1. Who this policy applies to
BOUNDLEARN, LLC (“Boundlearn”, “we”, “us” or “our”) is a limited liability company established in Delaware, United States. We operate boundlearn.com and the websites, enquiry forms, applications and learning experiences associated with our programs. This policy applies when a student, parent, guardian, school representative, educator, mentor, partner or website visitor interacts with those services.
A specific program, partner or service may provide an additional privacy notice when it needs to explain a particular use of personal information in more detail.
2. Information we collect
The information we collect depends on how you interact with us. It may include:
- Enquiry and contact details: name, email address, telephone number, city, country, school, age or grade, whether you are a student or parent or guardian, program interests and the information you include in a message.
- Application and participation information: application answers, goals and interests, supporting documents, communications, attendance, assignments or project submissions, mentor feedback and program surveys.
- Administrative information: enrolment status, consent records, payment or transaction references and information needed to manage a program.
- Technical information: internet protocol address, browser and device type, pages visited, approximate location derived from an IP address, cookie or analytics identifiers and website security logs.
Please do not send sensitive information that we have not asked for.
3. How we collect information
We collect information directly when you complete a form, request a prospectus, apply, enrol, participate in a program, attend an event or contact us. We may also receive information from a parent or guardian, a school, a program partner, a mentor or a provider that supports our website and program operations. Our website may collect limited technical information automatically.
4. How and why we use information
We use personal information to respond to enquiries, provide prospectuses and requested information, assess applications, manage enrolment, deliver and support programs, communicate with students and families, administer payments, maintain safety and safeguarding, improve our services, protect our systems and comply with legal obligations.
Depending on the circumstances and the law that applies, we rely on steps needed before entering into or performing a contract, our legitimate interests in operating and improving educational services, consent, or compliance with a legal obligation. Where we rely on consent, it may be withdrawn at any time without affecting earlier lawful use.
We may send program news or marketing where you have asked to receive it or where the law otherwise permits. Every marketing email will include a way to opt out.
5. Children and young people
Many Boundlearn programs are designed for young people. We aim to explain our use of personal information in clear, age-appropriate language and to collect only what is reasonably needed.
A parent or guardian should complete online forms for a child under 13. For other minors, we may involve or seek consent from a parent or guardian where required by the participant’s age, location, program or applicable law. Children have privacy rights of their own, although a parent or guardian may exercise those rights on their behalf where the law permits.
We do not sell the personal information of students or children.
6. How we share information
We share personal information only when reasonably necessary, including with the relevant Boundlearn program team, mentors or program partners; providers that support hosting, forms, email, scheduling, analytics, payments or program delivery; professional advisers; and public authorities where disclosure is required by law or necessary to protect rights, safety or security.
Providers are expected to use information only for the services they perform for us and to protect it appropriately. Our current website providers include Cloudflare for network delivery, hosting, security, serverless processing, operational logs and Web Analytics, and Google for optional Google Analytics 4 measurement. We may also transfer information as part of a merger, reorganisation, financing or sale of all or part of the business, subject to appropriate protections.
7. International transfers
Boundlearn works with students, partners and providers in more than one country. Personal information may therefore be processed outside the country where it was collected. Cloudflare and Google operate internationally and may process information in the United States and other countries. Where applicable law requires it, we use recognised safeguards or another lawful transfer mechanism and consider the protections available in the destination country.
8. How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, including program delivery, safeguarding, record-keeping, accounting, dispute handling and legal requirements. Retention periods vary according to the type of record, the student’s age, the program and the law that applies. When information is no longer needed, we delete it securely or anonymise it.
Cloudflare security and Workers Logs retention is controlled through our Cloudflare account and is reviewed against operational and security needs. Google Analytics 4 provides a data-retention setting for eligible user-level and event-level data, including standard choices of 2 or 14 months; the selected setting is controlled in our Analytics property and reviewed for data minimisation. Google notes that standard aggregated reports may be retained separately from that user and event data control. We can also use provider deletion controls when an appropriate verified request requires it.
9. Cookies and analytics
Essential preference. We use essential storage in your browser to remember whether you accepted or declined optional analytics. This preference is not used for advertising and remains until you change it or clear your browser storage.
Cloudflare. Cloudflare provides our network, Cloudflare Pages and Workers hosting, security and operational logging. Cloudflare Web Analytics supplies cookie-free page-view and performance measurement. Cloudflare states that Web Analytics collects a minimum amount of timing information and does not collect or use visitors’ personal data or track individual users across customer websites. Cloudflare security systems and request logs may process technical request information such as IP address, route, status and timing to deliver and protect the service.
Google Analytics 4 (GA4). If GA4 is configured, it loads only after you select “Accept cookies”. It may measure page paths and page views, referral source, session statistics, privacy-safe site performance metrics such as loading, layout stability, and interaction responsiveness, approximate geography, browser and device information, and use first-party cookies named _ga and _ga_<container-id> to distinguish users and sessions. We do not send names, email addresses, application answers, disability information, uploaded documents, form field values, page query strings, or element text and selectors to Google Analytics. Advertising features and advertising signals are disabled or denied.
Privacy-safe error monitoring. Our own browser-error boundary may send a one-way technical fingerprint, page path, script path, line and column numbers and a release token to Cloudflare Workers Logs. It does not send raw error messages, stack traces, IP addresses from the browser, user-agent strings, query strings, or form field values. The server may process an IP address only to create a non-reversible rate-limit key and does not log that address.
Optional GA4 measurement relies on your consent. You can withdraw consent at any time through . Changing your choice to essential only stops future GA4 loading and clears accessible _ga cookies from this site. It does not erase information previously collected while consent was active; you may contact us about applicable deletion rights. Declining optional analytics does not prevent you from using the website.
10. Security
We use reasonable organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration and disclosure. No online service can guarantee absolute security, so please take care when sending information online and contact us if you believe an account or communication has been compromised.
11. Your rights and choices
Depending on where you live, you may have the right to ask for access to or a copy of your personal information; correct inaccurate information; request deletion; restrict or object to certain uses; receive information in a portable format; withdraw consent; or complain to a data protection regulator.
You can opt out of marketing at any time using the link in an email or by contacting us. Some rights are subject to legal conditions and exceptions, and we may need to verify identity before acting on a request.
12. Third-party links
Our websites may link to partner, school, university, social-media or other third-party services. Their privacy practices are governed by their own notices, and we encourage you to read them before providing personal information.
13. Changes to this policy
We may update this policy as our services or legal obligations change. We will post the revised version here, update the date above and provide additional notice where a significant change requires it.
14. Contact us
Questions, requests or concerns about this policy or personal information can be sent to info@boundlearn.com or posted to BOUNDLEARN, LLC, 2810 N Church St STE 89276, Wilmington, DE 19802, United States.