Privacy Policy

Privacy Policy

Privacy Policy

Last Updated: October 14, 2024


Burkonda Inc. d/b/a  Plan Forward (“Plan Forward”), respects your privacy and is committed to protecting it in accordance with this Privacy Policy. This policy outlines the types of information we may collect from you or that you may provide when you visit our website, use our products and services, or interact with us (collectively referred to as ‘Services’), as well as our practices for collecting, using, maintaining, protecting, and disclosing that information. By using our Services, you agree to the terms of this Privacy Policy.


We may, at our sole discretion, modify or update this Privacy Policy from time to time. If we believe the changes will materially change how we use your personal information or reduce your rights, we will notify you either within this Privacy Policy or through a notice posted on our homepage.


  1. What information do we collect?

Plan Forward, along with our service providers who assist in providing, maintaining, and operating our Services, may collect various types of information from and about users of our Services, including:


- Personal Information: We may collect personal information that you provide to us, such as your name, email address, postal address, phone number, and other similar details, along with any publicly available information. Additionally, when you use our Services, we may automatically collect certain information about your access and usage, including traffic data, location data, logs, communication data, and the resources you access and use on the Services.


- Survey and Research Information: If you participate in one of our research projects or use one of our Services, we may collect your name, company, title, email address, postal address, phone number, demographic information, IP address, and any additional information you provide. Additionally, as part of the survey or research project, you may provide us with qualitative and quantitative information necessary for conducting the project, performing our analysis, and reporting our findings. This qualitative and quantitative information should be provided to us in an anonymized form, excluding any Personally Identifiable Information (PII) as defined by the Family Educational Rights and Privacy Act of 1974 (“FERPA”).


- Cookies, Web Beacons and Other Tracking Technologies: We, along with our service providers, may use cookies, web beacons, and similar tracking technologies to monitor how users interact with our Services. Cookies are small files stored on your device that help us enhance our Services and improve your experience. Web beacons are tracking technologies used to verify whether you have accessed certain content on our Services. You can manage your tracking preferences through your browser settings.


- Analytics: We use both Google Analytics and Microsoft Clarity to collect information about your use of our Services as follows: 


Google Analytics: This includes data such as your IP address, browser type, operating system, pages visited, time spent on each page, and your interactions with our Services. Google Analytics helps us understand how you engage with our Services and improve our Services. The data collected is anonymized and protected by Google’s security measures, including encryption and strict access controls. You can opt-out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on. 


Microsoft Clarity: We also use Microsoft Clarity to track and analyze user interactions such as mouse movements and page performance. This data helps us gain insights into user behavior to further enhance our Services. The data collected by Microsoft Clarity is processed in compliance with applicable data protection laws. Microsoft may collect Personal Data, but it is handled according to the Microsoft Privacy Statement. The use of Microsoft Clarity is mandatory for our Services.


- Google User Data: When you use our Services, we may collect and process information obtained from your Google account, such as your Google email address, profile information, or any other data that you consent to share with us through the Google API. This data is used solely to provide and enhance our Services, including facilitating login and improving user experience. We do not share this data with third parties, except as necessary to operate our Services or as required by law. Your Google user data is handled in compliance with Google’s User Data Policy.


- Transactions carried out between you and us on or in relation to this website: including information (a) relating to any purchases you make of our products or services, (b) you provide to us for the purpose of registering with us and/or subscribing to our website services and/or email notifications, which may include information such as an email address, phone number, and password to create an account, (c) when Users purchase Services, our affiliates, consultants, vendors and our third-party payment processors may collect and store billing address and credit card information on our behalf, or we may do this ourselves, and (d) about the use and access of our Services, which may include administrative and support communications with us and information about the projects, messages, people, features, content, and links you interact with, and what third-party applications you use (if any).


  1. How We Use Your Personal Information

We may access and use your information as reasonably necessary to (a) provide, maintain and improve our Services; (b) to prevent or address service, security, technical issues or at a User’s request in connection with customer support matters; (c) as required by law or as permitted by a lawful data request (e.g., subpoena) and (d) as set forth in our agreement with the User or as expressly permitted in writing by the User.


