Rubrics IELTS ("Rubrics", "we", "us") provides IELTS preparation courses and related teaching services. We are the controller of the personal information described in this policy.
| Legal entity | [REGISTERED COMPANY NAME] |
|---|---|
| Registered address | [REGISTERED ADDRESS] |
| Business registration no. | [REGISTRATION NUMBER] |
| Privacy contact | [PRIVACY EMAIL ADDRESS] |
| Purpose | Information used |
|---|---|
| Creating and securing your account | Email, name, password hash, verification and password-reset tokens |
| Delivering courses and lessons | Account details, bookings, schedules, learning records |
| Responding to enquiries and applications | Contact, registration and application details |
| Sending service email (verification, password reset, booking confirmations) | Email address and name |
| Publishing our own marketing content to our own social accounts | Content and media we have chosen to publish — see section 4 |
| Keeping the service reliable and secure | Technical and diagnostic data |
| Meeting legal and accounting obligations | Transaction and contact records |
We do not sell personal information, and we do not use it for automated decision-making that produces legal effects.
In short: our Facebook and TikTok integrations are used to publish our own marketing content to our own company pages and accounts. They are not used to log you in, and they do not collect information about you from Facebook or TikTok.
We use the Meta Graph API to publish posts to Facebook Pages that Rubrics IELTS owns and administers. An administrator of our own Page authorises the connection; we then store an access token that lets us post to that Page.
We use the TikTok Content Posting API to publish videos and photo posts to TikTok accounts that Rubrics IELTS owns. The account holder authorises the connection through TikTok, and we store the resulting tokens so scheduled posts can be published.
We use Google services to sign users in (Google OAuth), to send service email (Gmail API) and to schedule and host online lessons (Google Calendar and Google Meet). Where a lesson is held on Google Meet, Google processes that session under its own privacy policy.
If you comment on, message or otherwise interact with our Facebook Page or TikTok account, that interaction happens on the platform and is governed by the platform's privacy policy. We may see your public comments in the ordinary course of running those accounts.
We share personal information only with service providers that help us run Rubrics IELTS, and only as far as they need it:
| Provider | What it does for us |
|---|---|
| Sign-in, service email delivery, lesson scheduling and video lessons | |
| Meta (Facebook) | Publishing our marketing posts to our own Pages |
| TikTok | Publishing our marketing posts to our own accounts |
| Sentry | Error monitoring and diagnostics |
| [HOSTING PROVIDER] | Application hosting, database and file storage |
We may also disclose information where we are legally required to, or to establish or defend legal claims. If Rubrics IELTS is ever involved in a merger or acquisition, personal information may be transferred as part of that transaction, and we will tell you before it becomes subject to a different privacy policy.
Some of our providers process information outside Vietnam, including in the United States and the European Union. Where we transfer personal information abroad, we take steps to ensure it remains protected to the standard described in this policy and required by applicable law.
| Information | Kept for |
|---|---|
| Account and learning records | While your account is active, then [RETENTION PERIOD] after closure |
| Course registrations and enquiries | [RETENTION PERIOD] |
| Teacher and job applications | [RETENTION PERIOD] after the decision |
| Email verification and password-reset tokens | Until used or expired |
| Published post records and media | Retained while the post remains published, as the record of what we published |
| Server logs and error reports | [RETENTION PERIOD] |
Passwords are stored only as hashes. Access tokens for connected social accounts are treated as secrets, are never displayed in full and are never included in logs or exports. Access to personal information is limited to staff who need it, and administrative functions require an authenticated staff account. Traffic to our site is encrypted in transit.
No system is perfectly secure. If a breach affects your personal information and creates a risk to you, we will notify you and the relevant authority as required by law.
Depending on where you live, you may have the right to:
To exercise any of these, contact us using the details in section 14. We will respond within the period required by applicable law, and we may need to verify your identity first.
You can ask us to delete your personal information at any time.
We will confirm your request, verify who you are, and delete the information within [DELETION PERIOD] days. We may keep the minimum required to meet legal, accounting or fraud-prevention obligations, or to resolve a dispute, and we will tell you if that applies.
Deleting information we hold does not remove posts already published on Facebook or TikTok, or content held by those platforms. Those must be removed on the platform itself.
Our services are intended for learners aged [MINIMUM AGE] and over. Where a learner is under the age at which they can consent on their own behalf, we require a parent or guardian to register and provide consent. If you believe a child has given us personal information without the necessary consent, contact us and we will delete it.
We use cookies that are necessary for the site to work: keeping you signed in, maintaining your session and protecting forms against cross-site request forgery. These cannot be switched off without breaking the service.
We do not currently use advertising or third-party analytics cookies on this website. If that changes, we will update this policy and ask for your consent where the law requires it.
We may update this policy as our services change. The date at the top shows when it was last revised. If a change materially affects how we use your personal information, we will give you notice — by email or a prominent notice on the site — before it takes effect.
For any privacy question, or to exercise the rights in section 9: