Privacy policy

1. Who we are

MBAfolio ("we", "us") provides a personalised executive education intelligence service. For the purposes of UK and EU GDPR, we are the data controller for personal information you provide.

2. What we collect

• Account information — email address, password (hashed).
• Profile information — career history, goals, learning preferences and other details you choose to share to receive personalised recommendations.
• Usage information — pages visited, features used, programmes saved.
• Payment information — processed by our payments provider; we do not store full card details.

3. How we use it

• To generate personalised programme recommendations.
• To deliver the MBAfolio Insights Report and other paid services.
• To improve our matching intelligence and product experience.
• To communicate with you about your account and our service.
• With your explicit opt-in consent, to send occasional product updates, new features and executive education insights.

4. Legal bases (GDPR)

We rely on (a) contract — to deliver the service you've signed up for, (b) consent — for optional marketing and product update emails (withdrawn at any time in your profile settings), and (c) legitimate interests — to improve and secure our platform.

5. Sharing

We share information only with infrastructure providers necessary to operate MBAfolio (authentication, hosting, payments). We do not sell your information. We do not share your profile with educational institutions without your explicit, in-product consent.

6. Retention

We retain your account data while your account is active. You can delete your account and associated data at any time by contacting us.

7. Your rights

You have the right to access, correct, export and delete your data, and to object to processing. You can also unsubscribe from product update emails at any time in your profile settings. Contact us at official.mbafolio@gmail.com to exercise these rights.

8. Security

We use industry-standard authentication, encrypted transport (TLS), database row-level security and least-privilege access controls.

9. International transfers

Our infrastructure may process data in the UK, EU and US. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards including Standard Contractual Clauses.

10. Changes

We'll notify you of material changes by email or in-product notice.

11. Contact

Questions? Email official.mbafolio@gmail.com