaction and Project-based content that you generate or that is connected to your account as a result of a transaction and the appropriate Project you are involved in (credit and debit card partial number, cardholder, the number of e-Wallet (if applicable) and associated email for e-Wallet (if applicable).

*Please pay your attention to the following: we DO NOT STORE AND DO NOT HAVE AN ACCESS to your card expiry date, billing address, and CV code. For Visa cards, we DO NOT HAVE A FULL ACCESS to the card number (e.g. 1234 5678 **** **00).
The accounts in a financial institution;
The records of correspondence (including any further information we may request from you) that is taking place when you contact us to request information, report a problem or provide feedback on our Services.

a.2) optionally regarding a Client:

The phone number;
The Name and the Surname;
The information about the time zone;
The scientific degree/specialty/name of an educational institution and other information related to an educational level;
The Userpic.

b.1) obligatory regarding an Expert:

The email address;
The phone number;
Identifying information, such as the real Name and the real Surname;
The date and time of registration, the date and time of authorization on the Platform, and the details of visits to our site, including access time;
The source of arrival to the Platform;
The country, region, and city of location,
The password and the Username;
The IP address;
The financial information* you provide while dealing with a Project, or other transaction and Project-based content that you generate or that is connected to your account as a result of a transaction and the appropriate Project you are involved in (credit and debit card partial number, cardholder, the number of e-Wallet (if applicable) and associated email for e-Wallet (if applicable).

*Please pay your attention to the following: we DO NOT STORE AND DO NOT HAVE AN ACCESS to your card expiry date, billing address, and CV code. For Visa cards, we DO NOT HAVE A FULL ACCESS to the card number (e.g. 1234 5678 **** **00).
The accounts in a financial institution;
The records of correspondence (including any further information we may request from you) that is taking place when you contact us to request information, report a problem, or provide feedback on our Services;
The scientific degree/specialty/name of an educational institution and other information related to an educational level if the Expert requests verification of their account;
The social networks binding if the Expert requests verification of their account;
Information about languages spoken by the Expert;
The list of topics and academic subjects the Expert is proficient at;
The proof of identity, such as a scanned copy of a passport or an ID.

b.2) optionally:

The information about the time zone;
The Userpic;
The Date of birth.

You may also provide us with other information through your personal account on the Platform by updating or adding information, participating in community discussions on the Platform, having online chats and dispute resolution, or communicating with us regarding our Services.

We also gather certain information in connection to your interaction with our Services automatically and store it in log files. This information may include:

Internet protocol (IP) addresses, cookies, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, device ID or unique identifier, device type, ID for advertising, and unique device token.
Location information.
Computer and connection information, such as statistics on your page views, traffic to and from the sites, referral URL, ad data, your IP address, your browsing history, and your web log information.

2. How do we use Cookies and Web beacons?

We use Cookies, Web beacons, and other similar technologies to gather information about the webpages you view, the links you click on, and other actions you may take when using our Platform.

“Cookies” are small text files stored by your web browser when you visit websites.

For more information about using Cookies and how you can control Cookies please review our Cookie Policy.

3. How do we use your Personal Data?

We collect and use your Personal Data with your consent to provide you with access to the Platform and our Services, notify you about any updates related to your account and our Services, and to detect, prevent, mitigate and investigate fraudulent or illegal activities. The personal information you submit to us may be used to manage our relationship with you, including any of your requests, or to customize or improve the Platform and related Services offered to you. In particular, but not limited to, we may gather your Personal Data for:

verifying your identity;
verifying your eligibility to become an Expert or a Client;
processing your registration as a User, maintaining and managing your registration;
providing you with customer service and responding to your requests, claims, or disputes;
facilitating communication between Users of the Platform, assessing compliance of withdrawal requests from Experts;
assessing account security and transaction risks of Users, detecting and preventing fraud and other security incidents;
personalizing our communication with Users based on the Project history and browser records, and performing research or statistical analysis in the Project to customize and improve the content and layout of the Platform;
internal record keeping, billing, accounting and market research purposes;
developing and marketing our Services in accordance with applicable laws;
providing you location-based services (such as advertising, search results, and other personalized content based on your general location information);
notifying you about important functionality changes and alterations to the Platform (including changes to this Privacy Policy, Cookie Policy, and/or the User Agreement).

