Section 01
Overview & Scope
PrepDelco ("PrepDelco," "we," "us," or "our") values the privacy of every individual who interacts with our platform. This Privacy Policy explains what personal information we collect, why we collect it, how it is used and protected, and the rights you have regarding your data.
This Policy applies to:
- The PrepDelco website and all associated web properties
- Our mobile applications (if applicable)
- All test preparation content, practice tools, and tutoring services we offer
- Any communications between you and PrepDelco
By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our services.
Section 02
Who We Are
PrepDelco is an educational test preparation program operated as part of ACG Health, a nonprofit community health organization headquartered in Delaware County, Pennsylvania. ACG Health's mission centers on improving community wellbeing through accessible health, education, and career development services.
PrepDelco serves students preparing for standardized tests including (but not limited to) SAT, ACT, GED, ASVAB, and professional licensure examinations. Our programs are designed to make quality test preparation accessible to all members of our community.
Section 03
Information We Collect
We collect information in the following ways:
Information You Provide Directly
- Account registration: Name, email address, date of birth, username, and password
- Profile information: Grade level, target exam, school or institution affiliation
- Payment details: Billing name, address, and payment card information (processed securely via third-party payment processors — we do not store full card numbers)
- Communications: Messages sent to our support team, forum posts, and feedback submissions
- Survey responses: Optional feedback and satisfaction surveys
Information Collected Automatically
- Usage data: Pages visited, features accessed, time spent on the platform, quiz scores, and practice session history
- Device & technical data: IP address, browser type and version, operating system, device identifiers, and referring URLs
- Cookies and similar technologies: Session cookies, persistent cookies, and web beacons (see Section 6)
- Log data: Server logs automatically recording access requests and errors
Information from Third Parties
- ACG Health systems: If you are enrolled in ACG Health programs, we may receive basic enrollment and contact information from ACG Health to coordinate services
- Social login: If you use Google or other OAuth sign-in options, we receive your name and email address from that provider
- Partner organizations: Schools or community organizations that refer students may share basic contact details with us
Section 04
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account and platform access | Contract performance |
| Delivering test prep content, practice tests, and personalized study plans | Contract performance |
| Processing payments and managing subscriptions | Contract performance |
| Providing customer and technical support | Legitimate interest |
| Sending transactional emails (receipts, password resets, alerts) | Contract / Legitimate interest |
| Sending promotional communications (with your consent) | Consent |
| Analyzing usage patterns to improve our platform | Legitimate interest |
| Detecting fraud, abuse, and security threats | Legitimate interest / Legal obligation |
| Complying with legal obligations | Legal obligation |
| Sharing anonymized, aggregated research data with ACG Health | Legitimate interest |
We will not use your personal information for purposes materially different from those described above without providing notice and, where required, obtaining your consent.
Section 07
Children's Privacy (COPPA)
PrepDelco's services may be used by students under the age of 13. We comply fully with the Children's Online Privacy Protection Act (COPPA) and take additional precautions for younger users.
For users under 13 years of age:
- Account registration requires verifiable parental or guardian consent
- We collect only the minimum information necessary to provide our educational services
- We do not display behavioral advertising to users under 13
- We do not share children's personal information with third parties for marketing purposes
- Parents and guardians may review, modify, or request deletion of their child's information at any time by contacting us
Section 08
Student Records (FERPA)
Where PrepDelco operates in partnership with schools or educational institutions, we may serve as a "school official" under the Family Educational Rights and Privacy Act (FERPA). In this capacity:
- We access educational records only to the extent necessary to provide contracted services
- We do not disclose education records to unauthorized parties without appropriate consent or a valid FERPA exception
- We maintain appropriate safeguards for student education records
- We support the rights of eligible students (and parents of minor students) to inspect, review, and request corrections to education records
Students and parents wishing to exercise FERPA rights regarding records held by PrepDelco should contact us using the information in Section 15.
Section 09
Data Security
We implement a range of administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- TLS/SSL encryption for all data transmitted between your browser and our servers
- Encrypted storage of sensitive data including passwords (hashed and salted) and payment information
- Role-based access controls limiting employee access to personal data on a need-to-know basis
- Regular security assessments and vulnerability scanning
- Incident response procedures for data breach notification
No method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
Section 10
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
- Active accounts: Data is retained for the duration of your account
- Inactive accounts: We may delete or anonymize accounts inactive for more than 3 years
- Financial records: Retained for 7 years as required by applicable tax and accounting laws
- Support communications: Retained for up to 3 years
- Anonymized analytics data: May be retained indefinitely
You may request deletion of your account and personal data at any time (see Section 11). Note that certain data may be retained after deletion where required by law or legitimate business necessity.
Section 11
Your Rights & Choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete information.
Deletion
Request deletion of your personal data ("right to be forgotten").
Portability
Receive your data in a structured, machine-readable format.
Opt-Out
Unsubscribe from marketing emails at any time via the link in any email.
Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please submit a written request to privacy@prepdelco.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.
Section 12
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we've collected about you in the past 12 months
- Right to Delete: Request deletion of personal information, subject to certain exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising
- Right to Limit Use of Sensitive Information: We do not use sensitive personal information beyond what is necessary to provide our services
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, contact us at privacy@prepdelco.com or call our support line. We will respond within 45 days (with one possible 45-day extension).
Section 13
Third-Party Links & Services
Our platform may contain links to external websites, including ACG Health's website, partner organizations, and educational resources. These third-party sites have their own privacy policies, and we are not responsible for their content or practices.
We encourage you to review the privacy policy of any third-party site you visit. The inclusion of a link on our platform does not imply our endorsement of that site's privacy practices.
Section 14
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Effective Date" at the top of this page
- Send a notification email to registered users
- Display a notice on the PrepDelco platform for a reasonable period
We encourage you to review this Policy periodically. Your continued use of the platform following notice of changes constitutes acceptance of the updated Policy.
Section 15
Contact & Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Organization
- PrepDelco / ACG Health
- Privacy Email
- privacy@prepdelco.com
- General Contact
- info@prepdelco.com
- Mailing Address
- Delaware County, Pennsylvania
- Parent Organization
- ACG Health
- Response Time
- Within 30 business days
