Privacy and Cookies Policy

Effective Date: 13 January 2026

Uni-Geeks.us (“we,” “us,” “our,” or “the Platform”) is committed to protecting your privacy. This Privacy and Cookie Policy explains how we collect, use, and safeguard your information in accordance with US federal and state privacy laws, including the California Consumer Privacy Act (CCPA), the Children’s Online Privacy Protection Act (COPPA), and Federal Trade Commission (FTC) regulations.

1. Information We Collect

We collect the following types of personal data when you use our services:

1.1 Information You Provide

Full name
Email address
Contact details (e.g., phone number, messaging handle if shared)
Payment information (processed securely by third-party providers)
Uploaded files or documents relevant to the services
Communication with our support team

1.2 Information Collected Automatically

IP address and browser type
Device identifiers and usage logs
Pages visited, time spent, and interaction data
Referral sources (e.g., search engines, ads)

2. How We Use Your Information

We use personal data to:

Provide and manage our academic support services
Communicate with you regarding your order or support request
Process payments securely through third-party processors
Improve the quality and functionality of our Platform
Prevent fraud and enforce our Terms of Use
Send promotional emails (only if you opt-in)

We do not use your data for automated decision-making or profiling.

3. Legal Bases for Processing

We process personal data of the United States users in accordance with federal and state laws, including the California Consumer Privacy Act (CCPA), the Children’s Online Privacy Protection Act (COPPA), and Federal Trade Commission (FTC) regulations for the following legitimate purposes:

Contractual necessity – to fulfill our service to you
Consent – for optional communications like newsletters
Legal obligation – for tax, fraud prevention, and regulatory compliance
Legitimate interest – to improve service performance and user experience

4. Data Sharing and Third Parties

We only share personal data with trusted third-party providers when necessary, including:

Payment processors (e.g., Stripe, PayPal)
Email communication services (e.g., Google Workspace, Mailchimp)
Analytics tools (e.g., Google Analytics)
Freelance experts (limited access for task fulfillment, under NDA)

We never sell or rent your personal information.

5. International Data Transfers

For any data handled outside the United States, we implement appropriate safeguards such as:

U.S. Department of Commerce adequacy determinations
Standard contractual clauses approved by the U.S. regulatory authorities
Binding corporate rules for intra-group data transfers

6. Data Retention

We retain your data for as long as necessary to:

Fulfill your service request
Comply with our legal obligations
Resolve disputes and enforce our agreements

Inactive user data is typically deleted after 5 years unless otherwise required.

7. Rights of the U.S. Residents

Based on your state of residence, you may be entitled to specific rights as described below. If you believe these rights have been violated, you can file a complaint with your state’s Attorney General.

7.1. California Privacy Rights (CCPA / CPRA)

Residents of California are granted additional privacy protections under the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA).

7.1.1. Your Rights Under California Law

The CCPA/CPRA provides California residents with the following rights:

Inquire about the types and specific details of personal information we gather, our sources, our purposes for collection, and the third parties with whom we share it.
Request the removal of personal data collected about you, with certain legal exemptions.
Seek restrictions on the usage and sharing of sensitive personal data (such as exact location or financial account details).
Choose not to have your personal information sold or shared. A link labeled “Do Not Sell or Share My Personal Information” is available in our website’s footer for this purpose.
Ask for the rectification of any inaccurate personal information we maintain about you.
Be safeguarded against discrimination for exercising your CCPA/CPRA rights.

To exercise any of these rights, please send an email to [email protected] with “California Privacy Request” in the subject line.

7.1.2. Data Minimization and Retention

To comply with CPRA regulations, we:

Gather solely essential personal data for specified objectives.
Store information only for the mandated time frame.
Employ documented guidelines for data removal when explicit retention periods are not defined.
Offer transparent notices regarding data collection and its purposes on all forms.

7.1.3. Opt-Out Link

We incorporate a “Do Not Sell or Share My Personal Information” link in our website’s footer, enabling California residents to decline data sale or sharing for cross-context behavioral advertising purposes.

7.1.4. Compliance and Penalties

CPRA non-compliance may result in enforcement actions by the California Privacy Protection Agency, with penalties up to $2,500 per violation or $7,500 for intentional violations.

7.2. Colorado Privacy Rights (CPA)

The Colorado Privacy Act (CPA) provides Colorado residents with particular rights concerning their personal information, beginning July 1, 2023.

