1Who is responsible for your data

My Study Corner LTD is the controller of your personal data. Contact us about privacy at [email protected].

2What we collect

• Account details: name, email address, password (stored only as a secure hash), and profile details you add.
• Bookings and payments: the lessons you book and their price. PayPal handles your payment; we receive the payment confirmation, amount and PayPal reference, never your card number.
• Lessons: recordings of the audio, video, shared screen, whiteboard and chat of each lesson.
• Messages you send through the platform, and reviews you leave after lessons.
• Technical data: IP address, browser and device type, and logs needed to keep the service secure.

3Why we use it, and our lawful basis

• To run your account, arrange and deliver lessons and take payment (performance of our contract with you).
• To keep learners safe, prevent fraud and abuse, look into complaints and safeguarding concerns, and keep the platform working (our legitimate interests).
• To keep financial and tax records (legal obligation).
• To quote your review on our website, only if you tick the box that allows it (your consent, which you can withdraw).
• We do not use your data for advertising and we do not sell it.

4Children's data

Many of our learners are children. Accounts for children should be created or approved by a parent or guardian, who can exercise the child's data protection rights on their behalf. We collect only what we need to teach and protect them.

5Who we share it with

• Your tutor, who sees your name and the details of the lessons you book with them.
• PayPal, to take payments.
• Our service providers, who process data only on our instructions: website and classroom hosting, email delivery (Resend) and file storage (Cloudflare R2).
• The police, a local authority or another public body, where the law requires it or a child's safety is at risk.

6International transfers

Some of our providers store or process data outside the UK and the European Economic Area, for example in the United States. Where they do, the transfer is protected by an adequacy decision or by standard contractual clauses (with the UK addendum).

7How long we keep it

• Account details: while your account is open, and deleted when you ask us to close it, unless we must keep something longer.
• Lesson recordings: normally deleted after about three months, unless needed for a safeguarding or complaint investigation.
• Payment and booking records: six years, as required for tax and accounting.

8Your rights

• See the personal data we hold about you, and get a copy.
• Have inaccurate data corrected.
• Have your data deleted, or its use restricted, where the law allows.
• Object to us using it on the basis of our legitimate interests.
• Receive data you gave us in a portable format.
• Withdraw consent at any time, where we rely on it.
• Ask by emailing [email protected]. We reply within one month.
• If you are unhappy, you can complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority in your EU country.

9Keeping it secure

All connections to our website and classroom are encrypted, passwords are hashed, and access to personal data is limited to staff who need it.