Data Protection and Privacy Policy
About this policy
During the course of providing tutoring courses and other activities, we, Teatime Tutors Ltd (company no. 08842217) of 161 Sabine Road, London, SW11 5LX, will process personal data (which may be held on paper, electronically, or otherwise) about parents and children using or enquiring about our courses, and about users on our website, and we recognise the need to treat this data in an appropriate and lawful manner, in accordance with the Data Protection Act 1998 (DPA). The purpose of this policy is to make parents and others aware of how we will handle their personal data, and the data of their children.
This policy does not form any part of the contract between us and parents, and we may amend this policy from time to time.
By visiting www.teatimetutors.co.uk (“website”), enquiring about our courses and services, or by enrolling a child on our courses, parents, prospective clients and website users are accepting and consenting to the practices described in this policy.
Data protection principles
We will comply with the eight data protection principles in the DPA, which say that personal data must be:
Processed fairly and lawfully.
Processed for limited purposes and in an appropriate way.
Adequate, relevant and not excessive for the purpose.
Accurate.
Not kept longer than necessary for the purpose.
Processed in line with individuals' rights.
Secure.
Not transferred to people or organisations situated in countries without adequate protection.
"Personal data" means recorded information we hold about parents or children or those enquiring about our services (“prospective clients”) or users of our website, from which they can be identified. It may include contact details, other personal information, photographs, expressions of opinion about parents or children, or indications as to our intentions about parents or children. "Processing" means doing anything with the data, such as accessing, disclosing, destroying or using the data in any way.
What Information we collect
We may collect the following information:
Information that is provided on forms filled in by parents or prospective clients, or that is provided by corresponding with us by phone, email or otherwise. This information may include parent’s and children’s names, addresses, e-mail addresses and phone numbers, dates of birth, medical history and educational history;
Information from other sources, such as schools and other tutors;
Information that is provided when users of our website register to use our site; and
Technical information which is automatically collected when parents, children or others visit our website, including Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and information regarding the visit to our website including the date and time and length of time spent viewing the website or particular pages.
Fair and lawful processing
We will usually only process personal data where parents, prospective clients or users of our website have given their consent or where the processing is necessary to comply with our legal obligations. In other cases, processing may be necessary for the protection of the vital interests of parents or children, for our legitimate interests or the legitimate interests of others. The full list of conditions is set out in the DPA.
By visiting our website, enquiring about our courses and services, or by enrolling a child on our courses, parents, prospective clients and website users are accepting and consenting to the practices described in this policy.
We will only process "sensitive personal data" (which includes data about ethnic origin, political opinions, religious or similar beliefs) where a further condition is also met. Usually this will mean that the parent has given their explicit consent, or that the processing is legally required. The full list of conditions is set out in the DPA.
How we are likely to use personal data
We will process data about parents and children and prospective clients for legal, administrative and management purposes and to enable us to meet our legal obligations, including our obligation to provide tutoring to children.
We will also process data to provide parents and prospective clients with information about other courses and services we offer that are similar to those already purchased or enquired about, as well as about changes to our services.
We will use technical information collected from our website to ensure that content from our website is presented in the most effective manner for users’ computers, to administer our website and for internal operations (including data analysis, testing and research), to allow website users to participate in interactive services on our website, to keep our website safe and secure, and to measure or understand the effectiveness of any advertising contained on our website and to deliver relevant advertising to website users.
We may process sensitive personal data relating to parents or children including, as appropriate:
information about child’s physical or mental health or condition in order to report any concerns about the child’s health to their parents, or for the purposes of providing emergency medical treatment. This may involve disclosing sensitive personal data to medical professionals;
the racial or ethnic origin or religious or similar information about parents and children in order to monitor compliance with equal opportunities legislation; and
in order to comply with legal requirements and obligations to third parties.
We may combine information that we receive from third parties with information which parents, prospective clients or website users give to us or that we collect about them, and use such combined information for the purposes set out above.
The data that we collect from, or are given by parents, prospective clients or website users may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the provision of support services.
Providing information to third parties
We will not disclose personal data about any parent or child, prospective client or website user to a third party unless:
the personal data is being disclosed to a tutor, business partner, supplier or sub-contractor for the purpose of performing our obligations to parents;
we have the consent of the parent, prospective client or website user;
we are satisfied that the third party is legally entitled to the data;
we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets; or
Teatime Tutors Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it will be one of the transferred assets.
Where we do disclose personal data to a third party, we will have regard to the eight data protection principles.
We may share technical information that we collect on our website with analytics and search engine providers that assist us in the improvement and optimisation of our website.
By agreeing to the terms of this Data Protection and Privacy Policy, parents, prospective clients and website users agree to us disclosing personal or sensitive personal data as set out above or as otherwise described in this policy.
Other Obligations
We will:
only process personal data for the specific purpose or purposes detailed in this policy or otherwise notified to parents, prospective clients or website users or for any other purposes specifically permitted by the DPA;
only process personal data to the extent that it is necessary for the specific purposes detailed in this policy or otherwise notified to the relevant parents, prospective clients or website users.
keep the personal data we store accurate and up to date. Data that is inaccurate or out of date will be destroyed;
not keep personal data for longer than is necessary for the purpose. This means that data will be destroyed or erased from our systems when it is no longer required; and
ensure that appropriate measures are taken against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
Parent’s Rights
Parents, prospective clients and website users have the right to:
Request access to any personal data we hold about them or their children.
Prevent the processing of their data for direct-marketing purposes.
Ask to have inaccurate data held about them or their children amended.
Prevent processing that is likely to cause unwarranted substantial damage or distress to parents, children or anyone else.
Object to any decision that significantly affects them being taken solely by a computer or other automated process.
Subject access requests
If a parent, prospective client or website user wishes to know what personal data we hold about them or their child, they must make a subject access request in accordance with the terms of the DPA in writing to Teatime Tutors Ltd, with an accompanying fee of £10.
Updating Information
Parents should notify us if their personal details change or if they become aware of any inaccuracies in the personal data we hold about them or their children.
Cookies on our Website
Our website uses cookies to distinguish one user from another user of our website. This helps us to provide users with a good experience when they browse our website and also allows us to improve our site. More details are provided in our cookie policy.
Contact
Questions, comments and requests regarding this Data Protection and Privacy Policy should be addressed to Tash Rosin at learn@teatimetutors.co.uk or 161 Sabine Road, London, SW11 5LX.