7.2.1. Rights Provided by Colorado Legislation

The rights of Colorado residents encompass:

Declining participation in data transactions, personalized advertisements, and select profiling activities
Receiving notification about data gathering and its intended use
Seeking access to personal information that has been collected
Asking for amendments to incorrect data
Requesting the removal of gathered personal information
Obtaining data in a transferable format

To exercise these privileges, send an email to [email protected] with the subject line “Colorado Privacy Request.” We will provide a response within 45 days of receiving a confirmed request. You have the option to contest any denied requests.

7.2.2. Consent for Sensitive Data

We do not collect sensitive personal information as defined by the CPA. If this changes, we will obtain opt-in consent before collection, as required by law.

7.2.3. Data Minimization and Collection Transparency

Our Platform collects only essential personal data for effective operation. A comprehensive list of data categories and collection purposes is provided in Section 1 of this policy. We adhere to ethical business practices and ensure our data collection aligns with user expectations and operational requirements.

7.2.4. Universal Opt-Out Option

To comply with Colorado legislation, we have established a universal opt-out mechanism starting July 1, 2024. This feature allows users to decline the sale or use of their personal information for targeted advertising across our Platform.

7.2.5. Compliance and Penalties

Breaches of the Colorado Privacy Act may be classified as deceptive trade practices. The Colorado Attorney General may impose civil penalties up to $20,000 per violation, not exceeding $500,000 per case.

7.3. Connecticut Privacy Rights (CTDPA)

Under the Connecticut Data Privacy Act (CTDPA), effective July 1, 2023, individuals residing in Connecticut are afforded certain rights when interacting with organizations that control the processing of their personal information.

7.3.1. Rights Provided by Connecticut Legislation

Consumers in Connecticut are entitled to:

Ask for amendments to any personal data that is incorrect.
Demand the removal of personal information, including data obtained through third parties, with some exceptions as detailed in section 7.3.3 below.
Request to view their collected personal information.
Obtain a copy of their personal information in a readily transferable and usable format for relocation to another organization.
Choose not to participate in the trading of their personal information, personalized advertising, or automated decision-making processes that may have significant legal or similar implications

You may submit one free rights request every 12 months. Additional requests may incur a reasonable administrative fee. To submit a request, email [email protected] with “Connecticut Privacy Request” in the subject line. We will respond within 45 days, with a possible 45-day extension if needed, notifying you of any delay.

7.3.2. Data Collection, Minimization, and Notice

We follow data minimization principles, collecting only necessary personal information for specific purposes. Our Privacy Policy details the types of data collected, processing reasons, third-party sharing, and how to exercise CTDPA rights. This information is provided at collection points and in the full policy. We obtain explicit consent for processing sensitive data as required by CTDPA.

7.3.3. Exceptions to Data Deletion Requests

Deletion requests may be denied if they would interfere with service delivery, disrupt expected operations, affect product recalls or issue resolution, hinder security or fraud prevention, or violate legal obligations.

7.3.4. Universal Opt-Out Option

We are developing a universal opt-out system for Connecticut residents to decline data processing for sales, targeted ads, and profiling, accessible through our website.

7.3.5. Compliance and Penalties

CTDPA violations may result in civil penalties up to $5,000 per incident, enforced under Connecticut’s Unfair Trade Practices Act. The Attorney General may seek injunctive relief, restitution, or disgorgement.

7.4. Delaware Privacy Rights (DPDPA)

Delaware residents have specific rights under the Delaware Personal Data Privacy Act (DPDPA).

7.4.1. Rights Provided by Delaware Legislation

Rights of Delaware residents include:

Verifying data processing
Accessing personal data
Requesting corrections or deletions
Obtaining portable copies
Requesting third-party sharing information
Opting out of targeted advertising, data sales, and profiled automated decisions.

To exercise these rights, email [email protected]. We will respond within 45 days, with a possible 45-day extension. Denials can be appealed, with written responses provided within 60 days.

7.4.2. Sensitive Data and Consent

We refrain from processing sensitive personal data without your explicit consent. According to DPDPA, sensitive data encompasses:

Information disclosing racial or ethnic background, religious convictions, physical or mental health status (including pregnancy), sexual activities, sexual orientation, gender identity, national origin, citizenship, or immigration status
Exact geolocation information
Genetic or biometric data used for unique identification
Personal information of a known child under 13

Our systems are designed to prevent or anonymize sensitive data categories unless you have provided affirmative, documented consent.

