Effective Date: June 26, 2025.

On this page

1. Our Information
2. Why we collect personal information
3. What personal information do we collect?
4. Cookies and Tracking Technologies
5. Legal Basis for processing your personal information
6. Sharing Your Information
7. How we protect your personal information
8. Retention and destruction of personal information
9. Your Rights
10. Complaints
11. Anti-Spam Compliance (CASL)
12. Changes to This Privacy Policy
    
    

At Maple Bear Global (“we,” “us,” or “our”), we value the privacy of our Users (“Data Subject”, “User” or simply “you”), and are committed to protecting your personal information, as defined by Section 2 of PIPEDA.

The Policy clarifies the general conditions for the collection, use, storage, and other forms of processing and protection of personal data on our Plataform MyMapleBear (“MyMapleBear”), in accordance with the applicable privacy and personal data protection legislation in force, including but not limited to, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) of Canada, the Canada’s Anti-Spam Legislation (CASL) and the General Data Protection Regulation of the European Union (“General Data Protection Regulation” or “GDPR”), and other laws described in this Policy. Please also see our website Terms and Conditions of Use to see how this Policy applies to our website.

This Policy does not apply to our employees’ personal information. That information is covered under the Maple Bear Global Employee Privacy Policy.

1. Our Information

• Company Name: Maple Bear Global Schools
• Contact Information: Raíssa de Freitas Calvette
• Privacy Officer e-mail: dataofficer@maplebear.ca
  
  

2. Why we collect personal information

We collect personal information to:

• Authenticate Users: To ensure that only authorized individuals (students, teachers, administrators) can access specific educational tools and resources.
• Provide personalized experiences: To tailor content and features to individual users based on their roles and preferences.
• Ensure security and compliance: To monitor and protect the platform from unauthorized access and to comply with educational regulations.
• Facilitate communication: To enable communication between users, such as between students and teachers.
• Improve services: To analyze usage patterns and feedback to enhance the platform’s functionality and user experience.
  
  

We can only use your personal information for the purpose for which it was obtained or for a use consistent with that purpose.

3. What personal information do we collect?

We only collect personal information that is directly related to the purposes for which it is needed, such as providing services, fulfilling contractual obligations, ensuring compliance with legal requirements, or improving user experiences. The amount and the type of the information collected will be limited to that which is needed to fulfil the identified purpose(s). We only collect what we need.

Access to the platform shall be carried out through the creation of an account by parents or legal guardians. For this purpose, the following personal data of the responsible party shall be collected: full name, given name, email address, date of birth, and country of residence.

The child shall be registered as a dependent account, in which case only the following personal data will be collected: full name, given name, and date of birth.

Important Notice: The provision of personal data is optional. However, certain data are essential for account creation and for the proper functioning of specific features of the platform. Failure to provide such information may result in restricted or unavailable access to certain services.

In addition to the information provided directly and voluntarily, technical data arising from the interaction with the platform may be automatically collected, such as browsing data, device information, IP address, among others. Although such data may not, in isolation, directly identify the data subject, when combined with other information that enables such identification, they shall be treated as personal data, in accordance with applicable legislation.

If you contact our Information Centre with questions related to privacy, we may collect your name and contact information to provide this service. We may for example, collect your name, contact information, and views in connection with an investigation or a consultation. We may also collect your IP address if you visit our website.

Sometimes we receive more personal information than is needed. We strongly encourage you not to provide us with information beyond that which is necessary.

Protection of Children’s Privacy

MyMapleBear is designed for educational use by children of all ages, including minors under the age of 13. We are committed to protecting the privacy of children and complying with all applicable laws concerning the collection, use, and disclosure of children’s personal information, including PIPEDA and international standards such as GDPR and the U.S. Children’s Online Privacy Protection Act (COPPA), where applicable.

We do not knowingly collect personal information from children without the consent of a parent or legal guardian, except as permitted by law or under the authority of a school acting in place of a parent (in loco parentis) for educational purposes.

Parents and guardians have the right to:

• Access the personal information we collect about their child;
• Request corrections or deletions of such data;
• Withdraw consent for further data processing, subject to legal or contractual obligations.

To exercise these rights, or for questions about your child’s personal information, please contact our Privacy Officer at dataofficer@maplebear.ca

4. Cookies and Tracking Technologies

We use Cookies and similar tracking technologies to track the activity on MyMapleBear and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our services.

You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of MyMapleBear.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy.

5. Legal Basis for processing your personal information

We process your personal data in accordance with the applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the Brazilian General Data Protection Law (LGPD), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), as applicable.

The legal bases on which we rely to process your personal information include:

• Performance of a Contract: Processing is necessary to fulfill our contractual obligations with you, such as providing access to educational services, managing user accounts, and ensuring the delivery of digital learning tools and content.
• Compliance with Legal Obligation: We may process your data when necessary to comply with legal or regulatory obligations to which we are subject, including record-keeping, safety, and reporting obligations.
• Consent: Where required by law, we will obtain your prior, informed, and explicit consent for specific processing activities, particularly when it involves the use of your personal data for optional services or third-party educational platforms. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate Interests: In some cases, processing is necessary for the legitimate interests pursued by the school, Maple Bear Global Schools, or affiliated entities, such as ensuring the security and proper functioning of our platform, managing licenses, and improving our educational offerings. We ensure that such interests are balanced with your fundamental rights and freedoms.
  
  

About Consent:

By interacting with our services, you provide your consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You can withdraw your consent at any time by contacting us at dataofficer@maplebear.ca.

Wherever possible, we seek a person’s consent before we collect their personal information. The form of consent may vary depending on the circumstances and the type of information being requested. Consent can be express or implied and can be provided directly by the individual or by an authorized representative.

We will not use your personal information without your consent unless it is either:

• for the same purpose for which the information was originally collected or compiled;
• consistent with that purpose;
• for a purpose that may be disclosed under an investigation.

We are committed to ensure that all processing of personal information is done transparently, fairly, and in accordance with the rights of data subjects. If you have any questions regarding the legal basis for a specific processing activity, please contact our data protection officer or local administrator.

6. Sharing Your Information

Your personal data may be disclosed to third parties under the following circumstances:

• To service providers engaged to support or operate our educational and administrative services, strictly for the fulfillment of their contractual obligations;
• When required by applicable law, judicial or administrative authority, or when necessary to protect the rights, property, or safety of Maple Bear, its students, or third parties.
  
  

Entities with Access to Personal Data

Access to your personal data, including that of the parent(s) or legal guardian(s) and their dependent(s), may be granted to the following entities, in accordance with their roles and responsibilities:

1. School Management (Local Unit) – School administrators will have full access to family data (parents and children) in order to manage user accounts. This includes the ability to activate accounts, reset passwords, update account information, and deactivate accounts when necessary.
2. Lex Platform from Conexia Educação S.A- Lex is the technology platform used by MBGS for managing accounts and storing personal data. The platform and its authorized personnel will have access to all data mentioned above, solely for technical and operational purposes.

1. Third-party Educational Apps Integrated into Lex – Within the Lex platform, there are applications provided by third parties, such as Scholastic Canada and Britannica, which offers educational books and resources. These providers will have access to the data necessary to enable the use of their services. In this case, providers will access license-related data and associated personal information necessary for account setup and service delivery.
   
   

All entities and providers with access to personal data are contractually bound to process such information in accordance with applicable data protection laws, ensuring its confidentiality, integrity, and security.

If your data is transferred outside Canada, we will ensure that appropriate safeguards are in place to protect it.

7. How we protect your personal information

In any organization, failure to protect personal information can increase the risk of a privacy breach. These privacy breaches can lead to things such as reputational harm, fraud or identity theft.

We will protect personal information from loss or theft, unauthorized access, use or disclosure, modification or destruction through appropriate administrative, technical and physical security measures and safeguards. However, no method of transmission over the Internet is 100% secure.

We follow the relevant privacy and security policies and other guidance on information technology security, as applicable to the educational sector.

Additional information about our methods of protection:

• Staff training on privacy practices and the safeguarding of personal information, with a focus on the sensitive data of students, faculty, and staff;
• Granting access to information on a “need-to-know” basis to ensure the confidentiality and integrity of educational records;
• Screening and security checks of employees, contractors, and prospective employees based on the sensitivity of the personal and academic information they will handle;
• Technical measures such as secure logins, audit trails, encryption, firewalls, and other technical security safeguards to protect student and institutional data;
• Physical security measures such as locked filing cabinets, restricted access to administrative areas, and controlled entry to offices where personal information is stored.
  
  

We will also use contractual or other appropriate means to ensure that third parties who handle personal information on our behalf implement a similar level of protection in compliance with relevant laws and policies.

8. Retention and destruction of personal information

We are responsible for ensuring that all personal information is managed within a set life cycle. According to Privacy Regulations, personal information can be retained for as long as is necessary for the purposes set out in this Privacy Policy. We will also retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Maple Bear will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or we are legally obligated to retain this data for longer time periods.

9. Your Rights

Under PIPEDA, and global privacy legislations, such as GDPR and LGPD, you have the right to:

• Access the personal information we hold about you.
• Request corrections to your personal information if it is inaccurate or incomplete.
• Request the deletion of your personal information, subject to certain exceptions.
  
  

To exercise any of these rights (to the extent they are available), please contact our Privacy Officer at dataofficer@maplebear.ca.

10. Complaints

If you have any concerns about how we are handling your personal information, please contact our Privacy Officer at dataofficer@maplebear.ca. If we are unable to resolve your concerns, you have the right to file a complaint with the Privacy Commissioner of Canada.

11. Anti-Spam Compliance (CASL)

We comply with Canada’s Anti-Spam Legislation (CASL). We obtain your express consent before sending you any commercial electronic messages, when applicable, including promotional emails, and provide you with the ability to easily withdraw that consent at any time.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.