This Privacy Policy explains how [COMPANY](“we”, “us”, “our”) collects, uses, and protects information about you when you visit our website or book classes with us. We are committed to handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
[COMPANY], a company registered in England and Wales. Registered address: [REGISTERED ADDRESS]. For data-protection enquiries: [DPO_EMAIL].
What data we collect
- Booking & payment data — name, email address, billing details when you purchase a class. Card details are processed by Stripe; we never see or store them.
- Lesson records — your progress notes, lesson recordings (where consented), and homework, used to deliver your tuition.
- Communications — emails or messages you send us, kept so we can continue the conversation.
- Technical data — IP address, browser type, and pages visited, collected automatically by our hosting provider for security and basic analytics.
Why we use your data (lawful bases)
- Performance of a contract— to deliver the classes you've purchased.
- Legitimate interests — to keep our service secure, prevent fraud, and improve our teaching.
- Legal obligation — to keep records for tax, accounting, and consumer-protection law.
- Consent— for marketing emails or testimonials, where you've opted in. You can withdraw consent at any time.
Who we share data with
We share the minimum necessary data with trusted service providers, each bound by contract to handle your data securely:
- Stripe — payment processing. Stripe's privacy policy.
- Vercel — website hosting. Vercel's privacy policy.
- HMRC and accounting partners — where required by law for tax compliance.
We do notsell your personal data, and we don't share it for third-party advertising.
How long we keep it
- Booking and lesson records: up to 6 years after your last lesson, for tax and consumer-protection purposes.
- Marketing contacts: until you unsubscribe.
- Technical logs: typically 30 days.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Have data deleted (the “right to be forgotten”), subject to legal retention rules.
- Restrict or object to certain types of processing.
- Receive a portable copy of your data.
- Withdraw consent at any time, where consent was the lawful basis.
To exercise any of these rights, email [DPO_EMAIL]. We'll respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we've mishandled your data.
Cookies
We use only strictly necessary cookies (for example, the secure session cookies set by Stripe during checkout). We don't currently use marketing or analytics cookies. If that changes, we'll update this policy and present a consent banner first.
Children
Our service is intended for learners aged 13 and over. If you are under 18, please make sure a parent or guardian has reviewed this policy and approves your use of our service.
Changes to this policy
We'll post any updates on this page and refresh the “last updated” date at the top. For material changes we'll also email students with active classes.
Contact
Questions about this policy or your data: [DPO_EMAIL].