Privacy Policy (GDPR)

Charlotte Humpheryes & Co. Tutors is committed to protecting your personal data in line with the UK GDPR and Data Protection Act 2018. This policy explains what we collect, why, and your rights.

We are currently in an alpha release. PayPal checkout is still simulated. When LiveKit is configured, the live classroom stores chat transcripts and whiteboard snapshots for completed lessons so you can review them later.

Data we collect

• Account data: name, email address, password (hashed), and role (student, parent, or adult learner)
• Booking data: session times, subject, and (once PayPal is live) the payment confirmation reference from PayPal
• Communication data: emails we send for confirmations, approvals, and 24-hour reminders
• Materials locker: files uploaded by you or shared with you by your tutor
• Live classroom: lesson chat messages and whiteboard strokes for completed sessions (stored in our database); live video runs through LiveKit Cloud and is not recorded by default

Why we use your data

• To deliver tutoring services and manage your bookings
• To send booking confirmations, receipts, and 24-hour reminders
• To contact you directly by email when needed (including Teams fallback links)
• To improve our service and maintain platform security

Legal basis

We process your data on the basis of contract (providing tutoring), legitimate interests (service improvement and security), and consent where required (e.g. marketing emails, if ever offered).

Storage & retention

Data is stored on secure servers within the UK/EEA where possible. Account data is retained while your account is active and for up to seven years thereafter for legal and accounting purposes.

Your rights

You may request access, correction, deletion, or portability of your data, or object to certain processing. Contact hello@charlottehumpheryes.co.uk to exercise these rights. You may also lodge a complaint with the ICO.

Sharing

We do not sell your data. We share data only with essential processors (e.g. PayPal for payments once live, our email delivery provider, LiveKit Cloud for live video when enabled, and our file-storage provider) under appropriate agreements.