VU SIGMA v3-2 Privacy Policy & Consent Disclosures

1. Scope & Identity of the Data Controller

This Privacy Policy governs the processing of personal data collected through VU SIGMA (accessible at https://vusigma.com) and all related sub-pages, examination preparation modules, multiple-choice question (MCQ) engines, academic departmental course hubs, and authenticated student portals.

The Data Controller responsible for your personal information under the General Data Protection Regulation (Regulation (EU) 2016/679) and other applicable privacy statutes is:

2. Information We Collect

We collect personal data to operate our educational portal, deliver chapter-wise practice tests, preserve student progress, and maintain platform security. We adhere strictly to data minimization principles.

A. Information You Voluntarily Provide

• Student Profile & Account Details: When you register on VU SIGMA, we collect your full name, email address, password hash (cryptographically hashed using industry-standard bcrypt algorithms; plain-text passwords are never accessible or stored), and optional academic details (such as degree program or university roll ID).
• Direct Communications & Support Requests: When you contact our support desk via our contact form or email, we retain your name, email address, message body, and any attachments you submit.

B. Academic & Examination Interaction Data

• Practice & Mock Examination Attempts: When you engage with our questions, we record your selected answers, test scores, completion timestamps, speed metrics, and bookmarked questions. This data is utilized solely to furnish personalized performance analytics and guide your exam readiness.

C. Manual Bank Transfer & Payment Reference Records

• Transaction Reference Identifiers: When acquiring verified semester exam sets or premium past paper collections, payments are conducted via external banking channels (e.g., direct bank transfer or mobile wallets). To confirm receipt of payment, students provide their transaction reference ID (TRX ID / TID), sender account title, and an optional payment receipt image.
• Absolute Cardholder Data Exclusion: VU SIGMA does not collect, handle, process, or store credit card numbers, debit card PINs, CVV/CVC codes, ATM PINs, or online banking passwords. Financial transfers occur entirely within your personal financial institution's secure application.

D. Automatically Collected Technical & Telemetry Data

• Device & Connection Information: Anonymized/truncated Internet Protocol (IP) addresses, device hardware types, operating systems, browser vendors and versions, preferred language, and screen resolutions.
• Clickstream & Navigational Analytics: Referral URLs, pages visited, chapters read, search queries, session lengths, and technical error logs gathered via Google Analytics 4 to optimize platform responsiveness.

4. European Regulations (EEA, UK, Switzerland) & Google-Certified CMP

In compliance with the General Data Protection Regulation (Regulation (EU) 2016/679), the United Kingdom Data Protection Act 2018 / UK GDPR, the Swiss Federal Act on Data Protection (revFADP), and Google's mandatory Consent Management requirements (in effect since January 16, 2024), VU SIGMA has deployed a Google-certified Consent Management Platform (CMP).

Your Available Consent Choices

Unconditional Right to Revoke or Alter Consent

In accordance with GDPR Article 7(3), you possess the unconditional right to withdraw or adjust your consent choices at any time, as effortlessly as it was to grant them. Withdrawing consent does not affect the lawfulness of processing undertaken prior to revocation.

To modify or revoke your consent, you may use the Manage Cookie Consent button below or clear your browser's cookie cache.

5. Cookie & Browser Storage Inventory

A cookie is a small text file placed on your device by your browser. We also utilize browser Local Storage for client-side theme and layout preferences. The table below details all cookies and local storage tokens utilized across VU SIGMA:

Managing Cookies via Web Browser Settings

You can configure your browser to alert you when cookies are placed, block third-party cookies, or purge all existing cookies upon closing. Please refer to official browser documentation:

• Google Chrome Cookie Settings
• Mozilla Firefox Cookie Settings
• Apple Safari Cookie Settings
• Microsoft Edge Cookie Settings

6. Revoking or Changing Cookie Consent

If you previously granted consent to advertising or analytics cookies and now wish to modify your preferences or withdraw consent entirely, click the button below to trigger the Google-certified CMP interface:

7. United States State Privacy Rights (CCPA / CPRA & State Laws)

This section applies to residents of California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act - CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA).

