1. Information We Collect

1.1 Personal Information: We collect information you provide directly to us, such as:

• Parent/Guardian name, email address, and phone number
• Student's name, age, year group, and school information
• Educational history and academic needs
• Special educational requirements or learning difficulties
• Payment information (processed securely through third-party providers)
• Communication preferences and contact history

1.2 Technical Information: When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website addresses

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide and deliver tutoring services
• To match students with appropriate tutors
• To communicate about sessions, progress, and administrative matters
• To process payments and maintain financial records
• To improve our services and website functionality
• To send educational resources and service updates (with consent)
• To comply with legal obligations and safeguarding requirements

3. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: To fulfill our tutoring service agreements
• Legitimate Interest: To improve services and communicate about educational matters
• Consent: For marketing communications and non-essential services
• Legal Obligation: For safeguarding, child protection, and financial record-keeping

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: Trusted third parties who assist in website operation, business conduct, or servicing (payment processors, scheduling platforms)
• Tutors: Relevant student information necessary for effective tutoring
• Legal Requirements: When required by law or to protect rights, property, or safety
• Safeguarding: To appropriate authorities if child protection concerns arise

5. Data Security

We implement appropriate security measures to protect your personal information:

• Encrypted data transmission and secure storage
• Access controls and authentication measures
• Regular security assessments and updates
• Staff training on data protection and confidentiality
• Secure disposal of physical and electronic records

6. Children's Privacy

As an educational service provider, we take special care with children's data:

• We collect minimal necessary information about students
• Parent/guardian consent is required for all student data processing
• Student information is kept confidential and secure
• We comply with all child protection and safeguarding requirements
• Students' academic progress may be shared with parents/guardians only

7. Data Retention

We retain personal information only as long as necessary:

• Active Students: Throughout the tutoring relationship
• Financial Records: 7 years as required by UK tax law
• Academic Records: 3 years after final session for reference purposes
• Website Data: According to our cookie policy
• Marketing Data: Until consent is withdrawn

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of data processing
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at info@stepuptutors.co.uk.

9. Cookies and Tracking

Our website uses cookies to enhance user experience:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand website usage (Google Analytics)
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences.

10. Third-Party Services

We use trusted third-party services that may have access to your information:

• Calendly: For appointment scheduling
• Zoom/Google Meet: For online tutoring sessions
• Payment Processors: For secure payment handling
• Email Services: For communication and marketing

These services have their own privacy policies and security measures.

11. International Data Transfers

Your personal data is primarily processed within the UK. If data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through our website. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

13. Complaints and Concerns

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

• ICO Website: ico.org.uk
• ICO Helpline: 0303 123 1113

14. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: info@stepuptutors.co.uk
• Phone: +44-7XXXXXXXXX
• WhatsApp: +44-7XXXXXXXXX
• Address: Canterbury, Kent, United Kingdom