Leaders for Learning, LLC d/b/a ConnectEd Math Learning

Contact: connectedmath@leaders4learning.com • www.leaders4learning.com

Last updated: December 10, 2025

​

1) What we collect 

We collect only what we need to deliver tutoring, operate the program, and meet legal requirements:

• Parent/guardian: name, email, phone.

• Student: name, grade level, school (if applicable), learning goals, session notes, progress reports.

• Scheduling/billing: appointment history, plan type, invoices/payments (we do not store full card numbers).

• Technology metadata: IP address, device/browser, and site usage when you visit our site.

​

2) Why we collect it 

• Schedule sessions and run virtual classes.

• Create/update learning plans and progress reports.

• Communicate with families and school partners.

• Billing, recordkeeping, safety, and service improvements.

​

3) Children’s privacy (COPPA)

For learners under 13, we obtain verifiable parental consent before collecting personal information. Parents can review, delete, or refuse further collection at any time by emailing us.

Accepted consent methods: small refundable card charge; signed consent form (scan/e-sign); verified call-back; or school-provided consent when the district authorizes our service for educational purposes.

​

4) Service providers 

We use trusted providers for video, storage, scheduling, and payments. They must protect information, use it only to serve us, and follow confidentiality obligations. We post updates at least 10 days before adding or changing a provider (see Vendor/Subprocessor Register).

Current core providers:

• Zoom — live video sessions (no default recordings).

• Wix — website, forms, and payments (we do not store full card data).

• Google Drive (Google Workspace) — email and document storage.

​

5) Security 

• TLS 1.2+ for data in transit; AES-256 at rest where supported by vendors.

• MFA on admin/email; device passcodes and auto-lock; least-privilege access; quarterly access reviews; monthly security patching.

• Zoom waiting room and passcodes; unique links; no default recordings.

• Data hosted in the United States; encrypted backups tested quarterly.

​

6) Retention & deletion 

We keep student records only as long as needed per our Data Retention & Deletion Schedule (Appendix). When no longer needed, we securely delete data using methods aligned to NIST SP 800-88. Backups containing deleted records are purged on the next scheduled rotation.

​

7) Your rights

• Request access or correction of your/your child’s information.

• Request deletion (subject to legal/contract limits).

• We acknowledge requests within 5 business days and complete most within 30 days.

​

8) School partnerships (FERPA)

When we serve students under a school/district contract, we operate under the FERPA “school official” framework: the district retains ownership and direct control of education records; we use data only to provide the contracted service and do not re-disclose except as permitted.

​

9) Cookies/analytics

We may use basic analytics to improve the site. We do not use third-party behavioral advertising based on student data.

​

10) Security incidents

If we determine a data breach affecting you has occurred, we will notify you without undue delay and according to applicable law and any school contract. Notices explain what happened, what information was involved, and actions you can take.

​

11) Changes

We will post updates here and change the “Last updated” date.