Subject to the User’s prior consent, Cookies or other similar technologies may be used to provide you with electronic means with advertising and promotion materials based upon your browsing activities and interests (for more information see Cookie Policy). You may request that we discontinue sending you advertising and promotion materials, emails, or other correspondence at any time.

When we believe it is necessary to comply with applicable laws or to exercise or defend our legal rights or protect your legal interests or those of any third party, we may also disclose and transfer your Personal Data to our professional advisers, law enforcement agencies, insurers, government, regulatory authorities, and other organizations, courts, pre-trial investigation institutions, or as otherwise required or permitted by applicable laws.

Personal Data collected for the purposes specified in this Privacy Policy shall not be processed in any way incompatible with these legitimate purposes or legal requirements: your Personal Data is used only for the above-mentioned purposes unless it is required or permitted by law.

We may use technologies considered automated decision-making or profiling and at the same time, we implement and apply suitable measures to safeguard each User’s rights and freedoms and legitimate interests. For more information please review the User Agreement. We will not make automated decisions about you that would legally or significantly affect you unless we have your consent, or we are required by law to use such technology. Please take into account that we consider your consent to be explicitly given when you accept the Studybay User Agreement.

4. How can you control processing and profiling of your Personal Data?

For the purposes of this Provision the following definitions will be used:

“Controller“ means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.

Your Personal Data Controller is Edutec Limited, a company incorporated under the laws of the Republic of Malta, with its registered address at Angelica Court No 4, Giuseppe Cali Street, Ta Xbiex, XBX 1425, Malta. If you have any requests, questions, or concerns about our use of your Personal Data and this Privacy Policy, please contact us at [email protected] The person submitting the request must clearly indicate his/her/their full name and add a copy of his/her/their personal identification document or sign the request electronically.

The Controller is responsible for the collection, use, disclosure, retention, and protection of your personal information.

“Processor“ means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the controller.

Being a Data Subject, each user has the following rights:

4.1. THE RIGHT OF ACCESS TO DATA: the right to obtain from the controller confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, access to the Personal Data and the information about the purposes of the processing; the categories of Personal Data concerned; the recipients or categories of recipient to whom the Personal Data have been or will be disclosed; to obtain from Edutec Limited a copy of the Personal Data undergoing processing in accordance with the applicable law; the existence of automated decision-making, including profiling.

If any further copies of the Personal Data undergoing processing were requested, the Controller may charge a reasonable fee based on administrative costs.

4.2. THE RIGHT OF RECTIFICATION: the right to obtain from the Controller the rectification of inaccurate Personal Data concerning the User or to have the incomplete Personal Data completed by providing a relevant request.

4.3. THE RIGHT TO BE FORGOTTEN / TO ERASURE: the right to obtain from the Controller the erasure of Personal Data concerning the User. Please note that the Controller shall have the obligation to erase Personal Data in the case of one of the following grounds applies:

the Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
the User withdraws consent on which the processing is based and where there is no other legal ground for the processing;
the User objects to the processing and there are no overriding legitimate grounds for the processing;
the Personal Data has been unlawfully processed;
the Personal Data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

4.4. THE RIGHT TO RESTRICTION OF PROCESSING: the right to obtain from the Controller restriction of processing where one of the following applies:

the accuracy of the Personal Data is contested by the User;
the processing is unlawful and the User opposes the erasure of the Personal Data and requests the restriction of their use instead;
the Controller no longer needs the Personal Data for the purposes of the processing, but they are required by the User for the establishment, exercise, or defense of legal claims;
the User has objected to the processing (including profiling)* pending the verification whether the legitimate grounds of the Controller override those of the data subject.

