Account & application privacy notice

Who is responsible

Global Chinese Learning Institute, Corp. (CLCC) handles this information. For access, correction, withdrawal, deletion or a privacy complaint, email clcc@clccglobal.com with “Privacy request” in the subject. Do not email passwords or student information. We verify identity and authority before acting.

Information we collect and why

• Accounts: work email, a salted password hash, account creation and last sign-in times, and session records. Email ownership is not verified. If Google sign-in opens later, we will also store a Google account identifier and verified email; that option is currently closed.
• Organization pre-applications: organization name, type and location; the authorized contact’s name, work email and role; page language, submission time and application reference. Manual review adds a decision, internal note, reviewer and time.
• Membership and payments: account ID and email, Stripe customer, subscription, Checkout and payment references, selected categories, amount, currency, payment and refund status, renewal and cancellation status, and timestamps. Stripe collects card details on its hosted pages; CLCC does not receive full card numbers. Student names and grades are addressed in the Children's Privacy Notice.
• Operations: request time, route, status and request ID for diagnosis; short-lived network-address and email-derived rate-limit markers. Hosting providers may process connection logs. CLCC application logs do not record form contents or passwords.

We use this information to authenticate accounts, protect the service, review and follow up on applications, manage membership and payment status, provide refunds and billing support, answer privacy requests, resolve faults and meet applicable legal obligations. A pre-application does not register students, grant organization access or take payment. We do not add applicants to marketing lists because they applied or sell this information. Providing required details is voluntary, but we cannot provide the corresponding service without them.

Adult account and organization pre-application forms are for adult teachers and authorized adult representatives. Do not place student, child, health, government ID or card information in those forms or ordinary email. Student entry has a separate authorized form and Children's Privacy Notice. If unrelated information reaches us, we restrict access and remove it promptly.

Access and service providers

Only authorized CLCC personnel who need the information for these purposes may access it. Application contact details are shown to an administrator in the application detail. Hostinger hosts the public website; Cloudflare provides the Worker and D1 database; Stripe provides hosted payment and subscription services. These providers may process information in their operating regions, including outside your location. Contact us for current processing and transfer details. Other disclosure is limited to legal requirements or what is necessary to protect legitimate interests.

Retention periods

Periods use UTC. Applicable legal obligations, disputes or security incidents may require a narrow, documented hold; we restrict access and explain an extension to affected requesters. We review such holds. The primary database is checked daily for eligible deletion.

Ordinary account

While active; disable after 24 months without a sign-in (or from creation if never used), then delete within 30 days after open requests are resolved.

Administrator account

Keep while authorized; revoke access as soon as no longer needed and resolve the account and linked records within 30 days.

Session

Valid for no more than eight hours. Expired or revoked database records are removed within 30 days.

Pending organization application

Decide or delete no later than 12 months after submission.

Rejected or withdrawn application and review

Delete 12 months after the decision or withdrawal.

Approved application and review

Delete 24 months after decision; a separate ongoing relationship requires its own notice.

Membership and payment records

Keep while needed to manage the subscription, payment, refund, dispute, or applicable financial record duty. Account deletion may leave the minimum transaction record required by law; CLCC will restrict its use and explain the applicable period on request.

Application diagnostic logs

Keep for no more than 90 days, then delete or irreversibly de-identify.

Backups and provider logs

Target no more than 90 days where CLCC controls settings. Provider rotation may differ; contact us for current details. Deletions are re-applied after a backup restore.

Privacy request record

Keep only minimum handling evidence and necessary contact details for 24 months after closure, then delete or de-identify.

Review notes must not contain student names, work, payment information or unrelated sensitive information. Deleting an application also deletes its review and note. De-identified statistics may remain only where a person cannot reasonably be identified.

Requests and deletion

1. Email clcc@clccglobal.com. We collect only the minimum information needed to verify you or your authority for an organization. We aim to acknowledge within seven days and complete the main database action and reply within 30 days.
2. For account deletion, we first stop access and revoke sessions and any administrator membership, then remove linked credentials and identities. Withdrawing an application stops further review and follow-up; we delete its linked review and note.
3. We check the result in the primary database and handle provider-controlled copies according to their rotation. If a narrow hold or extra time is needed, we explain the scope, reason, expected date and complaint path within 30 days. We do not disclose another person’s information in the reply.

Security and changes

We use access controls, salted password hashes, HTTPS and short-lived sessions. No service can guarantee absolute security. We investigate complaints and explain the outcome; you may contact an applicable privacy regulator if the matter remains unresolved. Material changes to this notice will be posted here with an effective date and further notice where required.