Privacy Policy

My Primary and Secondary Tutor is committed to safeguarding your privacy. We collect, use and are responsible for certain Personal Data about you. For the purposes of the Data Protection Legislation, the controller of your Personal Data is Karen Simpson, as trading My Primary and Secondary Tutor. Contact her at the below details. If you have any questions or problems regarding the use of your Personal Data and she will gladly assist you.

Name: Karen Simpson, trading as My Primary and Secondary Tutor

Address: 33 Slackbuie Way, Inverness, IV2 6AT

Phone number: 07919 532071

E-mail: karen@myprimaryandsecondarytutor.com

We ask that you read this privacy notice carefully as it contains important information on who we are, how and why we collect, store, use and share Personal Data, your rights in relation to your Personal Data and on how to contact us and supervisory authorities in the event you have a complaint.

Definitions

• Child – a person under 18 years of age.
• Controller – the person, public authority, agency or other body that determines the purposes
• and means for Processing Personal Data;
• Data Protection Legislation – means the Data Protection Act 2018 and the UK GDP (as defined within the Data Protection Act 2018) and as amended and updated from time to time;
• Data Subject – a natural person whose Personal Data is being processed;
• Personal Data – any information relating to an identified or identifiable natural person; and
• Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data;

Data protection principles

We adhere to the following data protection principles which require that Personal Data is:

• Processed lawfully, fairly and transparently. This means that our processing activities have lawful grounds. We always consider your rights under the Data Protection Legislation before Processing your Personal Data;
• collected for specified, explicit and legitimate purposes and is not further Processed in a manner that is incompatible with these purposes. Our processing activities fit the purpose for which Personal Data was gathered;
• adequate, relevant and limited to what is necessary in relation to the purposes for which it was collected for. We only gather and Process the minimal amount of Personal Data required for the purpose it was collected for;
• kept in a form which permits identification of Data Subjects for no longer than necessary. Processing is limited with a time period. We will not store your Personal Data for longer than needed; and
• Processed in a manner that ensures appropriate security and confidentiality of the
• Personal Data.

The UK GDPR also includes a principle of 'accountability', which requires My Primary and Secondary Tutor to take responsibility for its processing and to be able to demonstrate compliance with the UK GDPR.

Data Subject’s Rights

You can exercise any of the following rights by contacting us on karen@myprimaryandsecondarytutor.com.

Under the Data Protection Legislation, you have the following rights:

• 1. Right to information – meaning you have to right to know whether your Personal Data is being processed by us, what Personal Data is gathered, from where it is obtained and why and by whom it is Processed – as contained within My Primary and Secondary Tutor privacy notice;
• 2. Right to access – meaning you have the right to access the Personal Data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered;
• 3. Right to rectification – meaning you have the right to request rectification of your Personal Data that is inaccurate or incomplete;
• 4. Right to erasure – meaning, in certain circumstances, you can request for your Personal Data to be erased from our records;
• 5. Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the processing of your Personal Data;
• 6. Right to object to processing – meaning in certain cases, you have the right to object to Processing of your Personal Data;
• 7. Right to object to automated processing – meaning you have the right to object to automated processing, including profiling; and not to be subject to a decision based solely on automated processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you;
• 8. Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another;
• 9. Right to withdraw consent – you have the right to withdraw any given consent for Processing of your Personal Data;
• 10. Right to lodge a complaint – in the event that we refuse your request under the applicable Data Protection Legislation, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us - karen@myprimaryandsecondarytutor.com

You are not required to pay any charge for exercising your rights. If you make a request, we
have one month to respond to you.

Data we gather 

Information you have provided us with
This includes your name, home address, e-mail address, telephone number, any special education needs information and emergency contact name and contact number. We also collect personal data from the children we provide our services to. This includes their name, age/DOB, class, school, medical needs and their interests.  

Information we gather from providing our services to you
We gather information from the services we provide including information about your child's level from the initial assessment which we share with you verbally during the assessment and share between our lead tutor and your tutor.  We gather information about your child's progress through providing our services which are shared between tutor and lead tutor through our monthly progress reports.  We gather information about your child's progress and share this with you through our weekly feedback messages. We use third party providers to share and store this information including Tutorbird, AirTable, FreeAgent, Google, MailerLite, One Drive, Class Dojo, Meta, and Google Shared Drive. 
Publicly available information 
We might gather Personal Data about you that is publicly available.
   