*if the processing is necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by the Controller or by a third party.

4.5. THE RIGHT TO OBJECT: the right to object to the processing of the Personal Data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. The Controller shall no longer process the Personal Data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the User or for the establishment, exercise, or defense of legal claims.

4.6. THE RIGHT TO LODGE A COMPLAINT: the right to lodge a complaint with a supervisory authority in Malta – IDPC – Office of the Information and Data Protection Commissioner.

4.7. THE RIGHT TO DATA PORTABILITY: the right to receive the Personal Data concerning the User, which was provided by the User for the Controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the Controller to which the Personal Data has been provided.

4.8. The Controller shall provide information on action taken on a request to the User within one (1) month of receipt of the request. That period may be extended by two (2) further months where necessary, taking into account the complexity and number of the requests. The Controller shall inform the User of any such extension within one (1) month of receipt of the request, together with the reasons for the delay.

4.9. The consent the User gives us to the processing of the Personal Data is to be freely given. So each User has the right to withdraw his or her consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. We kindly ask you to note that after you withdraw your consent, you will not be able to use our Services and the Platform no more: it only happens because we need to collect your Personal Data to provide you with safe, quality, and legally compliant services. If you do decide to withdraw your consent, please contact us at [email protected]

4.10. Each User can contact [email protected] regarding the described rights or by Customer Support phone 1-855-407-7728. In accordance with the obligation of the Controller to use all reasonable measures to verify the identity of an individual who sends the request, Edutec Limited as the Controller will inquire the additional personal identifying information of you including, but not limited to, the number of your passport or ID card, the expiry date, the full name and surname, and the country and the date of issue.

5. What is the Personal Data retention period?

We retain personal information for as long as your account is active or as necessary for the duration of the purposes outlined in this Privacy Policy. Notwithstanding the duration of the purposes or the status of your account, we may retain your information if necessary to comply with our legal or professional obligations, enforce our agreements, or resolve disputes.

6. How do we protect children's privacy?

We understand the importance of protecting children's online privacy. Our Platform is considered to be used by a general audience and is not designed for or intentionally targeted at children under the age of 16. If a child has provided us with Personal Data without parental or guardian consent, the parent or guardian should contact [email protected] to remove the information.

7. Do we protect your privacy on third-party websites?

We are not responsible for the protection of the User's privacy on websites of third parties, even if such websites are accessed by the User through links provided on this website. We recommend carefully reviewing the privacy policies of each website different from https://studybay.com/.

8. Legal basis

We collect and process Personal Data in accordance with the Malta Data Protection Act, Chapter 440 of the Laws of Malta, the General Data Protection Regulation, and other legal acts. All employees, agents, and employees of the agents of Edutec Limited who know the secret of the Personal Data must keep it safe even after termination of the employment or contractual relationship.

For the purpose of the processing of the Personal Data, Edutec Limited may engage data processors and/or, at its sole discretion, hire other individuals to perform certain functions on behalf of Edutec Limited. In such cases, Edutec Limited shall take necessary measures to ensure that such Personal Data is processed by the Personal Data processors in accordance with instructions of Edutec Limited and applicable legislation. Edutec Limited shall also require the Personal Data processors to implement appropriate measures for the security of Personal Data. In such cases, Edutec Limited shall ensure that such engaged individuals will be subject to the non-disclosure obligation and will not be able to use this information for any other purpose, except to the extent necessary to perform the functions assigned to them.

