Children's Privacy Notice

1. Operator and scope

Global Chinese Learning Institute, Corp. (CLCC) organizes the 2027 competition for students studying Chinese in the United States. When authorized student checkout is open, an adult educator from an approved organization may enter a student using the student's name, grade, and selected categories. Submission, assessment, results, and certificate lookup are separate future services and are not available yet. Adult accounts, membership, payments, and organization pre-applications are covered by the separate notice below.

For children's privacy questions and access or deletion requests, contact:

Put “Children's privacy request” in the email subject.

Do not send student work, passwords, identity documents, or full payment details by ordinary email.

2. Planned information and purposes

Authorized entry uses the registration fields below. Later competition services would handle additional information only after their notices and authorization processes are in place:

• Registration and eligibility

  Information that may be needed: Student name, grade/division, selected category, organization, entry and registering educator references, whether the student is under 13, consent notice version, and payment status. The school or organization keeps its own authorization record; this form does not collect a guardian's contact details.

  Purpose: Check eligibility, contact the authorized adult, manage the entry.

• Participation and work

  Information that may be needed: Written work and, where the category requires it, audio or video that may include a student's voice or image; submission time, file and processing status.

  Purpose: Receive work, record submission, resolve faults.

• Assessment and results

  Information that may be needed: Work assigned to assessors, scores, comments, review history, final outcome.

  Purpose: Assess, check, correct, and handle appeals.

• Certificates and verification

  Information that may be needed: Certificate ID, season, category, status, and issuance or revocation record; identifying student details only when authorized and needed.

  Purpose: Issue, correct, revoke, and verify certificates.

• Security and requests

  Information that may be needed: Sign-in/session records, necessary access and fault logs, privacy requests and handling records.

  Purpose: Limit access, diagnose problems, answer requests, meet legal duties.

Adults handle registration, payment, and authorization. Stripe hosts the adult payment page and receives CLCC order references, not the student's name or grade from CLCC. Children should not provide card details. If student-facing tools are later offered, CLCC will explain their account, response, device, or session data before enabling them. CLCC will not require more information from children than reasonably necessary for an activity.

3. School authorization and parental rights

For a student under 13, CLCC permits entry only through an approved school whose arrangement with CLCC and receipt of direct notice have been verified by CLCC before an educator is granted under-13 access. The school obtains and keeps the required parent authorization; the educator confirms the student's authorization when entering the student. This route is limited to educational use benefiting the school and students. CLCC remains responsible for COPPA compliance and provides the school and parents a way to review, stop further use of, and request deletion of student information. An education organization that is not a school cannot use this school-consent route. Students aged 13–17 also need the applicable school or guardian authorization to participate.

A parent or guardian can contact the email above to request access to, correction or deletion of their child's information, withdraw consent, or refuse further collection or use. A school can make these requests within its applicable authority. CLCC will take reasonable steps to verify the requester's identity and authority before disclosing student information. Withdrawal of necessary authorization may end the student's participation in the related activity. We will explain any narrow legal, dispute, or security reason for temporary retention. A public notice does not replace the direct notice and valid authorization required before collection.

4. Access, sharing, and public verification

Authorized educators may see only entries made through their account. CLCC personnel may access the minimum needed to operate the competition or handle a request. Hostinger hosts the public website, Cloudflare provides the Worker and D1 services, and Stripe handles adult payments using order references. Future work storage and assessment providers have not been selected. Before sending children's information to another provider, CLCC will check its purpose and security limits and update this notice and any required direct notice. Providers may process information in their operating regions, including outside the United States.

Registering does not make a child's work, score, contact details, or full record public. A future certificate lookup is intended to show only certificate ID, validity status, season, and category; the exact fields and authorization must be confirmed before launch. Even a lookup by certificate ID may relate to a student, so we will protect it as children's information. Public display of a student's name, school, work, image, or score would require separate explanation and applicable consent. CLCC does not sell children's information or use it for targeted advertising or commercial profiling unrelated to the school's educational purpose.

5. Retention and deletion

The following are approved planned periods. They require implementation before the relevant information is collected. If service design changes, CLCC will update the published notice first. Information will not be kept indefinitely.

Adult contact information used to seek authorization

If authorization is not obtained, delete within 14 days of direct notice; do not collect children's information first.

Authorized but unfinished entry draft

Delete no later than 30 days after registration closes.

Entry, work, assessment record, and result

Keep through assessment, corrections, and appeals, then delete or irreversibly de-identify 12 months after that season's result release.

Authorization evidence and minimum certificate issuance/revocation record

Keep for authorization and verification for at most five years after certificate release, then delete or irreversibly de-identify.

Access and fault logs

Keep no more than 90 days, then delete or irreversibly de-identify.

Backups and provider logs

Target no more than 90 days for copies CLCC controls; verify and disclose provider periods before launch.

Privacy request record

Keep only necessary handling evidence for at most 24 months after closure, then delete or de-identify.

A verified deletion or withdrawal request ends processing that is no longer needed earlier. The minimum information required for a legal duty, dispute, or security incident may be held for a limited time with restricted access, a recorded reason, and a review date. Applicable deletions must be reapplied after a backup restore. De-identified information is kept only when an individual cannot reasonably be identified.

6. Security, changes, and contact

Before future services open, CLCC must implement role-based access, encrypted transport, assessor access controls, provider review, deletion procedures, and incident handling. Material changes to information categories, purposes, sharing, or authorization will receive an updated direct notice and new consent where required. Contact us using the details in section 1 about this notice or a child's information.