Privacy notice

When you send an enquiry, the name, email address, phone number, year group, subject and message you type are stored so that I can reply and arrange lessons. They are emailed to me and kept on my private Leads page. Once an enquiry is closed, or has led to a family account, the enquiry itself is deleted within twelve months.

A parent account holds the parent's name, email address and phone number, and a password that is stored only as a one-way hash. Under it sit the students I teach: name, year group, subject and hourly rate. Every lesson keeps its time, status, my written feedback, and a record of who booked, moved, confirmed or cancelled it. Notes I write for myself about a lesson are never shown to parents or students and are never emailed.

This is needed to provide the lessons you have asked for: booking, confirming, moving and cancelling them, and giving feedback. Lesson records are kept while you are a client and for twelve months afterwards.

Each completed lesson produces an invoice with the parent's name and email address, the student's name, the lesson date, length, rate and amount. Invoices are business records and are kept for as long as tax law requires, currently up to six years after the end of the tax year they belong to, even after an account is closed.

Confirmations, changes, reminders, invoices and login links are sent through Resend, an email delivery service, from the address [email protected] using servers in the European Union. A copy of every email sent is kept in the portal so I can see what was sent and re-send it if it did not arrive.

When I confirm a lesson, the portal creates an event in my own Google Calendar and Google generates the Google Meet link for it. The parent's email address is added to that event as a guest so the invitation can be sent, but Google does not email you about it; the portal does. Google processes the event under its own privacy policy. The connection between the portal and my calendar is stored encrypted and can only be used by the portal.

The portal sets one cookie, named tp_session, which keeps you logged in for up to thirty days. There are no analytics, advertising or tracking cookies, on the website or in the portal.

The portal and its database run on Render, a hosting provider, in Frankfurt, Germany, inside the European Union. Render keeps seven days of daily backups of the database. I may also keep a downloaded copy of the database as a backup, stored privately. Access to everything above is limited to me, through my own login.

You can ask to see the personal data held about you or your child, have mistakes corrected, or have it deleted, subject to the invoice records I must keep by law. Write to [email protected] and I will answer within one month. If you are unhappy with how I handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Accounts are held by parents or guardians, who provide their child's details. Students do not have their own logins. Lessons take place with the parent's agreement and the parent can see everything recorded about their child in the portal.

If this notice changes, the date at the top changes with it, and parents with an account are told by email if the change affects them.