Privacy Policy

Website: https://ms-kids.org/

Last Updated: April 2026

IMPORTANT NOTICE ON CHILD PROTECTION: MSKIDS offers educational services primarily directed at children and youth. Protecting the privacy of minors is our highest priority. This Policy contains specific and reinforced provisions for the processing of minors’ data. We urge all parents and legal guardians to read this section carefully before allowing those in their care to use our Services.

 

1. Data Controller

MSKIDS is the organization responsible for the processing of personal data collected through the Site https://ms-kids.org/ and its associated platforms. MSKIDS operates internationally, with a presence in countries including, but not limited to, the United States of America, Mexico, Spain, Greece, and China, and may expand its presence to any other territory in accordance with its mission.

To exercise your rights or resolve doubts regarding this Policy, users may contact MSKIDS through the means indicated on the Site.

 

2. Applicable Regulatory Framework

MSKIDS is committed to complying with international personal data protection standards through a multi-level compliance approach that includes, but is not limited to, the following regulations:

  • GDPR: Regulation (EU) 2016/679, applies to users in the European Economic Area.

  • CCPA/CPRA: California Consumer Privacy Act and its amendment, applying to users in California, USA.

  • COPPA: Children’s Online Privacy Protection Act, governing the processing of data for children under 13 in the U.S. context.

  • LFPDPPP: Federal Law on Protection of Personal Data Held by Private Parties in Mexico.

  • LOPD-GDD: Organic Law on Data Protection and Guarantee of Digital Rights in Spain.

  • PIPL: Personal Information Protection Law in China.

MSKIDS commits to applying the strictest protection standard available when the rights of the data subject may be affected, regardless of their jurisdiction of residence.

 

3. Categories of Personal Data Collected

MSKIDS applies the principle of data minimization, collecting only the data strictly necessary for its educational purposes.

  • Student Data (Minors): Name and surname (or first name only, per parent/guardian preference), age or age range, grade level, math difficulty areas, schedule availability, and the contact information of the parent/guardian (not the minor). We never collect official ID numbers, full home addresses, photos of the minor, or health data.

  • Volunteer Tutor Data: Full name, email address, country/region of residence, educational level, math specialties, availability, and references or certifications where applicable.

  • Donor Data (Coming Soon): Name or business name, email, country of residence, and payment data processed directly by third-party providers (MSKIDS does not store full financial data).

  • Browsing Data: Anonymized or pseudonymized IP addresses, browser type, operating system, pages visited, and cookie data.

 

4. Purposes of Processing

Data is processed for specific and legitimate purposes:

  1. Coordinating and providing math tutoring services.

  2. Managing the registration and assignment of volunteer tutors.

  3. Communicating relevant information regarding sessions and activities.

  4. Processing donations and complying with legal obligations.

  5. Protecting the safety of participating minors.

 

5. Special Protection of Minors’ Data

This section prevails over any other provision of this Policy regarding minors:

  • Parental Consent Verification: MSKIDS does not collect data from minors without prior, express, and informed consent from a parent or legal guardian. For children under 13 (or the applicable legal age), parental consent is mandatory and inescapable.

  • Prohibition of Commercial Profiling: Minors’ data will never be used for commercial profiling, behavioral advertising, market analysis, or shared with third parties for profit.

  • Parental Rights: Parents/guardians have the right to access, rectify, or delete their child’s data and revoke consent at any time.

  • Unauthorized Access Detection: If MSKIDS detects that a minor has provided data without required consent, it will be deleted immediately.

 

6. Use of Google Forms and International Data Transfer

MSKIDS uses Google Forms for volunteer registration and class coordination. This involves the transfer and storage of data on Google LLC servers in the United States. Google acts as a data processor. This transfer is protected by Standard Contractual Clauses approved by the European Commission and the EU-U.S. Data Privacy Framework.

 

7. Technological Infrastructure

The Site operates using the following providers, all subject to Data Processing Agreements:

  • GoDaddy: Web hosting.

  • WordPress (Automattic): Content management system.

  • Google LLC: Forms and statistical analysis.

 

8. Rights of Data Subjects

Depending on your jurisdiction, you (or your guardian) may exercise the following rights:

  • Access, Rectification, and Deletion (Right to be Forgotten).

  • Opposition and Limitation of Processing.

  • Data Portability.

  • Revocation of Consent.

  • Non-discrimination (CCPA/CPRA).

  • Right to Lodge a Complaint with authorities such as the AEPD (Spain), INAI (Mexico), or the FTC (USA).

To exercise these rights, contact MSKIDS via the Site. Responses are typically provided within 30 business days.

 

9. Guiding Principles

Our data management is based on: Lawfulness, Fairness, and Transparency; Purpose Limitation; Data Minimization; Accuracy; Storage Limitation; Integrity and Confidentiality; and Accountability.

 

10. Security Measures

MSKIDS implements technical and organizational measures, including:

  • HTTPS/TLS encryption.

  • Restricted access controls.

  • Internal procedures for security incidents.

  • Data breach notification within 72 hours (per GDPR) or without undue delay.

 

11. Data Retention

  • Student Data: For the duration of the tutoring relationship plus up to two years.

  • Tutor Data: For the duration of the collaboration plus up to three years for reference and security purposes.

  • Donor Data: Between five and seven years, per tax and accounting laws.

 

12. International Data Transfers

Due to our international nature, data may be processed in countries other than your residence. MSKIDS ensures adequate safeguards (Standard Contractual Clauses, Adequacy Decisions, etc.) are in place for all such transfers.

 

13. Modifications

MSKIDS may update this Policy at any time. The current version will always be posted on the Site with the corresponding update date.

 

14. Contact

For any queries or to exercise your rights, please contact MSKIDS at:

https://ms-kids.org/