PRIVACY POLICY

Effective Date: April 7, 2026
Website: https://www.capstoneeducationalconsultants.com

1. Overview

Capstone Educational Consultants (“Capstone,” “we,” “our,” or “us”) is committed to protecting the privacy and security of the students and families we serve.

Because our work involves student information, we operate with a compliance-first mindset, aligning with:

• Federal standards such as the Family Educational Rights and Privacy Act (FERPA)
• State-level protections including the Georgia Student Data Privacy, Accessibility, and Transparency Act (SDATA)
• International considerations such as the General Data Protection Regulation (GDPR) where applicable

2. Information We Collect

Personal Information

We may collect:

• Student name, academic history, and activities
• Parent/guardian names and contact information
• Application materials (essays, resumes, forms)
• Communication records

Technical Information

• IP address
• Browser and device data
• Website usage analytics

3. How We Use Information

We use collected data solely to:

• Deliver educational consulting services
• Communicate with students and families
• Support application and academic planning
• Improve our services and operations

We do not sell, rent, or commercially exploit personal or student data.

4. Children’s Privacy & Parental Consent (COPPA Compliance)

Capstone Educational Consultants may work with students under the age of 13 and is committed to complying with the Children’s Online Privacy Protection Act (COPPA).

Parental/Guardian Consent

We do not knowingly collect personal information from children under 13 without verifiable parental or guardian consent.

By submitting information about a student under 13, you confirm that:

• You are the student’s parent or legal guardian, or
• You have explicit authorization from the parent or legal guardian

Information Collected About Children

We collect only what is necessary to provide our services, such as:

• Basic identifying information
• Academic and application-related information

We do not collect:

• Social Security numbers
• Biometric data
• Unnecessary sensitive personal data

This reflects both COPPA requirements and Georgia SDATA data minimization standards.

Use of Children’s Information

Children’s data is used only to:

• Provide consulting services
• Communicate with parents/guardians
• Support academic and application processes

We do not use children’s data for marketing or resale.

Parental Rights

Parents and guardians may:

• Request access to their child’s data
• Request corrections
• Request deletion
• Withdraw consent at any time

To make a request, contact: mark@capstoneed.com  

Data Sharing (Children)

We only share children’s data:

• With parents/guardians
• With trusted service providers necessary for service delivery
• With educational institutions only at parent/guardian direction

If Data Is Collected Without Proper Consent

If we discover that information has been collected from a child under 13 without appropriate consent, we will:

• Delete the data promptly, or
• Obtain verifiable parental consent

5. Georgia SDATA Compliance

Capstone aligns with the Student Data Privacy, Accessibility, and Transparency Act (SDATA) through the following principles:

Data Minimization

We collect only the data necessary to deliver services and do not collect:

• Medical records (unless voluntarily provided and required)
• Biometric identifiers

Protection of Sensitive Information

• Social Security numbers are not required and should not be submitted
• Any sensitive data is handled with strict safeguards

Transparency

Upon request, families may receive:

• A summary of collected data
• How the data is used
• Any third parties involved in processing

Security Safeguards

We implement:

• Secure platforms and systems
• Role-based access controls
• Data handling protocols to reduce risk of unauthorized access

Compliance Alignment Statement

Capstone Educational Consultants applies COPPA, FERPA, and Georgia SDATA as part of a unified approach to student data protection, transparency, and responsible data use.

6. FERPA-Aligned Practices

While Capstone is not an educational institution, we operate in alignment with FERPA principles:

• Student data is treated as confidential
• Access is limited to authorized individuals
• Parents/guardians retain visibility and involvement

7. GDPR (International Clients)

If you are located in the European Union or United Kingdom, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing

Legal basis for processing:

• Performance of a contract
• Legitimate business interests

To exercise these rights, contact: mark@capstoneed.com

8. Data Sharing (General)

We may share information only with:

• Trusted service providers (CRM systems, scheduling tools, payment processors)
• Educational institutions (only with client direction)

We do not sell or rent personal data to third parties.

9. Data Retention

We retain information only as long as necessary to:

• Provide services
• Meet legal and operational obligations

You may request deletion at any time.

10. Cookies & Tracking

We may use cookies and analytics tools to:

• Improve website functionality
• Understand site usage

You can control cookies through your browser settings.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information.

However, no system can be guaranteed 100% secure. Please use discretion when sharing sensitive information.

12. Your Rights

You may:

• Request access to your data
• Request corrections
• Request deletion
• Ask how your data is used

Contact: mark@capstoneed.com

13. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be reflected with a revised effective date.

14. Contact

Capstone Educational Consultants
mark@capstoneed.com
6000 Shakerag Hill, Peachtree City, GA 30269

‍