Privacy Notice

1. Who is responsible for personal information

1.1 Rohan Lalli is the data controller for personal information used in connection with this private tutoring service.

1.2 Questions about this notice or requests concerning personal information can be made through the website contact route or the email address used to arrange tuition.

2. Information I may collect

2.1 Depending on the stage and nature of tuition, I may collect a parent, guardian or student's name, email address and other contact details supplied for arranging tuition.

2.2 I may also collect educational information such as subject, qualification level, examination board, year group, current and target grades, upcoming assessments, areas of difficulty, student work, tutor feedback, homework records and progress notes.

2.3 Administrative information may include booking history, attendance, payment or invoice records, correspondence and records needed to manage cancellations, complaints or other service issues.

2.4 I do not ask for medical or other highly sensitive information as part of routine enquiries. Where information about a learning need, disability, health issue or safeguarding matter is genuinely relevant, only information reasonably necessary for the purpose should be provided.

3. Where information comes from

3.1 Most information is provided directly by a student, parent or guardian through an enquiry, introductory meeting, booking, lesson or tuition correspondence.

3.2 A parent or guardian may provide information about a student, including school work, assessment results or learning priorities, where this is relevant to arranging or providing tuition.

3.3 I may generate teaching records such as marked work, lesson notes, feedback and progress observations in the course of providing tuition.

4. Why I use information and lawful bases

4.1 Enquiries and pre contract steps. I use contact and educational information to respond to an enquiry, arrange an introductory meeting, discuss suitability and prepare for requested tuition. Where the individual is the prospective Client, this is normally necessary to take steps at that person's request before entering into a contract.

4.2 Providing and administering tuition. I use information to plan lessons, teach, mark work, communicate feedback, arrange bookings and administer the tuition agreement. This is normally necessary to perform a contract with the Client. Where the Student is not the Client, I may rely on legitimate interests in providing a safe, effective and appropriately tailored tutoring service.

4.3 Educational records and service quality. I may keep proportionate lesson notes, marked work and progress records because I have a legitimate interest in maintaining continuity, monitoring agreed priorities and providing a professional service. I balance that interest against the Student's privacy, particularly where the Student is under 18.

4.4 Legal, tax and dispute records. I may keep information where this is necessary to meet a legal obligation or to establish, exercise or defend legal rights.

4.5 Safety and safeguarding. Where necessary, information may be used or disclosed to protect a Student or another person, respond to a safeguarding concern or comply with a legal requirement. The lawful basis will depend on the circumstances.

4.6 Marketing. I do not use tuition enquiries to send unrelated marketing by default. If direct marketing is introduced in future, it will be handled under an appropriate lawful basis and in accordance with applicable electronic communications rules.

5. Students under 18

5.1 Much of the tutoring service is intended for school age students. I therefore take particular care to keep the amount of personal information collected about a child proportionate to the educational purpose.

5.2 Where a Student is under 18, the parent or guardian normally arranges tuition and provides the main administrative contact. Direct academic communication with the Student may still take place where reasonably necessary for teaching, homework, feedback or scheduling already agreed with the parent or guardian.

5.3 Information about a child is not sold and is not used for behavioural advertising or unrelated profiling.

6. Sharing and service providers

6.1 I do not sell personal information.

6.2 Personal information may be processed by service providers that support the tutoring service, such as website hosting, enquiry delivery, email, calendar or booking, video conferencing, cloud storage, document, payment or invoicing providers.

6.3 Only information reasonably necessary for the relevant service should be shared with a provider. Providers act under their own terms and privacy arrangements or, where applicable, as processors acting on instructions.

6.4 Information may also be disclosed where required by law, to professional advisers where reasonably necessary, or where disclosure is necessary to address a serious safeguarding or safety concern.

7. International transfers

7.1 Some technology providers may process information outside the United Kingdom.

7.2 Where a restricted international transfer takes place, I will use providers that rely on an applicable UK adequacy regulation or another appropriate safeguard recognised under UK data protection law, where required.

8. How long information is kept

8.1 Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected and for any legal, tax, safeguarding or dispute related requirement.

8.2 A record may be kept longer where reasonably necessary for an unresolved complaint, legal claim, safeguarding matter or other legal obligation.

9. Security and confidentiality

9.1 I take reasonable technical and organisational steps to protect personal information against unauthorised access, loss, alteration or disclosure.

9.2 Access to student and client information is limited to what is necessary to operate and deliver the tutoring service.

9.3 No method of electronic storage or transmission can be guaranteed to be completely secure. If a personal data breach creates a legal duty to notify affected individuals or the Information Commissioner's Office, the required notification will be made.

10. Website technology and cookies

10.1 The current website does not intentionally use non essential advertising or behavioural tracking cookies.

10.2 If analytics, an embedded booking system or another technology that places non essential cookies is introduced, appropriate information and consent controls will be added before that technology is activated where required.

10.3 Following a link to an external booking, video or other service may cause that provider to process information under its own privacy and cookie arrangements.

11. Data protection rights

11.1 Depending on the circumstances and lawful basis, individuals may have rights to request access to personal information, correction of inaccurate information, erasure, restriction of processing, data portability and objection to certain processing.

11.2 Where processing is based on consent, consent can be withdrawn for future processing. Withdrawal does not make earlier processing unlawful.

11.3 A request can be made through the website contact route. I may need to verify identity before responding and will respond within the time required by applicable data protection law.

12. Complaints

12.1 I would encourage anyone with a concern about how personal information has been handled to contact me first so that the issue can be considered and, where possible, resolved.

12.2 Individuals also have the right to complain to the Information Commissioner's Office, the United Kingdom's independent data protection regulator.

13. Automated decision making

13.1 I do not use personal information to make solely automated decisions that produce legal or similarly significant effects on students, parents or guardians.

14. Changes and contact

14.1 This notice may be updated when the website, technology providers or tutoring service changes. The current version and effective date will be published on this page.

14.2 Questions, rights requests or privacy concerns can be made through the website contact route or the email address used to arrange tuition.