Privacy Policy

HBR Global is an international student enrollment platform that connects education agents with universities, colleges, and institutions worldwide. Our App is intended for use by registered agents and authorized personnel only.

We collect different types of information depending on your role (agent or administrator) and your use of the App.

2.1 Agent Account Information

• Full name, email address, and phone number
• Agency name, business address, and registration details
• Profile photo (optional)
• Login credentials (encrypted)
• Country and region of operation

2.2 Student Information (Entered by Agents)

As part of the enrollment process, agents may enter the following student data into the App on behalf of students:

• Full name, date of birth, gender,
• Passport number
• Contact information (email, phone, residential address)
• Academic records, transcripts, and qualifications
• English language test scores (IELTS, TOEFL, PTE, etc.)
• Emergency contact details

Agents are responsible for obtaining appropriate consent from students before entering their personal data into the App.

2.3 Documents and Files

• Uploaded supporting documents (academic certificates, ID copies, etc.)
• Application forms and correspondence with institutions

2.4 Usage and Device Information

• Push notification tokens

2.5 Communications

• In-app messages, notes, and comments related to student applications

3.1 Core App Functions

• Creating and managing agent accounts
• Processing and tracking student enrollment applications
• Communicating application status updates to agents
• Generating enrollment and application reports

3.2 Communication

• Sending transactional notifications (application updates, deadlines, approvals)
• Responding to support inquiries
• Sending important policy updates or changes to the App

3.3 Security and Compliance

• Verifying agent identity and preventing unauthorized access
• Detecting and preventing fraudulent activity
• Maintaining audit logs for compliance purposes
• Complying with applicable laws and regulatory requirements

3.4 App Improvement

• Analyzing usage patterns to improve features and performance

We do not use student personal information for marketing or advertising purposes.

For users and students located in regions governed by data protection laws (including GDPR in the EU, PDPA in India, PIPEDA in Canada, and equivalent legislation), we process personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our services under agent agreements.
• Legitimate Interests: Operating, securing, and improving our platform.
• Legal Obligation: Complying with applicable legal and regulatory requirements.
• Consent: Where specifically required by law — for example, processing sensitive personal data of students.

We do not sell, rent, or trade your personal information or student data. We may share information in the following limited circumstances:

5.1 Partner Educational Institutions

Student application data is shared with universities, colleges, and educational institutions as part of the enrollment process. This is the core function of the App and is done at the agent's instruction.

5.2 Service Providers

We engage trusted third-party service providers to support our operations, including:

• Cloud hosting and data storage providers
• Email and push notification delivery services
• Analytics platforms (with anonymized data only)
• Customer support software

All service providers are bound by data processing agreements and are prohibited from using data for any purpose other than providing services to us.

5.3 Legal Requirements

We may disclose information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of HBR Global, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Your data is stored on secure cloud servers. If you are located outside the country where our servers are hosted, your information may be transferred internationally. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.

We currently use infrastructure located in [Specify Region — e.g., India / Singapore / United States]. All data transfers comply with applicable data protection regulations.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Agent account data: Retained for the duration of the agency agreement plus 5 years.
• Student application data: Retained for 7 years for compliance and audit, or as required by partner institutions.
• Uploaded documents: Retained for the duration of the application process and thereafter as per applicable laws.
• Usage logs: Retained for up to 12 months.

You may request deletion of your data subject to legal and contractual obligations (see Section 9).

We implement appropriate technical and organizational measures, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest using AES-256 or equivalent standards
• Role-based access controls limiting data access to authorized personnel only
• Multi-factor authentication for agent accounts
• Regular security audits and vulnerability assessments
• Secure document upload and storage protocols

Despite these measures, no system is 100% secure. In the event of a data breach, we will notify affected users in accordance with applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Restriction: Request restriction of processing in certain circumstances.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, including direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at the details in Section 14 or you can delete your data by login your account in app and visiting menu section to delete account. We will respond to all verified requests within 30 days.

Agents are responsible for facilitating the exercise of students' data rights and should contact us on behalf of students when required.

The HBR Global App is intended for use by adult agents and authorized business users only. We do not knowingly collect personal information directly from children under the age of 13.

If a student applicant is a minor, the agent must ensure that parental or guardian consent has been obtained before submitting their personal information through the App.

If you believe we have inadvertently collected data from a minor without proper consent, please contact us immediately at privacy@hbrglobal.com and we will take steps to delete such information.

The App may use local storage, device identifiers, and analytics SDKs to:

• Maintain session state and authentication
• Analyze feature usage and performance
• Deliver relevant in-app notifications

You can manage app permissions (such as notifications and location) through your device settings. Disabling certain permissions may limit App functionality.

The App may contain links to third-party websites or integrate with external platforms (such as university portals or payment gateways). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the App.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Send an in-app notification to all registered users
• Where required by law, obtain your consent before changes take effect

Your continued use of the App after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

For students who wish to exercise their data rights, please contact your education agent in the first instance, or reach out to us directly at privacy@hbrglobal.com.