Skip to content

General Data Protection Regulation (GDPR) Policy for British Expert Education

Effective Date: 01/01/2024

Introduction

The General Data Protection Regulation (GDPR) came into force on 25th May 2018 and requires all businesses to issue a privacy statement to clients and contacts regarding how their data is collected, processed, and stored. British Expert Education is committed to complying with the principles of data protection outlined in the GDPR. This policy outlines the measures we take to ensure the protection of personal data collected and processed during the provision of our tutoring services.

  1. Data Controller

British Expert Education acts as the Data Controller and is responsible for collecting and processing personal data for tutoring purposes. Our contact details for GDPR-related enquiries are as follows:

Email: info@britishexperteducation.co.uk

  1. Types of Personal Data Collected

We collect the following categories of personal data from parents/guardians and students:

  • Contact Information: Name, address, email address, and phone number.
  • Student Information: Name, age, academic year group, school or educational institution attended, subjects studied, and academic performance.
  • Parent/Guardian Information: Name, contact details, and any specific instructions or requirements related to tutoring.
  • Assessment and Progress Records: Information about the student’s performance, assessments, and progress during tutoring sessions.
  • Additional Information: Any relevant information provided voluntarily by the parent, guardian, or student, such as medical conditions or special educational needs.
  1. Purposes of Processing Personal Data

The personal data collected will be used for the following purposes:

  • Communication: To establish and maintain effective communication with the student, parent, or guardian regarding tutoring arrangements, session details, and progress updates.
  • Customization: To assess the student’s academic needs and develop tailored tutoring plans.
  • Monitoring and Feedback: To track the student’s progress, provide feedback, and adjust the tutoring approach as necessary.
  • Child Protection: Communication will occur through parental contact details, such as a parent’s email or phone number, to ensure child safety.
  • Legal Compliance: To fulfill any legal or regulatory obligations that may arise.
  1. Legal Basis for Processing Personal Data

The processing of personal data is necessary for the performance of tutoring services and is based on one or more of the following legal grounds:

  • Consent: When explicit consent has been obtained from the parent, guardian, or student for specific purposes.
  • Contractual Necessity: When processing is necessary to fulfil the terms of the tutoring agreement.
  • Legal Obligation: When processing is required to comply with applicable laws or regulations.
  1. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Upon completion of tutoring services or termination of the contract, personal data will be securely deleted or anonymized, unless retention is necessary for legal or legitimate reasons (e.g., for accounting or tax records).

  1. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Regularly updating software and systems to maintain their security.
  • Using strong passwords and access controls to restrict access to data.
  • Encrypting sensitive and confidential information.
  • Restricting access to personal data on a need-to-know basis.
  • Ensuring that all self-employed tutors and staff are trained in data protection practices and have read and signed a commitment to follow data security protocols.
  1. Data Sharing and Third Parties

We may share personal data with the following parties when necessary:

  • Parents/Guardians: Information about the student’s progress, feedback, and any relevant details related to tutoring will be shared with parents or guardians.
  • Educational Institutions: With the consent of the parent or guardian, we may share relevant information with the student’s school or educational institution to coordinate tutoring efforts and support academic progress.
  • Local Authorities: If we have concerns regarding the safety or welfare of the student or parent/guardian, we may share information with local authorities such as the police or social services, in line with child protection obligations.
  1. Individual Rights

Under the GDPR, individuals have the following rights regarding their personal data:

  • Access: To access their personal data and obtain information about how it is processed.
  • Rectification: To correct any inaccuracies or incomplete personal data we hold.
  • Erasure: To request the deletion of personal data, subject to legal obligations or legitimate reasons for retention.
  • Restriction: To restrict the processing of personal data under certain circumstances.
  • Objection: To object to the processing of personal data for specific purposes.
  • Data Portability: To receive a copy of their personal data in a commonly used format or have it transferred to another data controller, where technically feasible.
  • Withdraw Consent: To withdraw consent for the processing of personal data, where consent is the legal basis for processing.

To exercise any of these rights or for any inquiries regarding the processing of personal data, please contact us using the information provided above.

  1. Policy Updates

We reserve the right to update or modify this GDPR policy as necessary to reflect changes in legal or operational requirements. Any updates will be communicated through appropriate channels, and the revised policy will be made available on our website and upon request.