1. Who We Are

Data controller: Nikki Paterson T/A Centrepoint Private Tuition

Website: www.centrepoint.education

Email: nikki@centrepoint.education

Postal address: Redford Gardens, Edinburgh, EH13

2. What Data We Collect

We collect the following categories of personal data:

•     Parents and guardians: name, email address, phone number, postal address

•     Students: first name, age or year group, subject and learning needs (as provided by parents or guardians)

•     Website visitors: IP address, browser type, pages visited, and cookies (see Section 8)

•     Payment information: processed securely via our payment provider — we do not store card details

3. How We Collect Data

We collect data when you:

•     Complete an enquiry or contact form on our website

•     Email or message us directly

•     Book or pay for tuition sessions

•     Subscribe to any newsletter or updates

4. How We Use Your Data

We use personal data to:

•     Respond to enquiries and provide tuition services

•     Schedule sessions and communicate with parents and guardians

•     Send invoices and process payments

•     Keep records of student progress (shared only with the parent or guardian)

•     Send occasional updates about services, where you have given permission

We do not use student data for marketing purposes. We do not sell or share personal data with third parties for commercial gain.

5. Legal Basis for Processing

We process personal data under the following lawful bases:

•     Contract: to deliver the tuition services you have engaged us for

•     Legitimate interests: to communicate effectively and manage our business operations

•     Consent: for optional communications such as newsletters

•     Legal obligation: where required to comply with applicable law

6. Data Relating to Children

We work with students under the age of 16. All personal data relating to children is provided by, and processed in communication with, a parent or guardian. We collect only the minimum information necessary to deliver the tuition service effectively.

We do not market directly to children, and we do not share student data with any third party except as strictly necessary to deliver our services (for example, a secure video platform used for online sessions).

7. Data Retention

We retain personal data only for as long as necessary:

•     Active client records: for the duration of the tutoring relationship, plus two years

•     Financial and payment records: six years, in line with HMRC requirements

•     Enquiry records where no service was taken: six months

After the applicable retention period, data is securely deleted or anonymised.

8. Cookies

Our website uses cookies to support basic functionality and analyse visitor behaviour. You will be asked for your consent to non-essential cookies when you first visit the site.

You can manage or withdraw cookie consent at any time via your browser settings or our cookie preference tool.

 9. Third-Party Services

We may use the following types of third-party tools to operate our services:

•     Video conferencing platforms (e.g. Zoom or Google Meet) for online sessions

•     Payment processors for secure card transactions

•     Email service providers for correspondence

These providers are selected for their compliance with applicable data protection standards. Where we share data with third parties, we do so only to the extent necessary and under appropriate agreements.

10. International Transfers

Centrepoint Private Tuition is based in Edinburgh, Scotland and delivers services to UK-based students. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as the use of standard contractual clauses or equivalent protections, in line with UK GDPR requirements.

11. Your Rights

Under UK GDPR, you have the right to:

•     Access the personal data we hold about you

•     Correct inaccurate or incomplete data

•     Request deletion of your data, where there is no lawful reason to retain it

•     Object to or restrict certain types of processing

•     Withdraw consent at any time, where processing is based on consent

•     Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at nikki@centrepoint.education

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on our website. Material changes will be communicated to active clients directly.

 13. Contact

For any data protection queries, please contact:

Nikki Paterson T/A Centrepoint Private Tuition

Email: nikki@centrepoint.education

Address: Redford Gardens, Edinburgh, EH13