In addition, we may analyze and share with Users and others, derivative insights from the information shared when using the Services, provided that we do not share or disclose any of the underlying personally identifiable information. We also use anonymized usage statistics with respect to Users’ use of the Services and may use User provided content in an aggregated and de-identified form with the data of other Plan Forward customers to provide our Services.


In addition to the uses identified elsewhere in this privacy policy, we may use your personal information to:

  • Improve your browsing experience by personalizing the website. We carry out research and analyze trends to better understand how users are using the Services and improve them.

  • If you contact us with a problem or question, we will use your information to respond.

  • Send information (other than marketing communications) to you that we think may be of interest to you by post or by email or similar technology.

  • Send to you marketing communications relating to our business or the businesses of carefully selected third parties that we think may be of interest to you by post; or, where you have specifically agreed to this, by email or similar technology.

  • Provide other companies with statistical information about our users – but this information will not be used to identify any individual user.

  • We often need to contact you for invoicing, account management and similar reasons. We may send you email and other messages using any number of communication methods that you share with us. We may also contact you to inform you about changes in our Services, our Service offerings, and important Service related notices, such as security and fraud notices. These emails and messages are considered part of the Services and you may not opt-out of them.

  • We use account data to administer accounts and keep track of billing and payments.

  • We may use your information to assist in making the Services secure and to prevent abuse and fraud.


This Privacy Policy is not intended to place any limits on what we do with data that is aggregated and/or de-identified so it is no longer associated with an identifiable user or customer of the Services.


  • Data Usage: We do not use any data obtained from users to develop, improve, or train generalized or non-personalized AI and/or machine learning (ML) models. We do not transfer any user data to third-party AI tools for the purpose of training generalized or non-personalized AI/ML models. Any data shared with third-party services is strictly for enhancing user-specific functionalities and is handled in compliance with privacy and security standards.


  1. How your Personal Information is Shared

In addition to the disclosures reasonably necessary for the purposes identified elsewhere in this privacy policy, we may retain, share and disclose information about you:

  • With our third-party service providers working on our behalf for the purposes described in this Privacy Policy to help us provide and support our Service or to assist in protecting and securing our systems and services and other business-related functions. This includes: analyzing data, hosting data, engaging technical support for our Services, processing payments, and delivering content and marketing messages.

  • With affiliates. We may engage affiliates in our corporate group or other consultants or vendors to process information.

  • About a user with an entity under which a user account may be held. In a number of circumstances, we may share information with a customer about any user using a customer sponsored account.

  • We may engage with trusted third-party companies or individuals, such as third-party payment processors, to process information on our behalf. All such third parties are prohibited from using your personal information except to provide these services and they are obligated to maintain the same level of protection of that information as Plan Forward.

  • During changes to our business structure. If we engage in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Plan Forward’s assets, financing, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities (e.g. due diligence).

  • To comply with laws. To comply with legal or regulatory requirements and to respond to lawful requests, court orders and legal process.

  • To enforce our rights, prevent fraud and for safety. To protect and defend the rights, property, or safety of us or third parties, including enforcing contracts or policies, or in connection with investigating and preventing fraud.

  • We may disclose or use aggregate or de-identified information for any purpose.


  1. Security

We use reasonable administrative, technical, and physical safeguards designed to safeguard the information that we collect and to prevent the loss, misuse or alteration of your personal information. Those safeguards include: (i) the pseudonymization and encryption of personal information where we deem appropriate; (ii) taking steps to ensure personal information is backed up and remains available in the event of a security incident; and (iii) periodic testing, assessment, and evaluation of the effectiveness of our safeguards. Of course, data transmission over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the Internet. Please note that no information system can be 100% secure so we cannot guarantee the security of your information. 


