Privacy Policy
Last updated:
Version 1.0.0
1. Introduction
GradeSpace ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
This policy complies with:
- GDPR (General Data Protection Regulation) - for users in the European Union and UK
- CCPA/CPRA (California Consumer Privacy Act) - for California residents
- PIPEDA (Personal Information Protection and Electronic Documents Act) - for Canadian users
- LGPD (Lei Geral de Proteção de Dados) - for Brazilian users
2. Data Controller
3. Information We Collect
3.1 Information You Provide
- Account Information: Name, email address, password, company details
- Contact Information: When you contact us or request information
- Project Information: Details about your projects, requirements, and preferences
- Payment Information: Billing address, payment method (processed securely by third-party payment processors)
- Communication Data: Messages, feedback, and correspondence
3.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on site
- Device Information: Browser type, operating system, device identifiers
- Location Data: Approximate location based on IP address
- Cookies and Tracking: See our Cookie Policy for details
4. How We Use Your Information
We use your information for the following purposes:
Service Delivery
To provide, maintain, and improve our services, process transactions, and manage your account.
Communication
To send service updates, respond to inquiries, and provide customer support.
Marketing (with consent)
To send promotional materials and newsletters (you can opt-out at any time).
Analytics
To understand usage patterns and improve our website and services.
Legal Compliance
To comply with legal obligations, enforce our terms, and protect our rights.
5. Legal Basis for Processing (GDPR)
For users in the EU/UK, we process your personal data based on:
- Contract: To fulfill our contractual obligations to you
- Consent: When you've given explicit consent (e.g., marketing emails, cookies)
- Legitimate Interests: To improve our services and protect our business
- Legal Obligation: To comply with applicable laws and regulations
6. How We Share Your Information
We do not sell your personal information. We may share your data with:
Service Providers
Third-party companies that help us operate our business (hosting, analytics, payment processing)
Business Transfers
In connection with a merger, acquisition, or sale of assets
Legal Requirements
When required by law or to protect our rights and safety
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions by relevant data protection authorities
- Privacy Shield (where applicable) or equivalent frameworks
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:
- Account Data: Until you delete your account plus 30 days
- Transaction Records: 7 years for tax and accounting purposes
- Marketing Consent: Until you withdraw consent
- Cookies: As specified in our Cookie Policy
9. Your Privacy Rights
EU/UK Users (GDPR)
- ✓ Right to Access: Request a copy of your personal data
- ✓ Right to Rectification: Correct inaccurate or incomplete data
- ✓ Right to Erasure: Request deletion of your data ("right to be forgotten")
- ✓ Right to Restriction: Limit how we use your data
- ✓ Right to Portability: Receive your data in a structured format
- ✓ Right to Object: Object to processing based on legitimate interests
- ✓ Right to Withdraw Consent: Withdraw consent at any time
- ✓ Right to Lodge a Complaint: File a complaint with your data protection authority
California Users (CCPA/CPRA)
- ✓ Right to Know: What personal information we collect and how we use it
- ✓ Right to Delete: Request deletion of your personal information
- ✓ Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
- ✓ Right to Non-Discrimination: Equal service regardless of privacy choices
- ✓ Right to Correct: Correct inaccurate personal information
Canadian Users (PIPEDA)
- ✓ Right to Access: Know what personal information we hold about you
- ✓ Right to Correction: Correct inaccurate information
- ✓ Right to Withdraw Consent: Withdraw consent for data collection
- ✓ Right to Challenge Compliance: Challenge our compliance with PIPEDA
To exercise your rights, contact us at privacy@thegradespace.com. We will respond within 30 days (or as required by applicable law).
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Encryption
SSL/TLS encryption for data in transit
Firewalls
Network security and access controls
Access Control
Limited access to authorized personnel
Monitoring
Regular security audits and monitoring
11. Children's Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
13. Do Not Track Signals
We honor Do Not Track (DNT) signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place. You can also manage your cookie preferences through our Cookie Settings.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: privacy@thegradespace.com
Data Protection Officer: dpo@thegradespace.com
Address: Gradespace LTD, 86-90 Paul Street, London EC2A 4NE, United Kingdom
16. Supervisory Authorities
If you are located in the EEA, UK, or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority:
- UK: Information Commissioner's Office (ICO) - ico.org.uk
- EU: Your national data protection authority
- California: California Attorney General
- Canada: Office of the Privacy Commissioner of Canada
Have Questions About Your Privacy?
We're here to help. Contact our privacy team for any questions or concerns.
Contact Privacy Team