Quick Navigation
1. Information We Collect
What data we gather from you
For students using IAMS, we collect the following categories of information:
Registration and Account Information:
- Full name and contact details (email, phone number)
- Date of birth and gender
- University/institution name and affiliation
- Course details, year of study, and registration number
- Geographic location (county and town)
- Account credentials (hashed password)
Profile and Professional Information:
- Personal biography and professional interests
- Curriculum Vitae (CV) and resume attachments
- Skills, certifications, and qualifications
- Work experience and internship history
- Academic achievements and grades (if voluntarily shared)
- Profile picture or avatar
Activity and Application Data:
- Applications submitted to opportunities
- Saved/bookmarked opportunities and organizations
- Messages and communications with organizations
- Platform usage patterns and interaction logs
- Account security events and login history
Technical and Device Information:
- IP address and device identifiers
- Browser type, operating system, and version
- Pages visited and time spent on platform
- Referrer information and navigation data
2. How Student Data Is Used
Purposes for data processing
We use your information for the following legitimate purposes:
Account Management
Creating and maintaining your student account, verifying identity, and managing account settings.
Opportunity Matching
Connecting you with relevant industrial attachment opportunities and displaying personalized recommendations.
Application Processing
Submitting applications to organizations, managing application status, and facilitating placement decisions.
Communications
Sending important notifications, updates, policy changes, and responding to your inquiries via email or SMS.
University Oversight
Sharing relevant data with your affiliated university for academic placement coordination and compliance.
Security and Fraud Prevention
Detecting and preventing fraud, unauthorized access, abuse, and maintaining platform security.
Platform Improvement
Analyzing usage patterns, conducting research, and improving platform features, user experience, and services.
3. Who We Share Your Data With
Third parties with access to your information
Your data is shared with the following parties for legitimate purposes:
Organizations and Employers:
When you apply for an opportunity, the organization receives:
- Your CV and profile information relevant to the position
- Application answers and supporting documents
- Your contact information for direct communication
- Your skills, qualifications, and relevant experience
Universities and Academic Institutions:
Your university may receive:
- Your application and placement data for oversight
- Placement outcomes and attachments status
- Confirmation of enrollment and academic standing
- Reports for compliance with academic requirements
IAMS Platform Administrators:
Protected by confidentiality agreements, administrators may access data for:
- Customer support and account assistance
- Fraud detection and investigation
- Policy enforcement and moderation
- Legal compliance and regulatory obligations
Service Providers:
We use third-party service providers for:
- Email delivery and SMS notifications
- Cloud hosting and data storage
- Analytics and reporting services
- Payment processing (if applicable)
These providers are contractually obligated to protect your data.
Important: We do not sell, trade, or rent your personal information to marketing companies or unauthorized third parties.
4. Data Security and Protection
How we protect your information
We implement comprehensive security measures to protect your data:
Security Controls:
- HTTPS encryption for all data in transit
- Password hashing using industry-standard algorithms
- Role-based access control limiting data visibility
- Regular security audits and vulnerability assessments
- Activity logging and intrusion detection systems
- Firewalls and DDoS protection
Your Responsibility:
While we maintain strong security, you must also protect your account by:
- Using strong, unique passwords
- Enabling two-factor authentication
- Logging out of shared devices
- Not sharing your credentials with anyone
Security Incident Response: In the unlikely event of a data breach, we will notify affected students within 24 hours and provide guidance on protective measures.
5. Data Retention and Deletion
How long we keep your information
We retain your data based on the following principles:
While Your Account Is Active:
We maintain your complete profile, application history, and communications for platform functionality and your benefit.
After Account Closure:
- 6-12 months: Account and profile deletion (anonymized data retained for analytics)
- 7 years: Financial and tax records (legal requirement)
- Backups: Data may exist in system backups for up to 90 days
- Legal holds: Data retained if required by law enforcement or legal proceedings
Data Deletion Request:
You can request deletion of your personal data at any time by:
- Accessing account settings and selecting "Delete Account"
- Contacting our support team with a formal deletion request
- We will confirm deletion within 30 days
6. Your Privacy Rights and Choices
Control over your personal data
You have the following rights regarding your personal data:
Right to Access
You can request a complete copy of your personal data stored in our systems at any time.
Right to Correction
You can update, correct, or complete inaccurate information through account settings or support request.
Right to Deletion
You can request deletion of your account and associated personal data (subject to legal retention requirements).
Right to Opt-Out
You can opt out of marketing communications and non-essential notifications in your account preferences.
Right to Data Portability
You can request your data in a standard, machine-readable format for transfer to another service.
To exercise any of these rights, contact our Data Protection Officer through the platform support system.
7. Cookies and Tracking Technologies
How we use cookies and analytics
Our platform uses the following technologies:
Essential Cookies:
Required for basic platform functionality:
- Session authentication cookies
- CSRF protection tokens
- User preferences and language settings
Analytics and Performance:
We use analytics to improve user experience (no personal data shared):
- Google Analytics for page views and usage patterns
- Performance monitoring tools
- Error tracking and diagnostics
Cookie Management:
You can manage cookies in your browser settings. Disabling non-essential cookies will not affect core platform functionality.
8. Policy Changes and Updates
How we communicate changes
This privacy policy may be updated to reflect:
- New platform features and data processing methods
- Changes in applicable data protection laws
- Improvements to security and privacy practices
- Updated third-party integrations or service providers
Notification of Changes:
We will:
- Email you about material changes before they take effect
- Post significant changes prominently on the platform
- Update the "Effective Date" at the top of this policy
- Obtain your explicit consent for fundamental changes
Privacy Questions or Concerns?
We're here to help protect your data
If you have questions about this privacy policy, your data rights, or how we handle your information, contact us:
Email: support@iams.local
In-Platform Help: Support Center
Data Protection Officer: Available via support system