Privacy Policy
Last updated: November 2, 2025
At eduediligence we respect your privacy. This page explains what data we collect, how we use it, and your choices. We publish guidance on education grants and Pell Grants; we do not sell your personal information.
Information we collect
Information you provide: When you use our contact or subscribe forms (powered by WPForms), we collect the name, email and message you submit. Forms are delivered via email and stored as entries in WordPress. We use this only to respond and to send the updates you requested. You can unsubscribe via the link in any email.
Automatically collected: When you visit eduediligence.local, our server logs (nginx) record your IP address, browser type, requested URL, referrer and timestamp for security and debugging. We also use cookies for essential functions: keeping you logged in (if you have an account), remembering preferences, and measuring visits. WordPress sets cookies such as wordpress_logged_in and wp-settings. Our cache plugin WP-Optimize may set a cookie to serve cached pages.
Analytics: We use All in One SEO’s and server analytics to understand which guides are read and which search queries bring visitors. This is aggregated and does not identify you personally. If we enable a third-party analytics service in the future, we will update this policy and, where required, ask for consent.
Cookies and similar technologies
We use cookies for: (1) essential site functions, (2) preferences, and (3) analytics. You can block or delete cookies in your browser settings, but some parts of the site may not work correctly. For EU/EEA visitors, we present a consent banner where required. Image optimization via reSmush.it and instant image search via Instant Images do not set tracking cookies, but Unsplash image previews, if loaded, are subject to Unsplash’s privacy policy.
How we use your information
- To respond to your messages and to send subscribed updates (grant deadlines, new guides).
- To secure the site, prevent spam and, if AIO Security is active in the future, to log failed logins and temporary blocks (IP, timestamp, user agent) for protection.
- To improve content: aggregated page views, search terms and form conversion rates.
- To comply with law and to enforce our Terms.
Sharing
We do not sell personal data. We share only as needed to run the site: with our hosting provider, with email delivery for form notifications, and with service providers that help operate WordPress (for example, backup via All in One WP Migration if you request a site export). We will disclose if required by law or to protect rights. If we run ads or affiliate links, ad networks may set cookies to measure views; we will name them here if added.
Data retention
Form entries are kept for 12 months and then deleted, unless you ask us to delete sooner. Server logs are rotated within 30 days. Backups created with All in One WP Migration are stored locally in wp-content/ai1wm-backups and, if you download one, on your device.
Your rights
Depending on your location, you may have rights to access, correct, delete or port your data, and to object or restrict processing. To exercise them, use the contact form. We will respond within 30 days. You can also unsubscribe from emails via the link in each message. For EU/EEA and UK visitors, our legal basis is consent (for newsletters and non-essential cookies) and legitimate interest (for security and aggregated analytics).
California residents: we do not sell or share personal information as defined by the CCPA/CPRA. You may request disclosure of categories collected and deletion as described above.
Children
Our content is for students and families, but the site is not directed to children under 13 and we do not knowingly collect data from them. If you believe a child has provided data, contact us to delete it.
International transfers
If you access the site from outside the United States, your information may be processed in the U.S. where our server and WordPress are hosted. We apply appropriate safeguards for such transfers where required.
Security
We use HTTPS, keep WordPress, themes and plugins updated, and, when active, AIO Security to limit login attempts and monitor files. No system is 100% secure. If we learn of a breach affecting your data, we will notify you as required by law.
Changes
We may update this policy to reflect new plugins, analytics or legal requirements. We will post the new date at the top and, for material changes, add a notice on the home page for 30 days.
Contact
Questions about privacy? Use the contact form. For data requests, include the email you used. Our mailing address will be provided on request.