Plan Forward employs stringent user authentication and access control measures to ensure the security and integrity of our system. Access to the database and source code is restricted solely to employees whose roles necessitate it. To enforce robust security, employees must utilize Multi-Factor Authentication (MFA) to gain administrative access to any required services. Application passwords are securely stored using modern, secure algorithms to provide an additional layer of protection.


  1. Third-Party Software and Services (Links to Other Sites)

Use of Services may involve third-party software and services. If you click on a third-party link, you will be directed to that third-party’s site. We strongly advise you to review the Privacy Policy of every website you visit.

We are not responsible for the privacy policies of third-party websites, or the security of your data when you use third-party websites.


  1.  Information about Children

Our Services and websites are not directed at children under 13. If you are aware that children under 13 are providing us with personal information without our consent, please contact us.


  1.  Data Retention

We retain personal information for the extent we deem necessary to carry out the processing activities described above, including but not limited to compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and to the extent we reasonably deem necessary to protect our and our partners’ rights, property, or safety, and the rights, property, and safety of our users and other third parties.

  • Retention and Deletion of Google User Data: We retain Google user data only for as long as necessary to provide our Services or as required by applicable laws and regulations. You have the right to request the deletion of your Google user data at any time. Upon receiving such a request, we will delete your Google user data from our systems within a reasonable timeframe, unless retention is necessary to comply with legal obligations, resolve disputes, or enforce our agreements. Additionally, if you revoke our access to your Google account, we will no longer collect any data from your account, and any previously collected data will be deleted according to our data retention policies.


  1. Information Processing (Your Rights)

All of our servers are located in the United States, and we do not process your information outside of the United States. Given this limitation, if your use of our website or disclosure of certain information to us would violate any law that is applicable to you, your right to use the website and/or disclose such information is revoked, as it is wherever use of the website is prohibited by law. 


  • Accessing, Modifying, Rectifying, and Correcting Collected Personal Information

Depending on the laws that apply to you, you may obtain from us certain personal information our records. If you wish to access, review, or make any changes or corrections to personal information you have provided to us through the Services, please contact us at the information provided at the end of this Privacy Policy. 


  • Your California Privacy Rights

California’s “Shine the Light” law permits our users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the previous calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge. However, we do not disclose personal information protected under the “Shine the Light” law to third parties for their own direct marketing purposes.

The California Consumer Privacy Act of 2018 (“CCPA”) and other state laws enacted from time to time provide residents of those jurisdictions with specific rights regarding their personal information. For individuals whose state of residence does not afford these rights, we may offer them voluntarily and at our discretion, and we reserve the right to limit or revoke any such rights at any time, as may be permitted by applicable laws. This section describes your CCPA rights and explains how to exercise those rights:

  • Right to Know: You have the right to request what personal information about you we collect, use, disclose, and/or sell, as applicable, over the past 12 months as follows:

    • The categories of personal information we collected about you;

    • The categories of sources from which the personal information is collected;

    • Our business or commercial purpose for collecting or selling that personal information;

    • The categories of third parties with whom we share that personal information;

    • The specific pieces of personal information we collected about you.

  • Right to Delete: You have the right to request the deletion of your personal information that is collected or maintained by us. If we receive and confirm your verifiable consumer request, we shall delete (and direct our service providers to delete) your personal information from our records, unless an exception applies or as otherwise required by law.

  • Right to Correct: You have the right to correct inaccurate personal information that we have collected and maintain about you.

  • Right to Non-Discrimination:  You have the right not to receive discriminatory treatment by us for the exercise of the privacy rights described above.

  • Right to opt-out of the sale of personal information: You have the right to request to be opted out from the sale of your personal information, if applicable.


Sale of Personal Information

We never monetize your personal information; however, the CCPA has a broad definition of “sale” that includes transactions other than what would be traditionally considered sales. In the past twelve (12) months, we have “sold” (as defined under the CCPA) the following categories of personal information set forth in the table above: Internet, or other electronic network activity information. We have “sold” your personal information to third parties who provide cross-platform advertising and related tracking for our Services.

