Legal

Privacy Notice

Last updated 14 October 2026

1. Who we are

Cloudia Tutoring is a trading name of Claudia Edwards, who is the "controller" of your personal data. This means we decide how and why your data is used.

NameClaudia Edwards, trading as Cloudia Tutoring
Emailhello@cloudiatutoring.com
Phone / WhatsApp07902 923538

2. What personal data we collect

WhatExamplesWhere it comes from
Enquiry and booking detailsName, email, phone or WhatsApp number, student's first name and year group, subjects, goals, preferred days and timesYou, when you fill in a form or message us
Account detailsName, email, phone number, password (stored securely by our authentication provider, never in plain text), date of birth, two-step verification (2FA) settingsYou, when you sign up
Parent or guardian detailsName, relationship to the student, phone and emailYou, when you sign up (required if the student is under 18)
Lesson recordsDates, times, subject, status (for example booked, completed, cancelled), reminders sent, progress notes written by ClaudiaCreated by us as lessons happen
Payment recordsPackage or lesson requested, amount, payment status and dates. We do not collect card details on this website.You and us
MessagesEmails, WhatsApp messages or form messages you send usYou
Email delivery informationWhether our emails were delivered or bouncedOur email provider
Technical dataIP address, browser type, device type, pages requested, error logs and security logsAutomatically, when you use the site
ReviewsIf you review us on Trustpilot, what you post is public on TrustpilotYou

We don't knowingly collect "special category" data (such as health information) and ask you not to put it in forms. If a student's learning needs are relevant, tell Claudia in conversation.

3. How and why we use your data (lawful bases)

PurposeDataLawful basis (UK GDPR Article 6)
Reply to enquiries and arrange your free intro callEnquiry and contact detailsTaking steps at your request before a contract; legitimate interests (answering people who contact us)
Create and manage your account; arrange, deliver and remind you about lessons; keep lesson recordsAccount, guardian, lesson detailsContract (providing the lessons you ask for)
Take and record payments; keep accountsPayment recordsContract; legal obligation (tax and accounting records)
Send service emails: confirmations, reminders, changes, password resets, receiptsContact and lesson detailsContract; legitimate interests (keeping you informed about your lessons)
Progress updates and monthly summariesLesson recordsContract; legitimate interests
Keep the website and accounts secure (login protection, 2FA, spam and abuse prevention, error logs)Technical data, account dataLegitimate interests (keeping our service safe)
Invite you to leave a review, and send occasional news or updates by emailName, emailConsent (you can say no and withdraw it at any time; see section 9)
Understand how the website is usedAnonymous technical dataLegitimate interests, or consent where cookies or similar technologies are used (see our Cookie Notice)
Protect our legal rightsRelevant recordsLegitimate interests; legal claims

We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not do profiling.

4. Children and young people

Our lessons are used by students from primary age to GCSE, so we take extra care.

  • If the student is under 18, we require a parent or guardian's contact details (name, relationship, phone number and, optionally, email) when the account is created. We can't create the account without them. The same applies to a request for an intro call.
  • A parent or guardian is welcome to create and manage the account for their child, and to give permission for us to process the student's data.
  • We only collect the data we need to run lessons, and we do not use children's data for marketing or profiling.
  • Parents and guardians can ask to see, correct or delete a child's data at any time.

5. Who we share your data with

We never sell your data. We share it only with the following providers, who process it for us under contracts that require them to protect it, and where relevant when the law requires it.

ProviderWhat they doWhere data is held
SupabaseDatabase and secure sign-in (accounts, lessons, bookings, payment records)UK (London region)
CloudflareHosting and delivery of this website, DNS, security, email forwarding for hello@cloudiatutoring.comGlobal network
Cloudflare TurnstileA "are you a real person" check on forms and sign-up, which may process your IP address and browser informationGlobal network
BrevoSending our emails (service emails, reminders, summaries; marketing emails only if you've said yes)EU
TrustpilotOnly if you choose to leave a review. Trustpilot is responsible for what you post there.See Trustpilot's own notice
Our video-call and whiteboard providerRuns live lessonsDepends on the provider
Payment providers (your bank, Revolut or PayPal, depending on how you pay)Receive payments you make to ClaudiaDepends on the provider
UmamiCookie-free website statistics: counts visits in an anonymous way, so we can improve the siteEU
Professional advisers (for example an accountant)Accounting and taxUK or EU

We may also share data with regulators, the police or courts if the law requires us to.

6. International transfers

Our main database is in the UK. Some providers (for example Cloudflare and Trustpilot) may process data outside the UK. Claudia is also based in Italy, and some data may be accessed from there. Where data leaves the UK, we rely on UK-approved safeguards such as the UK's adequacy regulations (which cover the European Economic Area), the UK International Data Transfer Agreement or Addendum, or other lawful mechanisms.

7. How long we keep your data

DataHow long
Enquiries that don't lead to lessons12 months after the last contact
Account and lesson recordsWhile your account is open, then up to 24 months after your last lesson
Parent/guardian detailsWhile the student's account is open; deleted with it
Payment and accounting records6 years (tax and accounting rules)
Email delivery logs12 months
Security and error logsUp to 90 days
Marketing consent recordWhile consent is active, plus the time needed to show we had it

When we no longer need data, we delete or anonymise it.

8. Your rights

Under UK GDPR you have the right to:

  • be informed about how your data is used (this notice);
  • access your data (a "subject access request");
  • correct data that's wrong;
  • erase your data, in some situations;
  • restrict how we use it, in some situations;
  • data portability, in some situations;
  • object to uses based on legitimate interests;
  • withdraw consent at any time, where we rely on it.

To use any of these rights, email hello@cloudiatutoring.com. We'll reply within one month. We may need to check your identity first. There is normally no charge.

9. Marketing emails and reviews (PECR)

We only email you news, updates or review invitations if you have said yes. This is separate from service emails (such as lesson confirmations and reminders), which you will always receive because they're part of the service. You can withdraw consent at any time using the "unsubscribe" link in any email, in your account settings, or by emailing hello@cloudiatutoring.com. We will never offer rewards or discounts in exchange for reviews, and we invite everyone eligible to review in the same way.

10. Keeping your data secure

We use sensible measures to protect your data, including encrypted connections (HTTPS), password protection, optional two-step verification, restricted access to data and trusted providers. No online service can be perfectly secure, so please keep your password private. If there's ever a data breach that risks your rights, we'll tell you and the Information Commissioner's Office (ICO) as the law requires.

11. Cookies and similar technologies

See our Cookie Notice.

12. Complaints

Please contact us first at hello@cloudiatutoring.com so we can try to put things right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

13. Changes to this notice

We'll update this notice if we change how we use data, and show the date at the top. If a change matters to you, we'll tell you by email or on the site.

14. Contact us

Claudia Edwards, trading as Cloudia Tutoring · hello@cloudiatutoring.com