Data Protection
Data Protection Principles
Cambridge Educators Hub is committed to protecting personal data in compliance with Pakistan data protection laws and international best practices. We handle your data with care, security and full transparency.
Legal Basis for Processing
- Contractual necessity: To provide our services
- Consent: For marketing and non-essential processing
- Legal obligation: Tax records, safeguarding reporting
- Legitimate interest: Service improvement, fraud prevention
You can withdraw consent anytime for non-essential processing.
01. Data We Collect
Personal Identifiable Information
- Names, email addresses, phone numbers
- Addresses (for billing/correspondence)
- Date of birth (students)
- Educational background and qualifications
Sensitive Personal Data
- Academic performance records
- Medical information (if voluntarily provided)
- Payment information (processed securely — not stored)
Technical Data
- IP addresses, browser type, device information
- Website usage data (cookies)
- Session recordings (classes, with consent)
02. How We Protect Your Data
Technical Safeguards
- Encryption (SSL/TLS for data transmission)
- Secure servers with firewall protection
- Password-protected databases
- Regular security updates and patches
- Secure backup systems
Organisational Safeguards
- Staff training on data protection
- Access controls on need-to-know basis
- Confidentiality agreements with all staff
- Regular security audits
- Incident response procedures
03. Data Retention Schedule
| Data Type | Retention Period | Reason |
|---|---|---|
| Teacher Training Records | 7 years post-graduation | Certification verification, employment references |
| Financial Records | 10 years | Legal requirement — tax compliance |
| Marketing Consent | Until withdrawn | Compliance with marketing laws |
| Website Analytics | 26 months | Standard industry practice |
After retention period: Data securely deleted.
04. Your Data Rights
Under Pakistan data protection laws, you have the right to:
1. Access
Request a copy of all personal data we hold about you. Provided within 30 days.
2. Rectification
Correct inaccurate or incomplete data. Corrected within 7 days.
3. Erasure
Request deletion of your data subject to legal retention requirements. Within 30 days.
4. Restriction
Limit how we process your data in certain circumstances.
5. Data Portability
Receive your data in a structured, machine-readable format.
6. Objection
Object to certain types of processing such as marketing.
7. Withdraw Consent
Withdraw consent for any consent-based processing at any time.
To exercise these rights, email:
privacy@cambridgeeducatorshub.com05. International Transfers
Some services (Zoom, Google) may process data outside Pakistan. We ensure adequate protections through standard contractual clauses and Privacy Shield compliance where applicable. Your data is protected regardless of location.
06. Data Breach Procedures
- 1.Immediate containment to limit impact
- 2.Assessment of affected data and individuals
- 3.Notification to affected individuals within 72 hours if high risk
- 4.Reporting to authorities if legally required
- 5.Remediation to prevent future breaches
Contact Our Data Protection Officer
Response within 5 business days. Resolution within 30 days.
If unsatisfied: Step 1 — Contact our DPO. Step 2 — File complaint with Pakistan Telecommunication Authority. Last updated: January 2026.