7.4.3. Transparency, Disclosure, and Opt-Out

We maintain a clear and accessible Privacy Policy that specifies:

The data we collect
How it is utilized and with whom it is shared
Your rights under DPDPA
The methods available for opting out of the sale or targeted use of your personal data

A universal opt-out option is provided through our cookie banner and website footer links, in compliance with state-level requirements.

7.4.4. Compliance and Penalties

While the DPDPA does not establish a specific penalty schedule, violations fall under Delaware’s general enforcement authority as outlined in Subchapter II of Chapter 25 of Title 29. This authorizes the Delaware Department of Justice to investigate and prosecute offenses. Fines may amount to up to $10,000 per violation, depending on the nature and frequency of the breach.

7.5. Florida Residents – Digital Rights Notice

The Florida Digital Bill of Rights (FDBR), which took effect on July 1, 2024, provides Florida residents with particular digital privacy protections. Nevertheless, Uni-Geeks.us is not subject to the FDBR’s legal obligations as we fall short of the specified thresholds for affected organizations.

7.5.1. Extent of Exemption

The FDBR is applicable exclusively to enterprises classified as controllers with yearly worldwide earnings surpassing $1 billion and which also:

Generate 50% or more of their income from online advertising;
Run consumer-oriented smart speakers or cloud-connected voice assistant services; or
Oversee an application marketplace or digital distribution channel offering in excess of 250,000 consumer apps.

Uni-Geeks.us does not satisfy any of these conditions, and consequently is not obligated to adhere to FDBR regulations.

7.5.2. Commitment to Privacy for Florida Residents

Although we are not legally required to comply with the FDBR, we choose to uphold stringent data privacy and transparency practices, such as:

Enabling users to view, edit, remove, or transfer their personal data
Refraining from selling personal information or utilizing it in automated processes that could have legal or comparably important effects
Offering transparent privacy statements regarding data collection, use, and individual rights
Providing the ability to opt out of tracking technologies and marketing messages

Florida residents wishing to exercise their rights under our broader privacy framework may contact us at [email protected].

7.6. Indiana Privacy Rights (INCDPA)

Starting January 1, 2026, the Indiana Consumer Data Protection Act (INCDPA) will grant specific rights to Indiana residents regarding their personal information. Uni-Geeks.us complies with these regulations where applicable and has established internal procedures in accordance with the law.

7.6.1. Rights Provided by Connecticut Legislation

Indiana residents have the right to:

Confirm the processing of their personal data.
Access this information, correct inaccuracies.
Delete their data.
Opt out of data processing for targeted advertising, data transfers, and profiling with significant consequences.

To exercise these rights, individuals can contact [email protected]. Responses will be provided within 45 days, with a possible 45-day extension for complex requests.

7.6.2. Data Protection Impact Assessments

As required by the INCDPA, we conduct and document Data Protection Impact Assessments for targeted advertising, personal data sales, potentially harmful profiling, sensitive data processing, and other high-risk activities.

7.6.3. Compliance and Penalties

The Indiana Attorney General enforces the INCDPA. Violations may result in a 30-day correction period, followed by potential civil penalties up to $7,500 per violation and injunctive measures if non-compliance persists.

7.7. Iowa Privacy Rights (ICDPA)

Starting January 1, 2025, the Iowa Consumer Data Protection Act (ICDPA) provides Iowa residents with specific personal data rights. Uni-Geeks.us implements appropriate measures to comply with these requirements where applicable.

7.7.1. Rights Provided by Iowa Legislation

Iowa residents can opt out of personal data processing for sales and targeted advertising. However, the ICDPA does not allow opting out of profiling. Consumers must be notified and given the opportunity to opt out before any sensitive personal data processing occurs.

7.7.2. Our Actions

We have implemented a privacy notice and opt-out system detailing our data collection, processing, and sharing practices. Users can correct their personal information by contacting [email protected]. Sensitive data processing will not occur without prior notice and an opt-out option.

7.7.3. Compliance and Penalties

The Iowa Attorney General oversees ICDPA enforcement. Violations trigger a 90-day cure period. Failure to rectify may result in civil penalties up to $7,500 per violation, regardless of intent.

7.8. Montana Privacy Rights (MCDPA)

Starting October 1, 2024, the Montana Consumer Data Privacy Act (MCDPA) grants specific rights to Montana residents concerning the handling of their personal information. Uni-Geeks.us is dedicated to adhering to these rights where applicable.