We do not and will not knowingly sell the personal information of minors under the age of 16 without affirmative authorization.


Exercising Your Privacy Rights


To exercise any rights described above under the CCPA or other applicable laws, please submit a verifiable consumer request to us by:

  • Emailing us at the e-mail address below under “Contact Us”


The above rights are subject to our being able to reasonably verify your identity and authority to make these requests.  Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.

  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.


The above rights are also subject to various exclusions and exceptions under the law. Under certain circumstances, we may be unable to implement your request, pursuant to applicable law.  We will advise you of any reason for denying or restricting a request to the extent permitted by law.


  • Your Nevada Privacy Rights

Nevada law permits our users who are Nevada consumers to request that their personal information not be sold (as defined under applicable Nevada law), even if their personal information is not currently being sold. Requests may be sent to us at the address below under “Contact Us” and are free of charge.


  • Your EU, UK and Switzerland Privacy Rights

European Union, UK and Switzerland privacy laws provide individuals with enhanced rights in respect of their personal information. These rights may include, depending on the circumstances surrounding the processing of personal information:

  • The right to object to decisions based on profiling or automated decision making that produce legal or similarly significant effects on you (we do not however process personal information in a manner, which would make this right applicable);

  • The right to request restriction of processing of personal information or object to processing of personal information carried out pursuant to (i) a legitimate interest (including, but not limited to, processing for direct marketing purposes) or (ii) performance of a task in the public interest;

  • The right to withdraw your consent to process your personal information for a purpose you previously consented to. Withdrawing consent does not affect the lawfulness of processing, which was done before consent was revoked;

  • In certain circumstances, the right to data portability, which means that you can request that we provide certain personal information we hold about you in a machine-readable format; and

  • In certain circumstances, the right to erasure and/or the right to be forgotten, which means that you can request deletion or removal of certain personal information we process about you.


Note that we may need to request additional information from you to validate your request. To exercise any of the rights above, please contact us at the address below under “Contact Us”. 


If you are located in the European Union, European Economic Area, the UK, or Switzerland, and you wish to raise a concern regarding our use of your personal information, you have the right to complain to a supervisory authority.


Legal Basis for Processing Personal Information (EEA and UK Only)

If you are located in the EEA or UK, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect and use personal information to perform our contractual obligations to you, or to take steps in response to information or inquiries you may submit prior to entering into a contract with us, or where the processing is in our legitimate interests and not overridden by your data-protection interests or fundamental rights and freedoms. Our legitimate interests are described in more detail in this Privacy Policy in the sections above titled “Use”, but they typically include improving, maintaining, providing, and enhancing our technology, products, and services; ensuring the security of our platform Service and sites; and supporting our marketing activities.

In some limited cases, we may collect and process personal information to comply with laws, regulators, court orders, or other legal obligations, or pursuant to legal process.


Where required by law, we will obtain consent to collect personal information.

If you have questions or need further information concerning the legal basis on which we collect and use your personal information, please contact us at the address below under “Contact Us”.


10. Changes To This Privacy Policy

This Privacy Policy replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Policy, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Policy. We may change the provisions of this Privacy Policy at any time, and will always post the most up-to-date version on our website. Your continued use of the Services following our posting of any revised Privacy Policy will constitute your acknowledgment of the amended Privacy Policy.


You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.


11. Opt Out

Where consent is the basis of processing, you may at any time withdraw the consent you provided for the processing of your personal information for the purposes set forth in this Privacy Policy by contacting us at the address below under “Contact Us”. provided that we are not required by applicable law or professional standards to retain such information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

You can also contact us at any time to update your marketing preferences. You can opt out of marketing communications from us at any time by using the “unsubscribe” link in any marketing email or by contacting us at the address below under “Contact Us”. Please be advised that you may not be able to opt-out of receiving certain service or transactional messages from us, including legal notices.

12. Contact Us:

If you have any questions about this Privacy Statement or our privacy practices, please contact us via e-mail at info@k12planforward.com.