Summary of Consumer Rights Under US State Laws

• Right to Know / Access: The right to request disclosure of the specific pieces and categories of personal information collected, sources, and third parties with whom data is shared.
• Right to Deletion: The right to request the irreversible erasure of your personal data, subject to lawful retention exemptions.
• Right to Correction: The right to rectify inaccurate or obsolete personal details.
• Right to Non-Discrimination: We will never deny services, charge differing rates, or provide disparate quality of educational resources should you choose to exercise your privacy rights.

8. Student Academic Records & Payment Safety

As an educational platform serving Virtual University students and scholars, we prioritize academic integrity and student privacy above all else.

A. Examination & Quiz Privacy

Your practice exam answers, chapter mock attempts, and score percentages belong exclusively to your individual student account. We do not publish, publicly display, or license student test attempts or weaknesses to third parties. Performance statistics displayed on aggregate leaderboards (if opted-in) display only anonymized display pseudonyms.

B. Manual Payment Verification Safety (Zero Credit Card Storage)

For premium semester past paper bundles and verified past exam solutions:

• Students perform payment directly through their own banking portal or mobile money app (e.g., Bank Transfer, EasyPaisa, JazzCash, Nayapay, or SadaPay).
• You submit only the verification reference: Transaction ID (TRX ID), sender account title, and an optional proof screenshot for manual reconciliation by our administrative audit staff.
• Zero Cardholder Data Storage: VU SIGMA does not collect, process, or store credit card numbers, debit card PINs, CVV security codes, bank passwords, or debit credentials. We maintain zero PCI-DSS cardholder liability because financial transactions are executed exclusively within your verified banking institution.

9. Legal Bases for Data Processing under GDPR

Under Article 6 of the General Data Protection Regulation (GDPR), we process your personal data on the following recognized legal grounds:

10. Data Retention, Security & Cross-Border Transfers

Data Retention Schedules

We retain personal data only for as long as necessary to fulfill the educational purposes for which it was gathered:

• Active Student Accounts: Retained while the student account remains active. You may request account deletion at any time.
• Exam & Quiz Attempts: Retained alongside the active account to supply historical progress; purged upon account closure.
• Financial Verification Logs: Bank transaction IDs and verification slips are retained for up to 7 years to satisfy statutory tax and financial accounting requirements.
• Server & Security Logs: Transient security logs and IP connection records are automatically rotated and purged after 90 days.

Data Security Architecture

We implement stringent technical and organizational measures to safeguard your information against unauthorized access, loss, or alteration. These include:

• Universal HTTPS / Transport Layer Security (TLS 1.3) cryptographic transit encryption.
• Cryptographic hashing of user passwords with salted bcrypt algorithms.
• Strict role-based access control (RBAC) ensuring only authorized administrative personnel can review payment verification proofs.
• Automated vulnerability scanning, web application firewalls, and DDoS shielding.

International Cross-Border Transfers

VU SIGMA operates globally, utilizing distributed cloud hosting infrastructure and content delivery networks (CDNs). Where personal data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, such transfers are safeguarded under European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Addendums, or adequacy decisions.

11. Children’s Privacy (COPPA & International Standards)

VU SIGMA is designed and operated exclusively for higher education students, university scholars, and adult examination candidates. We do not knowingly solicit, collect, or maintain personal identifiable information from children under the age of 13 (or under the age of 16 in European jurisdictions requiring parental consent under GDPR Article 8).

If we discover that personal data of an underage individual has been inadvertently collected without verifiable parental consent, we will take immediate measures to permanently expunge that information from our servers. Parents or guardians who believe their child has provided personal information may contact our Privacy Officer at noreply@vusigma.com for prompt deletion.

12. Your Data Subject Rights & How to Exercise Them

Regardless of your geographical location, we respect your rights over your personal data under the GDPR, UK GDPR, and global data privacy standards:

Submitting a Privacy Rights Request

To exercise any of the aforementioned rights, please email our Data Protection Officer at:

13. Policy Modifications & Notification Procedures

We may periodically revise this Privacy Policy to reflect modifications to our educational features, regulatory updates, or Google publisher requirements. When modifications occur, we will update the "Last Reviewed & Updated" date at the top of this page. For significant or material changes affecting your rights, we will provide prominent notice via a site-wide banner or direct notification to registered student accounts.

14. Contact Information & Data Protection Inquiries

If you have questions, feedback, or concerns regarding this Privacy Policy, our use of Google AdSense cookies, certified CMP mechanics, or the handling of your student examination records, please contact us: