Privacy Policy

1. Scope and contact

This draft describes the corporate website operated by Overpass Consultancy Limited. For privacy questions or requests, email [email protected]. Portfolio websites have separate privacy notices; their accounts, learning activity, assessments, and payments are not described as data collection by this corporate site.

2. Inquiry information

The form asks for full name, email address, optional organization, inquiry type, and a message. If you email support directly, the business receives your email address, message, and any information you choose to include. These details are used to understand, route, and respond to inquiries, handle complaints or rights requests, and address service issues.

Do not submit sensitive student or health information, full payment details, passwords, confidential examination material, or information about another person without authority. Ordinary inquiry submission is not a marketing opt-in. No marketing subscription checkbox, mailing-list integration, or automated marketing consent is implemented on this site.

3. What happens when the form is submitted

The browser sends the entered information to the website’s server for validation. The server checks the fields, a hidden spam field, request origin when supplied and payload size. Failed validation is reported without accepting an inquiry. The form is not an offline inbox and does not intentionally save a local draft.

Delivery is currently unconfigured in the supplied implementation. Valid submissions therefore receive an unavailable message and are not forwarded as accepted inquiries. If a receiving service is configured, it will receive the validated inquiry fields. That provider and its handling must be reviewed and disclosed before enabling delivery. The application does not intentionally save inquiries in its own database.

4. Technical requests, security checks, and fonts

Hosting and delivery infrastructure may receive IP addresses, request times, requested pages, browser or device headers, and operational logs to serve and secure the website. The cPanel form handler checks field values, request origin when supplied, payload size, and a hidden spam field. Hosting-level logs and security controls are separate from this handler.

This production website is served through cPanel-managed hosting with Cloudflare in the request path. Fonts are requested from Google Fonts, which receives technical information associated with those requests, such as IP address and browser headers. The source includes no nonessential analytics, advertising cookies, session recording, or AI processing integration. Hosting access controls may use their own sign-in and security mechanisms, subject to the host’s notices.

5. Information this corporate website does not collect through features

There is no implemented customer account, checkout, payment-card collection, learning dashboard, assessment-result store, or tutoring-session recording feature here. Inquiries about tutoring may contain learning needs you choose to describe, but the corporate form does not create session records or assessment histories.

Any actual account data, session records, learning activity, test results, or payments processed on a portfolio platform must be covered by that platform’s notices and business practices. This draft does not presume how those separate systems operate.

6. Service providers and sharing

Information needed to serve and protect the site is processed through hosting infrastructure. Google Fonts handles font requests. Direct support emails are handled by the business and its email provider. A configured inquiry receiver would handle form delivery. Provider identities and contractual arrangements beyond the verified site implementation still require owner confirmation.

Information may need to be shared where required by applicable law or to address an actual security incident or legal claim, subject to applicable rights. The code has no advertising sale or data-broker integration. This is not a blanket claim about all company or platform practices, which have not been verified through this website audit.

7. International processing and retention

Website, font, and email providers may process information outside a visitor’s country. Specific processing locations and any required transfer arrangements must be confirmed with the selected providers; no particular transfer safeguard or legal framework is asserted in this draft.

No company-wide inquiry or email retention period has been confirmed. The owner must document retention by purpose, deletion or anonymization arrangements, relevant legal obligations, and provider practices before finalizing this notice. The cPanel inquiry handler does not intentionally store submitted messages. Email and hosting log retention require separate confirmation.

8. Security

The implementation uses server-side field checks, payload limits, same-origin checks when an Origin header is present, a hidden spam field, and controlled server configuration for inquiry forwarding. These are limited safeguards, not a guarantee against unauthorized access or misuse. The website cannot promise absolute security. Provider and mailbox access controls require separate business review.

9. Privacy choices and requests

Depending on the law that applies to you, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where consent is the basis for processing, and to raise a concern with an appropriate authority. Applicability and any exceptions depend on the processing and relevant law; this draft does not assert a single jurisdiction.

Email [email protected] with the nature of your request and the website or platform involved. Only provide information needed to locate the relevant record. Further verification may be needed before disclosing or changing personal information; do not send identity documents unless a necessary and suitable verification method has been agreed. No unverified statutory response period is promised here.

10. Audience and minors

The corporate site is intended for people seeking information about education services and potential collaborations. It does not provide a child account or child enrollment flow. An age threshold and any guardian process for actual learner services must be set according to the services and applicable requirements before such features are introduced.

Do not send a child’s sensitive information through the form. If you believe information about a minor has been submitted inappropriately, contact [email protected] so the concern can be reviewed. This draft does not claim that the business never receives information about minors.

11. Updates and items under review

Version 0.2, prepared 5 January 2026, is a review draft. The owner must confirm email and other provider identities, actual company practices, applicable processing grounds, international arrangements, retention, and the final effective date. Enabling form delivery, analytics, accounts, payments, or session features requires reviewing this notice first. Material changes should be dated and recorded in the version history.

Version history

• 0.2 — 5 January 2026: Expanded policy review draft, verified support email, clearer service boundaries, educational limitations, rights protections, and documented review items. Not yet effective.
• 0.1 — 5 January 2026: Initial website privacy and terms drafts. Refund and intellectual property pages were not yet included.