Privacy Policy

This privacy policy notice for Tutology (‘Company’, ‘we’, ‘us’, or ‘our’) describes how and why we might collect, store, use and/or share (‘process’) your information when you use our services (‘Services’) such as when you:

• Visit our website at https://www.mytutology.com, or any website of ours that links to this privacy notice.
• Engage with us in other related ways, including any sales, marketing, or events.

what do we collect?

Personal information you disclose to us

Personal Information Provided by You:

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we may collect may include the following:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Usernames
• Passwords
• Contact preferences
• Contact or authentication data
• Billing addresses

Sensitive Information:

When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Student data

All personal information that you provide to us must be true, complete and accurate and you must notify us of any changes to such personal information.
Information automatically collected
We automatically collect certain information when you visit, use or navigate the Services. This information does not revela your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain security and operation of our Services, and for our internal analytics and reporting purposes. We also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage and performance information our servesrs automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include IP addresses, device information, browser type, settings and information about your activity in the Services (eg, date/time stamps associated with usage, pages and files viewed, searches, which features you use and other actions you take), device event information (eg, system activity, error reports and hardware settings).
• Device Data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system and system configuration information.
• Location Data. We collect location data, such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the services. For example, we may use GPS and other technologies to collect geolocation data. That tells us your current location based on your IP address. You can opt out of allowing us to collect this information, either by refusing access to the information or by disabling your location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

how do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log into your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
• To respond to user enquiries/offer support to users. We may process your information to respond to your enquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To fulfil and manage your bookings. We may process your information to fulfil and manage your bookings, payments and refunds made through the Services.
• To enable user-to-user communications. We may process your information if you choose to use any of our offerings that allow for communication with another user.
• To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications. We may process the personal information you send to use for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• To deliver targeted advertising to you. We may process your information to develop and display personalised content and advertising tailored to your interests, location and more.
• To protect your Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
• To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as prevent harm.

what legal bases do we rely on to process your information?

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent
  We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract
  We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or t your request prior to entering a contract with you.
• Legitimate Interests
  We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services.
  • Develop and display personalised and relevant advertising content for our users.
  • Analyse how our services are used so we can improve them to engage and retain users.
  • Support our marketing activities.
  • Diagnose problems and/or prevent fraudulent activities.
  • Understand how our users use our products and services so we can improve user experience.
• Legal Obligations
  We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests
  We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party such as situations involving potential threats to the safety of any person.

when and with whom do we share your personal information?

Vendors, Consultants and Other Third-Party Service Providers
We may share your data with third-party vendors, service providers, contractors, or agents (‘third parties’) who perform services for us on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies like web beacons and pixels to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

how do we store your information?

security & storage

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process.
We will take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way, such as password-protected files or by limiting access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
When personal data (such as a credit card number) is transmitted to other websites, it is protected using encryption, such as the Secure Socket Layer (SSL) protocol.

However, despite our safeguarding efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. So, we cannot promise or guarantee that hackers, cybercriminals or other unauthorised third parties will not be able to defeat our security and improperly collect, access, deal or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk.
You should only access the services within a secure environment.

how long is the information kept for?

We will only keep your personal information for as long as it is necessary for the purposes set out in this notice. Unless a longer retention is required or permitted by law, such as tax, accounting or other legal requirements.
We will hold the records for a period of 6 years, to satisfy legal obligations, including those related to the procurement of public contracts.
The exemptions to this period are online lesson recordings which are held for 1 year, and any DBS certificates, which are only held for a 6-month period (details relating to these certificates are kept for the full 7 years to demonstrate our legitimate awarding of the DBS-checked status).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information. Or if this is not possible (ie your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing, until deletion is possible.

what are your privacy rights?

Under the General Data Protection Regulation, you have a number of important rights free of charge. In summary, those include rights to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.
• Rights in relation to automated decision making on Tutor ranking in search results.

If you wish to exercise any of the rights set out above, please contact us. We will consider and act upon any request in accordance with applicable data protection laws.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent by contacting us using the details provided below.

Opting out of marketing and promotional communications. You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing list, however, we may still communicate with you: to send you service-related messages that are necessary for the administration and use of your account; to respond to service requests; for other non-marketing purposes.

cookies

We use Cookies and you can adjust your browser to restrict or block cookies; however disabling or blocking cookies may cause some parts of the website to become inaccessible and you may not be able to fully access all of the features on the website.

third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and read through the privacy policy applicable to the website in question.

changes to our notice

We will notify you of any changes to this notice either by email, via your online portal or by any other means that is likely to make you aware of the changes. The updated version will be indicated by an updated ‘revised’ date, and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

how can you contact us?

To exercise all relevant rights, queries, or complaints in relation to this policy or any other data protection matter, please in the first instance email us at admin@mytutology.com.