Policies
Privacy Policy
How GMAT40 collects, uses and protects your personal information when you use gmat40.com, create an account, buy a membership or book an advisor.
Who we are
GMAT40 is an organization based in Ottawa, Ontario, Canada. We are responsible for the personal information we collect through gmat40.com and handle it in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Our privacy officer is the CEO/Founder. You can reach him through the Contact page on this website or by email at info@gmat40.com.
What we collect
Account details: your username, email address, date of birth (to confirm you meet the minimum age in our Terms of Use) and password (stored only in encrypted form), plus any name you add to your profile.
Membership and billing records: your membership level, start and renewal dates, amounts paid, and the customer and subscription references our payment processor gives us. We never see or store your full card number.
Advisor bookings: the advisor you chose, the date and time of your session, and anything you write in the booking form.
Messages: your name, email address and message when you use our contact form.
Technical information: your IP address, browser type and pages visited, which our website host and security tools record to keep the site running and protected.
How we use it
To create and manage your account and give you the articles and services your membership includes.
To process payments, renewals, cancellations and refunds.
To arrange advisor sessions and let your advisor prepare for them.
To reply to your messages and send emails about your account, such as activation, password resets, receipts and changes to your membership.
To keep the website secure and fix problems.
We do not sell your personal information and we do not use it for advertising. We only send marketing emails if you have asked to receive them.
Who we share it with
We share personal information only with service providers who help us run GMAT40, and only what they need to do that work:
Stripe, which processes card payments and subscriptions. Stripe's own privacy policy applies to the payment details you give it.
Our website hosting provider, which stores the website and its database. Namecheap (www.namecheap.com).
Our email delivery service, which sends account and booking emails. Namecheap (www.namecheap.com).
The GMAT40 advisor you book, who sees your name, email address and booking details.
Some of these providers store information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information when the law requires it.
Cookies
We use cookies that the website needs to work: to keep you logged in, remember your language choice and protect the site from abuse. We do not currently use advertising cookies or third-party analytics. If that changes, we will update this policy and ask for your consent where required.
How long we keep it
We keep your account information while your account is open. If you ask us to close your account, we delete or anonymize your personal information, except billing records, which we keep for six years to meet Canadian tax record-keeping rules.
How we protect it
The website uses an encrypted connection (HTTPS), passwords are stored in encrypted form, payments are handled by Stripe rather than on our servers, and access to member records is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your information and will tell you and the Privacy Commissioner if a breach creates a real risk of significant harm.
Your choices and rights
See the personal information we hold about you and ask us to correct it.
Withdraw your consent, for example by closing your account. Some services may stop working if you do.
Ask us to delete your account and personal information, subject to the record-keeping rule above.
To do any of these, contact us through the Contact page. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Children
GMAT40 is not designed for children under 16, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. We will change the date at the top of this page and tell members by email about any important change.