Privacy Policy — Bubble Vergo

1. Introduction

Welcome to Bubble Vergo ("we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services. By using Bubble Vergo, you consent to the data practices described in this policy.

2. Information We Collect

We collect information that you provide to us directly, information collected automatically, and information from third parties.

2.1 Information You Provide

Account Registration: First name, last name, email address, password, phone number, nationality, date of birth, and passport/ID number.
Application Data: University or job application details including academic history, work experience, supporting documents (transcripts, CVs, passports, etc.).
Contact Forms: Name, email address, and message content when you contact us.
Payment Information: We do not store full card details. Payments are processed by certified third-party providers.

2.2 Information Collected Automatically

Usage Data: Pages visited, time spent on pages, links clicked, and navigation paths.
Device Information: Browser type, operating system, IP address, and device identifiers.
Cookies: We use cookies and similar tracking technologies as described in our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account and provide our services
To process university admission and work placement applications
To communicate with you about your applications and enquiries
To send service-related notifications and updates
To improve our platform, services, and user experience
To comply with our legal obligations and enforce our terms
To detect, prevent, and address technical issues or fraudulent activity
To send marketing communications where you have opted in (you can opt out at any time)

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

Contract: Processing necessary to provide our services to you
Legitimate Interests: Improving our platform, preventing fraud, and ensuring security
Consent: Where you have given explicit consent (e.g., marketing emails)
Legal Obligation: Compliance with applicable laws and regulations

5. Sharing Your Information

We do not sell your personal data. We may share your information with:

Partner Universities and Employers: To process your applications as requested by you
Service Providers: Third-party vendors who help us deliver our services (hosting, email, payment processing) under strict data processing agreements
Legal Authorities: When required by law, court order, or governmental authority
Business Transfers: In the event of a merger, acquisition, or sale of assets

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. We also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data in transit
Secure password hashing (bcrypt)
Regular security audits and vulnerability assessments
Access controls limiting data access to authorised personnel only

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your country, where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.

9. Your Rights

You have the following rights regarding your personal data:

Right of Access: Request a copy of the data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restriction: Request that we limit processing of your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please visit your account settings, submit a deletion request, or contact us at the details below. We will respond within 30 days.

Learn more about your specific GDPR rights on our GDPR Rights page.

10. Cookies

We use cookies to enhance your experience on our website. For full details, please read our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: Via our contact form
Address: Bubble Vergo, Nigeria, West Africa

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.