Privacy Policy

1. Data controller

The controller responsible for processing your personal data is Bright Minds International, an educational institution located in Tarapoto, San Martín region, Peru.

For any questions about your personal data or to exercise your rights, you can write to privacidad@brightminds.institute or contact us on WhatsApp at +51 961 969 553.

2. Personal data we collect

We only collect the data necessary to respond to your requests and improve your experience:

• Data you voluntarily provide through our contact form: the name of the parent or guardian, phone or WhatsApp number, the student's age or grade of interest, and any message you choose to send us.
• Browsing data collected automatically through analytics tools (Google Analytics 4): IP address, device type and model, operating system, browser, language, pages visited, time on site and approximate location derived from the IP address.
• Identifiers stored in cookies and similar technologies that allow us to recognize your device on subsequent visits.

3. Purposes and legal basis for processing

We process your personal data for the following purposes:

• Respond to your inquiries and requests for information about admissions and educational programs.
• Contact you by phone, WhatsApp or email to provide guidance about our services.
• Statistically analyze the use of the website to improve its content, performance and usability.
• Comply with any applicable legal obligations.

4. Consent

The processing of your data is based on the free, prior, express, informed, unambiguous and demonstrable consent you give when you submit the form or accept the use of analytics cookies.

Analytics cookies (Google Analytics 4) are only activated once you have given your consent. You may withdraw your consent at any time, without retroactive effect, by writing to privacidad@brightminds.institute or by adjusting your browser's cookie settings.

5. Cookies and Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google LLC, which uses cookies and identifiers to help us understand how visitors use our site.

Under the new Regulation, online identifiers such as cookies, the IP address and device data are considered personal data. For this reason, these data are only collected with your consent.

You can manage or disable cookies through your browser settings, or install the Google Analytics opt-out add-on available at tools.google.com/dlpage/gaoptout.

6. Personal data bank

The data we collect is stored in a personal data bank owned by Bright Minds International, managed with the security measures required by Peruvian regulations and, where applicable, registered with the National Authority for Personal Data Protection.

7. International data transfers

Some of our providers, such as Google (Google Analytics 4), may store and process data on servers located outside Peru. In these cases, we adopt the necessary safeguards to ensure your data receives an adequate level of protection, in accordance with Law No. 29733 and its Regulation.

8. Data retention

We keep your personal data only for as long as necessary to fulfill the purposes described or while a relationship of interest with our institution exists. After that period, the data is securely deleted or anonymized.

9. Information security

We apply reasonable technical, organizational and legal measures to protect your personal data against unauthorized access, loss, alteration or improper disclosure. If we detect a security incident affecting your data, we will act in accordance with the timeframes and obligations set out in current regulations.

10. Protection of minors' data

Our site is intended for parents and guardians. The data of underage students is only processed with the consent of the person holding parental authority or guardianship, and always in the best interest of the child or adolescent.

11. Your rights as a data subject

As the owner of the data, you have the right to:

• Access: know what data of yours we process and for what purpose.
• Rectification: correct inaccurate or incomplete data.
• Cancellation: request the deletion of your data when it is no longer needed.
• Objection: object to the processing of your data on legitimate grounds.
• Portability: receive your data in a structured, commonly used format.
• Information: be informed about the conditions of processing.

12. How to exercise your rights and file complaints

To exercise any of these rights, write to us at privacidad@brightminds.institute stating your request. We will respond within the legal timeframes.

If you believe your rights have not been properly addressed, you may file a complaint with the National Authority for Personal Data Protection of Peru's Ministry of Justice and Human Rights (MINJUSDH).

13. Changes to this policy

We may update this Privacy Policy to reflect regulatory changes or changes in our processes. Any modifications will be published on this page, indicating the date of the last update.