top of page

Privacy Policy

​​
EZScholar Services
Last Updated: March 31, 2026
EZScholar Services (“EZScholar,” “we,” “us,” or “our”) is committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and the Luxembourg Data Protection Law of 1 August 2018. This policy describes how we collect, use, and protect your personal information in the context of our academic advisory services.
 
1. Data Controller and Contact Information
EZScholar Services, operated by Vivek Bhandari and located in Strassen, Luxembourg, is the Data Controller for your personal data.

​
2. Legal Basis for Processing (GDPR Art. 6)
We process your personal data under the following legal bases:
​​
2.a  Purpose of Processing - Academic Advising & SAT Prep
       Category of Data - Name, Email, Scores, Transcripts, Phone, School, Resumes
       Legal Basis - Performance of a Contract
​​
2.b  Purpose of Processing - BPO Support & Operations
       Category of Data - Name, Email, Scores, Transcripts, Phone, School, Communication logs, academic interests
       Legal Basis - Performance of a Contract
​​
2.c  Purpose of Processing - Research Mentorship
      Category of Data - Name, Email, Scores, Transcripts, Phone, School, Research drafts, mentor affiliation
      Legal Basis - Performance of a Contract
​​
2.d  Purpose of Processing - Marketing & Promotions
      Category of Data - Email, Name, City, School, Admission Results
      Legal Basis  - Consent (Freely given opt-in)
​​
2.e  Purpose of Processing - Tax & Legal Compliance
      Category of Data - Billing data, Payment history
       Legal Basis  - Legal Obligation (Luxembourg Law)
​
3. International Operations
To ensure high-quality support for our global student base (India, USA, Middle East, Singapore, UK and to lesser extent EU), we utilize a Business Process Outsourcing (BPO) organization based in India.

  • Safeguards: This transfer is governed by Standard Contractual Clauses (SCCs) approved by the European Commission.

  • Accountability: We have executed a formal Privacy Addendum with the BPO firm. All BPO employees with access to student data undergo mandatory Annual GDPR & Privacy Training verified via secure digital signature.

 
4. Global Mentorship Network
We collaborate with a global network of academic mentors (EU, UK, USA, and India) to provide research coaching.

  • Data Minimization: Mentors only receive access to the specific data required to facilitate mentorship (e.g., drafts, name, and email).

  • Independent Exchange Disclaimer: Any personal data, contact details, or research materials shared directly by the student (Data Subject) with a mentor outside of EZScholar’s provided platforms is the sole responsibility of the student; EZScholar assumes no liability for such independent data exchanges.

  • Confidentiality: Every mentor is bound by confidentiality clauses requiring them to protect the data provided through EZScholar. EZScholar will make commercially reasonable efforts to ensure compliance by all mentors.

 
5. Research Papers & Third-Party Journals
EZScholar or its mentors may contact unaffiliated third-party journals to publish student work.

  • Data Transfer: Upon the direction of the student, basic information (name, school, email) and the research work may be shared with journals.

  • Liability: EZScholar does not control how these journals use or protect data. Any publishing fees or originality certifications are the responsibility of the student. In case of disputes, EZScholar will make commercially reasonable attempts to assist the student.

​
6. Announcements, Marketing, and Promotions
By participating in EZScholar events, you consent to the usage of data and announcements in social media, brochures, EZscholar website or media as follows:
​
6. a Event Type  - Quizzes & Awards
        Data - Name, School, City
        Description and Permission - Participation counts as consent to announce winners. For data subjects under the age of 16, EZScholar requires explicit parental authorization.
​
6. b  Event Type - Webinars
         Data Used - Name, Video, Image
         Description and Permission - Webinars may be broadcast/recorded. Consent for recording is obtained at the start.
​
6. c  Event Type - Admission & Test Result Announcements
        Data Used - Name, City, University Admitted to, Test Score, Affiliation or School name
        Description and Permission - We announce results using: First Name, Last Name, Test Score, University, School Name and City. (unless a pseudonym or initial is requested or the student/parent tell us not to announce)
​
6. d  Event Type - Published Research Papers - Upon publication of Research Papers in a third party journal, EZScholar may display this information on its website and in its brochures.

        Data Used - Name, City, School, Country         

        Description and Permission - We display published research papers of our students including their First Name, Last Name, School, City and Country

​

6.e  Event Type - Testimonials*
       Data Used - Full Image, Success Data, Video
       Description and Permission - Separate written consent is obtained from the student/parent before featuring images or videos.

​
*In our experience students and parents are happy to share their success and admissions journey. However, out of an abundance of caution, EZScholar voluntarily limits disclosures without consent. If at any time EZScholar is notified not to announce the results for any reasons, we honor and respect those instructions.
​
7. Your Data Rights
Under the GDPR, you have the right to:

  • Access & Rectification: Request copies or corrections of your data.

  • Erasure: Request deletion (subject to Section 8).

  • Portability: Receive your data in a machine-readable format.

  • Withdraw Consent: Unsubscribe from marketing at any time.

​
8. Data Retention

  • Service Records: Retained for 2 years after our last interaction. However, we may purge the data sooner for operational efficiency.

  • Financial Records: Retained for 10 years as required by Luxembourg Tax and Commercial Law. During this period, the data is "restricted" from active use.

  • Revocation: Access for BPO/Mentors is revoked immediately upon completion of the specific service.

 
9. Security Measures
We implement rigorous technical and organizational measures (TOMs), including encryption at rest and in transit. Our BPO partners are subject to periodic training to ensure compliance with our internal safety standards.
 
10. Cookies & Analytics
EZScholar uses "Essential Cookies" for site functionality and "Analytical Cookies" to improve user experience. You can manage your preferences via our on-site cookie banner.
 
11. Complaints to the Supervisory Authority
If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD).

​​
CONTACT INFORMATION 
We welcome your comments or questions regarding this Privacy Policy. Please contact us at the following address or the email provided below: 

EZScholar Services
12, Rue Alexandre Fleming
Strassen, L1525
Luxembourg, Europe
Email: InfoSec@EZScholar.org  
​​​​
CHANGES TO THE PRIVACY POLICY
EZScholar reserves the right to change this policy from time to time, at its sole discretion. We may update this privacy policy to reflect changes to our data management and information security practices. We encourage you to periodically review the Privacy Policy.
​
Go Home
​​

bottom of page