Privacy Policy

1. Who We Are

BIBO Education is an educational programme created by Jesús Duera, a qualified educator and emotional education specialist. Our platform, Journey Within, is accessible at biboeducation.com. For all data-related enquiries, contact us at director@biboeducation.com.

2. What Data We Collect

We collect the following information when a family registers:

• Parent or guardian name and email address
• Child's first name, age and year group
• Family home address (for identity verification purposes)
• School name (to verify partner school eligibility)
• Password (stored in encrypted form — we never see it in plain text)
• Programme progress data — completed weeks, stars earned, avatar customisations
• Community posts submitted voluntarily by families

We do not collect any sensitive personal data, biometric data, or financial data directly. Payment processing is handled by Stripe, which operates under its own privacy policy and PCI-DSS compliance framework.

3. Why We Collect This Data

We use the data collected for the following purposes:

• To create and manage user accounts
• To deliver the Journey Within programme and track individual progress
• To verify partner school eligibility and apply discounts
• To send programme-related communications (new content, updates, messages from our team)
• To moderate community posts before they are published
• To comply with our legal obligations under GDPR and COPPA

4. Children's Data — Special Protections

The child's profile within the platform (name, avatar, progress, stars) is accessible only to the registered parent or guardian using their account credentials. We do not display children's real names publicly anywhere on the platform.

5. Community Posts and Consent

Families may voluntarily submit text comments to the Journey Within community feed. Before posting, families must explicitly confirm that they consent to their post being reviewed by our moderation team and potentially featured on BIBO Education's official social media channels and marketing materials. This consent is freely given, specific and can be withdrawn at any time by contacting director@biboeducation.com.

All posts are moderated before publication. We reserve the right to reject any post that does not meet our community standards.

6. Data Sharing

We do not sell, rent or share personal data with third parties for marketing purposes. We share data only with the following service providers, strictly to deliver our programme:

• Stripe — payment processing (no card data is stored on our servers)
• Netlify — website hosting
• Google — email services via Google Workspace

All service providers are contractually bound to process data only on our instructions and in compliance with GDPR.

7. Data Retention

We retain personal data for as long as the family has an active account. If an account is cancelled, we delete all personal data within 30 days, except where we are legally required to retain it (for example, financial transaction records which must be kept for 7 years under Spanish tax law).

8. Your Rights Under GDPR

If you are located in the European Union or United Kingdom, you have the following rights:

• Right of access — request a copy of all data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restriction — ask us to limit how we use your data
• Right to data portability — receive your data in a portable format
• Right to object — object to certain types of processing
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, email us at director@biboeducation.com. We will respond within 30 days.

9. Cookies

Our platform uses only essential cookies necessary for the platform to function (for example, to keep you logged in during a session). We do not use advertising cookies, tracking pixels or third-party analytics without your explicit consent.

10. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted password storage, and access controls that limit who can view personal data within our team.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered families by email before any significant changes take effect. Continued use of the platform after notification constitutes acceptance of the updated policy.

12. Contact and Complaints

For any privacy-related question or concern, contact us at director@biboeducation.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish data protection authority (AEPD) at www.aepd.es, or with your local supervisory authority within the EU.