This Privacy Policy explains what personal data Miss Davis Tutoring & Performance Limited collects, why we collect it, how we use it, and what rights you have over it.

We are committed to protecting the privacy of both adults and children who use our services. Where data relates to a child under the age of 18, we apply additional care in line with the UK Children's Code (Age Appropriate Design Code).

This policy applies to data collected through our website, subscription platform, and communications. By using our services, you agree to the collection and use of your information as described here.

1. What Personal Data We Collect

1a. Student Data

When a student registers or is registered for a subscription, we collect:

• Full name
• Year group
• Exam board (e.g. AQA, Edexcel, OCR)
• Subscription plan and academic subject(s)

We do not collect date of birth. Year group is sufficient to tailor our service appropriately.

1b. Parent or Guardian Data

Where the subscriber is a parent or guardian acting on behalf of a student, we collect:

• Full name
• Email address
• Billing address (for payment processing)

Parents and guardians are the primary account holders for students under 18. All communications regarding the account are directed to the parent or guardian.

1c. Payment Data

We do not store payment card details on our systems. All payment information is processed securely by Stripe, our payment provider. We retain only a transaction reference and subscription status for account management purposes.

1d. Communications Data

If you contact us by email, we retain a record of that correspondence. If you have opted in to marketing, we hold your email address on our Mailchimp mailing list.

1e. Website Usage Data

Our website may collect standard technical data including browser type, device type, pages visited, and time spent on site. This is used to improve website performance and user experience. Where cookies are used, this is governed by our Cookie Policy [link].

2. Why We Collect It and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing personal data. The table below sets out our purposes and the legal basis for each:

3. Children's Data and the UK Children's Code

Our services are primarily used by children aged 8–16. We take the protection of children's data seriously and apply the following safeguards in line with the ICO's Children's Code:

• We do not collect more data about children than is necessary to deliver the service.
• We do not profile children for marketing or advertising purposes.
• We do not use children's data to make automated decisions that affect them.
• Children's accounts are managed by a parent or guardian, who is the account holder of record.
• We do not share children's personal data with third parties for any purpose beyond delivering the tutoring service.

If you believe we have inadvertently collected data about a child without appropriate parental consent, please contact us immediately at info@missdavistutoring.com and we will delete it promptly.

4. Third Parties We Share Data With

We only share personal data with third parties where necessary to deliver our services. We do not sell personal data. Our current data processors are:

Each of these providers is contractually required to handle your data in compliance with UK GDPR. They act as data processors on our behalf and may not use your data for their own purposes.

We may also disclose personal data where required to do so by law, or to protect the rights, property, or safety of Miss Davis Tutoring & Performance Limited, our customers, or others.

5. How Long We Keep Your Data

We do not keep personal data longer than is necessary. Our retention periods are:

• Active subscriber data — held for the duration of your subscription and for 2 years after it ends, to support re-enrolment and account queries.
• Payment and billing records — held for 7 years in line with HMRC financial record-keeping requirements.
• Email correspondence — held for 2 years from the date of the last communication.
• Marketing list data — held until you unsubscribe or withdraw consent, whichever is sooner.
• Website usage data — retained in aggregated, anonymised form only; no personally identifiable data is retained beyond 26 months.

When data is no longer required, it is securely deleted or anonymised.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data. These apply to both the account holder (parent or guardian) and, where appropriate, the student named on the account.

Right to access

You can request a copy of the personal data we hold about you at any time.

Right to rectification

If any data we hold is inaccurate or incomplete, you have the right to have it corrected.

Right to erasure

You can ask us to delete your personal data. We will comply unless we are legally required to retain it (e.g. financial records).

Right to restriction

You can ask us to limit how we use your data while a dispute or request is being resolved.

Right to data portability

You can request your data in a structured, machine-readable format.

Right to object

You can object to processing based on legitimate interests, including marketing.

Right to withdraw consent

Where processing is based on consent (e.g. marketing emails), you can withdraw that consent at any time with no penalty.

To exercise any of these rights, contact us at info@missdavistutoring.com. We will respond within 30 days. We may need to verify your identity before processing your request.

7. How to Complain

If you are unhappy with how we have handled your personal data, please contact us first at info@missdavistutoring.com so we can try to resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the 'last updated' date at the top of this document and, where the changes are significant, notify subscribers by email.

We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

Miss Davis Tutoring & Performance Limited

Email: info@missdavistutoring.com

Response time: 3–5 business days

Miss Davis Tutoring & Performance Limited is registered in England and Wales. ICO registration number to be inserted prior to website launch.