Privacy Policy

Combo Tutors Academy (“we”, “us”, or “our”) is committed to protecting the privacy of students, parents, tutors, and website visitors. This policy explains how we collect, use, store, and share personal information when you use our website, learning platform, and tutoring services.

The policy applies to families and tutors we work with in the UK, UAE, Saudi Arabia, Qatar, Kuwait, Bahrain, Oman, Hong Kong, and other locations where our services are available.

Combo Tutors Academy Ltd is registered in England and Wales and is the data controller for the personal information described in this policy.

We may collect the following types of information:

• Personal details: your name, email address, phone or WhatsApp number, account details, and billing contact information.
• Student information: age or year group, school, subjects, curriculum, exam board, academic level, learning goals, progress, and tutor feedback.
• Booking and service data: lesson requests, availability, schedules, attendance, homework, resources, and support requests.
• Communication data: enquiries and messages sent through our forms, learning platform, WhatsApp, email, or phone.
• Payment data: transaction references, payment status, and billing records. Payment providers process full card or bank details directly.
• Usage and technical data: pages visited, device and browser information, IP address, diagnostic events, and interaction data.
• Cookies and similar technologies: information used to remember preferences, maintain essential features, and understand website performance. See our Cookie Policy for details.

We use personal information only where we have a lawful basis. The main purposes and legal bases are shown below.

We do not sell personal information. We share information only when needed to provide, secure, and administer our services.

• Assigned tutors: limited student, curriculum, scheduling, and learning information needed to prepare and deliver lessons.
• Payment providers: Stripe and, where offered, PayPal or bank transfer providers. We do not store full card numbers.
• Lesson and communication providers: services such as Google Meet, Zoom, Microsoft Teams, email, and WhatsApp where they are used to arrange or deliver tutoring.
• Technology providers: hosting, analytics, security, customer support, and platform suppliers acting on our instructions.
• Authorities and professional advisers: where disclosure is required by law or reasonably necessary to protect a person, our users, or our legal rights.

We work with families, tutors, and service providers in several countries. Your information may therefore be accessed or processed outside the UK, including in countries whose data protection laws differ from UK law.

Where UK data protection law requires safeguards for an international transfer, we use an approved safeguard appropriate to the transfer. This may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to Standard Contractual Clauses, or another lawful mechanism. Contact us if you would like information about the safeguard used for a particular transfer.

We keep personal information only for as long as it is needed for the purpose for which it was collected and to meet legal, accounting, safeguarding, security, and dispute-resolution requirements.

• Account, booking, and lesson data is generally kept while an account or tutoring relationship is active, followed by a limited period where it is needed for service records, safeguarding, or legal claims.
• Payment and transaction records are kept for the period required by applicable tax and accounting law.
• Student progress and academic records are kept while they support active tuition, continuity of learning, safeguarding, or an authorised records request.
• Marketing preferences are kept until you unsubscribe, withdraw consent, or the information is no longer needed.

When information is no longer required, we delete or anonymise it. You can also review our account deletion process.

Depending on your location and the circumstances, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of information, subject to legal and contractual limits.
• Restrict or object to certain uses of your information.
• Request transfer of information in a portable format where the right applies.
• Withdraw consent at any time where we rely on consent.

To exercise a right, email us using the contact details in Section 13. We may ask for information needed to verify your identity or parental authority before we act on a request.

If you are in the UK and believe we have not handled your information properly, you may complain to the Information Commissioner's Office (ICO). You may also contact the data protection authority in your country.

We use technical and organisational measures designed to protect personal information from unauthorised access, alteration, loss, misuse, or disclosure. Measures may include access controls, secure connections, account authentication, provider reviews, and staff or tutor access limited to what is needed for their role.

No online service can guarantee absolute security. Please protect your account credentials and contact us promptly if you believe an account or communication has been compromised.

If you choose Google sign-in, we request basic account information needed to authenticate you, such as your name, email address, and profile identifier. Our standard Google sign-in does not request access to your Google Calendar.

Tutoring sessions may use Google Meet. In that case, a meeting link, session time, and limited participant information may be processed to arrange or provide the lesson. We do not sell Google user data or use it for advertising or to train general-purpose AI models.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You may disconnect Google sign-in or request deletion of associated account data by contacting us.

We use essential cookies to operate the website and platform. With your choices, we may also use analytics or preference cookies to understand website use and improve the experience. You can manage supported choices through our consent tools and your browser settings. Read the Cookie Policy for the types of cookies we use and how to control them.

Our services support school-age students. A parent or legal guardian must make or authorise accounts, bookings, and payments for a student under 18.

• We usually collect a student's school, year group, curriculum, subjects, and learning goals from the parent or guardian during enquiry or booking.
• Where a student uses the learning platform or attends a lesson directly, we limit collection and access to what is needed for tutoring, safety, support, and progress.
• We do not use children's personal information for targeted advertising.
• Parents and guardians may ask to access, correct, or delete their child's information, subject to safeguarding and other legal requirements.

We may update this Privacy Policy when our services, providers, or legal obligations change. We will publish the revised version on this page and update the date shown above. Please review this page periodically for the current version.