Our legal basis to process your Personal Data depends on the Personal Data concerned and the specific context in which we collect it. We process your Personal Data only when the following applies:

the User has given consent to the processing of his/her/their Personal Data for the purposes set forth herein and one or more specific purposes;
processing is necessary for the performance of a contract to which the User is a party or in a project to take steps at the request of the User prior to entering into a contract;
processing is necessary for compliance with a legal obligation to which the Controller is subject;
processing is necessary for the project to protect the vital interests of the User or of another natural person;
processing is necessary for the performance of a task carried out in the public interest;
processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the User which require protection of Personal Data, in particular where the User is a child.

9. What do we do to keep information secure?

We have in place reasonable commercial standards of technology and operational security and appropriate legal measures to protect all personal information provided by Users from unauthorized access, disclosure, alteration, risks of loss, misuse, or unlawful erasure, as well as from any other unauthorized form of processing.

For registered Users of the Platform, the Personal Data provided is protected by a password. We recommend that you do not disclose your password to anyone. If you share a computer with others, you should not choose to save your log-in information (e.g., user ID and password) on that shared computer. Remember to sign out of your account and close your browser window when you have finished your session.

We kindly ask you to note that we cannot guarantee the privacy or security of your Personal Data once you provide it for any third party and we encourage you to evaluate the privacy policy before deciding to share your Personal Data.

10. Do we disclose any information to third parties?

We may disclose and transmit (whether within or outside the jurisdiction of the Edutec Limited that is the Controller) your Personal Data to our business partners, to hosting providers and SMS-providers engaged by us to assist us to provide Services for you or who otherwise process Personal Data for the purposes described in this Privacy Policy or notified to you when we collect your Personal Data. Your personal information may also be disclosed to employers of the Edutec Limited and legal consultants in the project to respond to your requests or inquiries.

We do not have an access to the full financial information provided by you entering in a transaction (please see provisions 1.a.1 and 1.b.1 of this Privacy Policy). The financial institutions you have chosen process and have an access to the full pack of the financial data you've provided during the transaction.

Personal information may also be disclosed to law enforcement, regulatory, or other government agencies, or to other third parties, in each case to comply with legal, regulatory, or national security obligations or requests.

All of these disclosures may involve the transfer of personal information to countries or regions without data protection rules similar to those in effect in your area of residence.

By providing information, you are consenting to the disclosures described above.

11. Changes to this Privacy Policy and future developments

We continually improve and update our Platform to enhance your experience and the Services we provide for you. As a result, our Privacy Policy continues to evolve. As soon as we implement new technology or provide new services, we will update our Privacy Policy accordingly. We encourage you to refer to this page on an ongoing basis for our most current Privacy Policy and practices.

If our information practices change at any time in the future, we will post the policy changes on this page including the effective date of the amended version of the Privacy Policy, and such modified or amended Privacy Policy shall be effective as to you and your information as of that effective date. If we make any material changes we will announce it and notify you by means of a notice on this Platfrom’s website.

12. Final provisions

12.1. We may scan messages automatically and check for spam, scam, viruses, phishing, and other malicious activity, illegal or prohibited content, or violations of our User Agreement, this Privacy Policy, and the Cookie Policy.

12.2. We may process and retain your Personal Data on our servers and elsewhere in the world where our data centers are located.

12.3. These Privacy Policy provisions are subject to the law of the Republic of Malta. All the disputes regarding the provisions of this Privacy Policy shall be settled by negotiation and, in case of failure to resolve an issue by negotiation, the dispute shall be taken to courts of the Republic of Malta.

12.4. You can visit this website not providing any information about yourself, however, if you want to use the Services of the Platform, we will ask you to provide your Personal Data and to carry out established identification procedures. If you not register on the Platform, we do not collect your Personal Data, however, your Personal Data may be gathered by Google Analytics and Yandex Metrica.

12.5. By visiting our Platform and/or using the Services of the Platform, you acknowledge and confirm that you have read the Privacy Policy, understand it, and agree with it. We kindly ask you to note that when visiting this website, you have a responsibility to make sure that you are familiar with the latest version of the Privacy Policy that applies to you at the time you are visiting the website.