7.8.1. Rights Provided by Montana Legislation

Individuals residing in Montana have the following rights:

Confirm our processing of their personal information and obtain access to such data.
Request deletion of their collected personal information.
Obtain a portable copy of their personal data for transfer to another data controller.
Correct any personal data that is inaccurate.
Object to the processing of their data for targeted advertising, selling of personal information, and automated decision-making with legal or similarly significant consequences

7.8.2. Response Timeframes and Appeals

We will address verified consumer requests within 45 days, which may be extended by an additional 45 days if reasonably required due to complexity or volume. Consumers have the right to contest any refusal to act on their requests. We will respond to appeals within 60 days.

Should an appeal be rejected, we will provide consumers with a method to file a complaint with the Montana Attorney General.

7.8.3. Compliance and Penalties

The MCDPA does not outline specific civil penalty amounts but permits enforcement actions by the Attorney General.

7.9. New Hampshire Privacy Rights (NHPA)

Beginning on January 1, 2025, New Hampshire residents gain specific rights regarding their personal information under the New Hampshire Privacy Act (NHPA). Uni-Geeks.us adheres to these rights when applicable.

7.9.1. Rights Provided by Connecticut Legislation

The NHPA grants consumers in New Hampshire the following entitlements:

Confirmation and access to their personal data being processed by the company, unless it would reveal trade secrets;
Correction of any inaccuracies in their personal information
Deletion of their personal data upon request
Obtainment of a portable copy of their personal data
Ability to opt out of targeted advertising, personal data sales, or profiling

The NHPA also supports the use of universal opt-out mechanisms.

7.9.2. Response Timeframes and Consent

We address verified consumer requests within 45 days, with a possible reasonable extension for complex requests, provided we inform the consumer within the initial 45-day period. We offer a user-friendly method for consumers to withdraw consent, comparable in simplicity to giving consent.

Our website features a clear and prominent link for consumers to opt out.

7.9.3. Data Protection Impact Assessment (DPIA)

We perform DPIAs for processing activities starting on or after July 1, 2024, that pose elevated risks, including targeted advertising, sensitive data processing, personal data sales, or profiling that may lead to unfair or deceptive treatment or significant consumer harm. The New Hampshire Attorney General is authorized to examine these assessments.

DPIAs conducted for similar laws in other states may be used to fulfill this requirement.

7.9.4. Compliance and Penalties

NHPA violations are considered breaches of New Hampshire’s broader consumer protection law and may result in civil penalties up to $10,000 per violation.

7.10. New Jersey Privacy Rights (NJDPA)

As of January 15, 2025, the New Jersey Data Privacy Act (NJDPA) grants specific privacy protections to New Jersey residents concerning their personal information. Uni-Geeks.us complies with these regulations where applicable.

7.10.1. Rights Provided by New Jersey Legislation

New Jersey residents are entitled to:

Receive a copy of their personal data in an easily usable format.
Request amendments to any incorrect personal data.
Ask for details about how we process their personal data.
Ask for their personal data to be erased.
Opt out of processing for targeted advertising, sales of personal data, or profiling that leads to legal or similarly significant effects.

7.10.2. Our Actions

We have revised our Privacy Policy to incorporate these newly established rights. Our system provides a convenient way for users to edit their personal information. We have implemented a straightforward and readily available process for opting out of relevant data processing activities.

7.10.3. Compliance and Penalties

Regarding compliance and penalties, first-time infractions may result in fines of up to $10,000, while repeat offenses could lead to fines as high as $20,000. The Act grants a 30-day window to rectify violations until July 15, 2026. It’s important to note that this legislation does not permit individuals to file private lawsuits.

7.11. Tennessee Privacy Rights (TIPA)

Beginning July 1, 2025, the Tennessee Information Protection Act (TIPA) grants specific privacy protections to Tennessee residents regarding their personal information. Uni-Geeks.us adheres to these regulations as applicable.

7.11.1. Rights Provided by Tennessee Legislation

Tennessee consumers are entitled to specific rights regarding their personal data:

Request deletion of personal information they’ve provided or that’s been collected about them, with the exception of aggregated or de-identified data.
Receive a copy of their personal information in a portable and easily usable format.
Decline processing for personal information sales, targeted advertising, or profiling purposes.
Verify if their personal information is being processed and access that information.
Rectify any errors in their personal data, taking into account the processing’s purpose and nature.

