Privacy notice for reviewers
Last updated
Your right to object. Where we rely on our legitimate interests (section 3), you can object at any time on grounds relating to your situation. If you don't want us to send you a review link, tell us and we won't.
1. Who we are
Okiro Education, Inc., a Delaware corporation, operates College Council and this review site and is responsible for your personal data (“we”, “us”). When you send the review form, your data goes directly to us in the United States. To contact us about any privacy matter, from any country, use our contact form (choose “Personal data request”).
2. What data we use
- From you: your review (text and ratings), the service you review, your name and how you want it shown, your photo if you add one, your country and role (student or parent), how long you worked with us (month and year), the countries you applied to, your results (the universities that admitted you and your offer letter) if you add them, your LinkedIn profile if you give it, and your email address. If you are under 18, also your parent's or guardian's email address.
- From our records: that you are a client and which service you used.
- When you send the form: the country your connection comes from, as reported by our hosting provider, so that your review can show “Location checked”. We don't store your IP address with your submission; our hosting provider keeps short technical logs, which include IP addresses, for security.
- If you use our contact form (to report a review, make a personal data request or ask something else): your name, email address, the type of request and your message, and for a report the review it concerns.
3. Why we use it and our legal bases
- To publish your review with your display name on this site, and to quote it with a link on our other websites, apps and social media: your consent. If you are under 18, your parent's or guardian's confirmation is also needed. You can withdraw your consent at any time by deleting your review.
- To check that you used College Council, to moderate reviews and reply to them, and to prevent fake reviews: our legitimate interest in publishing only genuine reviews and running this site. Readers share this interest.
- To handle reports, explain our moderation decisions and keep a record of a parent's or guardian's confirmation: our legal obligations under EU law.
- To answer messages sent through our contact form: our legitimate interest in answering you; for personal data requests, our legal obligations under data protection law.
- To establish or defend legal claims: our legitimate interest.
No decision about you is made solely by automated means: a person checks every review.
4. What is public
Your display name, country, role (student or parent), the service, the date, your ratings, your review and our reply; how long you worked with us (for example “Client for 1 year 3 months · Mar 2025 – Jun 2026”), the countries you applied to and the universities that admitted you, if you list them; and “Verified via LinkedIn” if we confirmed your profile (the link itself is not published). Your photo is public if you add one; reviewers under 18 are shown with first name and initial only and no photo. Anyone can read all of this, including search engines and AI tools that read websites. Your email address, your parent's email address and your offer letter are never published. After you delete your review, copies kept by others may take some time to disappear, and we don't control them.
5. Who receives the data
We don't sell your data or give it to others for their marketing. These providers host or carry it for us: Vercel (hosting this site and receiving the form), Resend (emailing your review to our team) and Google (Google Workspace, our email). We may also disclose data where the law requires it.
6. Processing in the United States
We are based in the United States and most of our providers are US companies. Your data is therefore processed in the United States and in other countries where our providers operate. Data protection law in those countries may differ from the law where you live.
7. How long we keep data
- Published review: until you delete it, or until we remove it under the review guidelines.
- A review we don't publish, with its verification data: 90 days after our decision.
- Your email address, your offer letter and a parent's or guardian's confirmation for a published review: while the review is published.
- Messages from the contact form, including reports and data requests: 90 days after we close the matter.
8. Your rights
Depending on where you live, you can ask us to give you access to your data and a copy of it, correct it, delete it, restrict its use, give it to you in a portable format, or stop using it if you object (see the top of this notice).
To use any of these rights, use our contact form and choose “Personal data request”. We answer within one month and may ask you to confirm your identity.
You can also complain to a data protection authority. In the EU, that is the authority in the country where you live or work or where you think the breach happened. In the UK, it is the Information Commissioner's Office (ico.org.uk).
9. Young people
We don't accept reviews from children under 13. From 13 to 17, a parent or guardian confirms by email before we publish, and we show first name and initial only, with no photo. See the review guidelines.
10. Changes
If we make a significant change to this notice, we post it here and email everyone with a published review.