Why we need your Personal Data  ​​​​​​​
We need to collect your Personal Data so that we can: 
provide our service to you. This includes, for example, registering your account; providing you with other products and services that you have requested; providing you with promotional items at your request and communicating with you in relation to those products and services; communicating and interacting with you; and notifying you of changes to any services; 
enhance your customer experience; 
fulfil an obligation under law or contract; 
to track the progress of children enrolled in our services 
to communicate with you either about the services we provide to you, for sales or for invoicing purposes; 
to send you personalised offers (from us and/or our carefully selected partners); 
to administer and analyse our client base (purchasing behaviour and history) in order to improve the quality, variety, and availability of products/ services offered/provided; 
to conduct questionnaires concerning client satisfaction; and to send you newsletters and campaign offers (from us and/or our carefully selected partners). 
When we use your Personal Data we are required to have a lawful basis for doing so. There are various different lawful bases upon which we may rely, depending on what Personal Data we process and why. We may process your Personal Data where it is necessary for our legitimate interests or your legitimate interests.  We may also process your Personal Data with your consent, on the grounds of entering into a contract with us, fulfilling contractual obligations or fulfilling our legal obligations.  
Where we process your Personal Data for marketing purposes, you have the right to object to us using your Personal Data.  If you wish to object to any of the above processing, please contact us at karen@myprimaryandsecondarytutor.com.  
We might process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that: 
the link between purposes, context and nature of Personal Data is suitable for further processing; 
the further processing would not harm your interests; and 
there would be appropriate safeguarding for processing. 
Throughout our website (www.myprimaryandsecondarytutor.com.) we may link to other websites. These other third party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third party websites, please consult their privacy policies as appropriate. 
​
Who else can access your Personal Data 
Personal Data about you is in some cases provided to our trusted partners in order to either make providing the service to you possible or to enhance your customer experience.  
We share your Personal Data with: 
Tutorbird - https://www.tutorbird.com/privacy-policy/
Concrete CMS - https://www.concretecms.com/about/legal/privacy-policy
Airtable - https://www.airtable.com/company/privacy
FreeAgent - ttps://www.freeagent.com/company/gdpr/
Class Dojo  - https://www.classdojo.com/en-gb/privacycenter/
Google Workspace - https://cloud.google.com/privacy/gdpr
One Drive - https://www.microsoft.com/en-us/trust-center/privacy/gdpr-overview
Airtable - https://support.airtable.com/docs/gdpr-at-airtable
Meta - https://www.facebook.com/business/gdpr
MailerLite - https://www.mailerlite.com/gdpr-compliance

We only work with processing partners who are able to ensure adequate levels of protection to your Personal Data and when it is required for specific purposes.
We may also disclose your Personal Data to third parties or public officials when we are legally obliged to do so. This may include sharing children's Personal Data with the consultants we engage with for the purposes of providing our services. We might disclose your Personal Data to third parties if you have consented to the disclosure.  
​
How we secure your data 
We do our best to keep your Personal Data safe.  We use safe protocols for communication and transferring your Personal Data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.  
Even though we try our best we cannot guarantee the security of information. We will notify you if there is a high risk to your rights and freedoms as a result of the data breach. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur. 
If you have an account with us, note that you have to keep your username and password secret. 
Google Analytics 
We use Google Analytics to measure traffic on our website. Google has their own Privacy Policy which you can review here. If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page. 

How long we keep your Personal Data 
We will retain your Personal Data for as long as necessary for the purposes we have set out above.  At your request or if you do not engage with us for a period of 3 years, we will review and may delete any information that we no longer have a legitimate reason to retain. 
Your Personal Data may be retained longer by the third parties listed above in accordance with their privacy policies.  

How to complain 
If you have any concerns about our use of your personal information, you can make a complaint to us at the contact details contained within this Privacy Policy.
You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:            
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk 
Ref:  C1469191
Changes to this Privacy Policy 
We reserve the right to make changes to this Privacy Policy From time to time and will always publish updates on our website. 
 
Last reviewed: May 2024