Privacy Policy

1. Who this policy applies to

This policy applies to personal information handled through the public Dare To Dream website, D2D student tools, connected student accounts, and marketplace features operated by the company identified on the Business Information page.

Separate third-party websites, universities, consultants, payment providers, embassies and application portals may have their own privacy practices. Their policies apply when you leave D2D or provide information directly to them.

2. Information we may collect

• Account and contact information such as name, email address, optional phone number, authentication data and account status.
• Student profile and planning information you choose to provide, such as nationality, education, study preferences, language-test information, funding preferences, saved opportunities, application plans and tool results.
• Marketplace activity such as saved consultant profiles, enquiries, service-related communications or other actions you initiate through connected D2D services.
• Technical and usage information such as browser/device information, IP-derived security signals, timestamps, page views, referral information and diagnostic logs needed to operate, secure and improve the service.
• Cookie or similar technology data as described in the Cookie Policy, including optional analytics or advertising data only when those integrations are enabled.
• Information you submit in privacy, support or data-rights requests.

3. How we use information

• Provide and secure accounts, student tools, saved results, planning features and connected portal experiences.
• Show relevant public opportunities, universities, educational resources and consultant marketplace information.
• Maintain user-selected preferences and reduce repeated data entry across connected D2D features.
• Respond to support, privacy, legal and data-deletion requests.
• Detect abuse, fraud, security incidents and technical failures.
• Measure platform performance and improve content, usability and reliability when analytics are enabled.
• Comply with applicable legal obligations and enforce platform terms.

4. When information may be shared

D2D does not need to make private student data public in order to operate the public discovery website. Information may be shared only as needed to provide a feature you request, operate infrastructure, comply with law, protect the service, or complete a transaction or support process.

• Service providers that host, secure, monitor or support the platform, subject to appropriate contractual or technical controls.
• Consultants or other marketplace participants when you intentionally start a consultation, enquiry or connected workflow that requires sharing relevant information.
• Authorities or professional advisers where disclosure is legally required or reasonably necessary to protect rights, safety, security or the integrity of the service.
• A successor entity in a lawful merger, restructuring or sale, subject to applicable privacy requirements.

5. Data retention

Personal information is retained only for as long as reasonably needed for the purpose for which it was collected, to keep an account active, maintain required transaction or security records, resolve disputes, enforce agreements, and meet legal obligations. Different record types may therefore have different retention periods.

A deletion request does not always require immediate deletion of every record. D2D may retain the minimum information necessary where retention is required by law, needed for fraud/security prevention, or necessary to document that a privacy request was completed.

6. Security

D2D uses technical and organizational safeguards appropriate to the nature of the service. No internet service can guarantee absolute security. Users are responsible for protecting passwords and should contact D2D promptly if they believe an account has been compromised.

7. Your privacy choices and rights

• Review or update information available in your account or connected profile.
• Request access, correction or deletion where applicable.
• Object to or restrict certain processing where applicable law provides that right.
• Withdraw consent for consent-based processing without affecting processing that lawfully occurred before withdrawal.
• Use the Data Deletion Request page for a documented deletion request.
• Use browser controls or available cookie preferences for optional cookies and similar technologies.

8. Children and teenagers

D2D serves students and may be used by teenagers. The Children & Teen Privacy page explains age-specific rules. Users below the configured minimum self-service age should not create their own account or submit personal information without the involvement and verifiable permission of a parent or legal guardian.

9. International access and transfers

D2D may be accessed from multiple countries and may use service providers located in different jurisdictions. Where personal information is transferred across borders, D2D will use measures required by applicable law for the relevant transfer.

10. Changes to this policy

This policy may be updated when the platform, legal requirements or data practices change. The effective date shown on this page identifies the current published version. Material changes may also be communicated through the platform where appropriate.