Privacy Policy

Effective Date: January 1, 2026
Last Updated: January 1, 2026

 


 

1. Introduction

Brill Academy ("Brill Academy," "we," "us," or "our") operates the website brill.academy and provides entrepreneurship education programs for middle school students. We are committed to protecting the privacy and security of personal information collected from parents, guardians, and students.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, enroll in our programs, or interact with our services.

By using our website or services, you consent to the practices described in this Privacy Policy.

 


 

2. Information We Collect

2.1 Information from Parents and Guardians

We collect personal information directly from parents and guardians, including:

  • Contact Information: Name, email address, phone number, mailing address
  • Payment Information: Credit card details, billing address (processed securely through Stripe)
  • Enrollment Information: Student name, age, grade level, program selection, start date
  • Communication Records: Correspondence via email, contact forms, or phone calls

2.2 Information About Students

With verifiable parental consent, we collect limited information about students participating in our programs:

  • Basic Information: Student name, age, grade level
  • Program Work: Business concepts, pitch materials, portfolios created during the program
  • Participation Data: Attendance records, progress assessments, evaluations
  • Communication: Messages or questions submitted during office hours or community platform discussions

2.3 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages viewed, time spent on pages, navigation patterns
  • Cookies and Tracking: We use cookies to enhance user experience and analyze website traffic (see Section 8)

 


 

3. Children's Privacy and COPPA Compliance

Brill Academy serves students ages 12-14, which includes children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).

3.1 Parental Consent Required

We do not knowingly collect personal information from children under 13 without verifiable parental consent. Before enrolling a child under 13, we require:

  • Parent or guardian to complete enrollment forms on behalf of the student
  • Explicit consent for collection and use of student information
  • Agreement to this Privacy Policy

3.2 What We Collect from Children Under 13

We only collect information necessary to provide our educational services:

  • Student name and age
  • Work created during the program (business concepts, portfolios)
  • Participation records and evaluations

We do not collect:

  • Social Security numbers
  • Geolocation data
  • Photos or videos (unless explicitly provided by parents for showcase events with separate written consent)
  • Social media information

3.3 Parental Rights

Parents and guardians have the right to:

  • Review the personal information we have collected from their child
  • Request deletion of their child's personal information
  • Refuse further collection or use of their child's information
  • Revoke consent at any time

To exercise these rights, contact us HERE.

 


 

4. How We Use Your Information

We use collected information for the following purposes:

4.1 Program Delivery

  • Administering enrollment and program participation
  • Providing educational services, mentorship, and feedback
  • Facilitating access to learning platforms and community resources
  • Evaluating student progress and issuing completion credentials

4.2 Communication

  • Responding to inquiries and support requests
  • Sending program updates, schedules, and important notices
  • Sharing cohort announcements and showcase invitations (with consent)

4.3 Payment Processing

  • Processing tuition payments securely through Stripe
  • Maintaining financial records and receipts

4.4 Improvement and Analytics

  • Analyzing website usage to improve user experience
  • Evaluating program effectiveness and outcomes
  • Developing new programs and services

4.5 Legal Compliance

  • Complying with applicable laws and regulations
  • Protecting our rights, property, and safety
  • Responding to legal requests or preventing fraud

 


 

5. How We Share Your Information

We do not sell, rent, or trade personal information. We may share information only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist in operating our business:

  • Google Cloud: Data storage and cloud services
  • Stripe: Payment processing (Stripe maintains its own privacy policy)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to:

  • Protect the safety of students, staff, or the public
  • Enforce our Terms of Service or Enrollment Policy
  • Investigate potential violations or fraud

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity, subject to the same privacy protections.

5.4 With Consent

We may share information with your explicit consent, such as:

  • Featuring student work in alumni showcases (with separate written parental permission)
  • Sharing success stories or testimonials (with parental approval)

 


 

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures

  • Secure data storage on Google Cloud infrastructure
  • Encrypted payment processing through Stripe (PCI-DSS compliant)
  • Access controls limiting who can view student information
  • Regular security assessments and updates

6.2 Limitations

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

 


 

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

  • Student Program Data: Retained for the duration of the program plus 3 years for record-keeping and evaluation purposes
  • Payment Records: Retained for 7 years for tax and financial compliance
  • Marketing Communications: Retained until you unsubscribe or request deletion

Parents may request deletion of their child's information at any time (see Section 3.3).

 


 

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance website functionality and analyze usage.

8.1 Types of Cookies

  • Essential Cookies: Required for website operation (e.g., form submission, navigation)
  • Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)

8.2 Your Choices

You can control cookies through your browser settings. Disabling cookies may limit website functionality.

 


 

9. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us HERE.

 


 

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

 


 

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification to registered users

Continued use of our services after changes constitutes acceptance of the updated policy.

 


 

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us HERE.

For parental rights requests (review, delete, or revoke consent for children under 13):
Please contact us HERE and begin your message with "Parental Rights Request" so we can prioritize your inquiry.

 


 

13. Jurisdiction

This Privacy Policy is governed by the laws of the State of California, United States, without regard to conflict of law principles.

 


 

By using Brill Academy's website or services, you acknowledge that you have read, understood, and agree to this Privacy Policy.