7.11.2. Our Actions

In response to these rights, we have:

Revised our Privacy Policy to incorporate these rights.
Implemented a functional system allowing consumers to correct their data.
Committed to responding to requests within 45 days, with the possibility of a 45-day extension for complex requests, informing consumers of any such extension.

7.11.3 Compliance and Penalties

Violations may result in fines of up to $7,500 per incident.

7.12. Texas Privacy Rights (TDPSA)

Since July 1, 2024, Texas residents have new rights regarding their personal data under the Texas Data Privacy and Security Act (TDPSA). Uni-Geeks.us complies with these regulations where applicable.

7.12.1. Rights Provided by Texas Legislation

The act grants Texans the following privileges:

The ability to confirm and access their personal information being processed
The right to correct any errors in their personal data
The option to request deletion of their provided or collected personal information
The ability to obtain a portable, easily usable copy of their personal data when available
The power to opt out of data processing for targeted advertising, sales of personal information, or profiling purposes.

7.12.2. Our Actions

We have updated Privacy Policy to incorporate these rights and implemented functional systems for data correction.

Requests are addressed within 45 days, with potential 45-day extension for complex situations, accompanied by consumer notification.

7.12.3. Compliance and Penalties

Infringements may lead to fines up to $7,500 per incident.

7.13. Utah Consumer Privacy Protections (UCPA)

Beginning January 1, 2024, the Utah Consumer Privacy Act (UCPA) provides Utah residents with specific rights concerning their personal information. Uni-Geeks.us recognizes and adheres to these rights where applicable.

7.13.1. Rights Provided by Utah Legislation

Utah consumers are entitled to:

Verify if their personal information is being processed and access that information.
Erase personal data they have submitted to the controller. It’s important to note that this deletion right is limited to data provided by the consumer, not all data held by the controller.
Receive a copy of their previously submitted personal data in a portable, easily usable format that can be transferred to another controller without hindrance, where technically possible.
Decline processing for targeted advertising or the sale of personal data.

7.13.2. Our Actions

Privacy notices must include:

Types of personal data processed
Processing purposes
Instructions for consumers to exercise their rights
Categories of data shared with third parties
Clear explanation of opt-out procedures if data is sold or used for targeted advertising

We must respond to requests within 45 days, with a potential 45-day extension for complex or numerous requests, notifying the consumer of such extension.

7.13.3. Compliance and Penalties

Penalties of up to $7,500 per violation may be imposed if violations are not rectified after written notice or if violations persist.

7.14. Virginia Privacy Rights (VCDPA)

Beginning on January 1, 2023, Virginia residents are granted specific privacy protections under the Virginia Consumer Data Protection Act (VCDPA) regarding their personal information. Uni-Geeks.us adheres to these regulations where applicable.

7.14.1. Rights Provided by Virginia Legislation

Residents of Virginia are entitled to:

Verify and retrieve their processed personal data.
Seek corrections for inaccurate personal information.
Request the removal of personal data they supplied or that was gathered about them.
Acquire a readily transferable and usable copy of their personal information for transfer to another controller
Decline processing for targeted advertising, data sales, or profiling that may have significant effects
Challenge a controller’s denial of their request within a reasonable timeframe.

7.14.2. Our Actions

Uni-Geeks.us’s actions include:

Detailing in the privacy policy the types of personal data processed, processing purposes, how consumers can exercise their rights and appeal decisions, categories of shared data, and types of third-party recipients
Responding to consumer requests within 45 days, with a possible 45-day extension when necessary, notifying the consumer

7.14.3. Compliance and Penalties

Potential penalties for violations may result in fines of up to $7,500 per incident.

To exercise any of these rights, please email [email protected].

8. Cookies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us:

Recognize returning users
Improve website performance
Track usage statistics via tools like Google Analytics

8.2 Types of Cookies We Use

Essential Cookies: Necessary for website functionality
Performance Cookies: Help us understand how users navigate our site
Functional Cookies: Remember your preferences
Marketing Cookies: Show relevant ads (only if you consent)

8.3 Cookie Consent

On your first visit, we will request your consent to use non-essential cookies. You can manage or revoke cookie consent through:

Our cookie banner
Your browser settings

9. Data Security

We apply industry-standard security practices, including:

SSL encryption
Two-factor authentication for admin accounts
Limited access to personal data on a need-to-know basis
Regular data access audits

10. Contact Us

If you have questions about this policy or how we use your data, please contact us at:

Email: [email protected]