Privacy, Safeguarding & Terms

Privacy Policy

Who we are

The Andalus Academy Ltd (“we”, “us”) is a company registered in England & Wales (company number 17278147) providing private tutoring in Oxfordshire and online. We are the data controller for the information described here. You can contact us at info@theandalusacademy.co.uk or 07467 050006, or by post at Oxfordshire, OX16 0BS, United Kingdom. As a controller of personal data, we are completing our registration with the UK Information Commissioner's Office (ICO); our registration reference will be added here once issued.

The information we collect

• Parents/guardians: name, email, phone number, home address and postcode.
• Students: first name, school year/level, the subjects booked, lesson schedule, and lesson notes written by the tutor. We deliberately keep student data to the minimum needed to deliver lessons.
• Accounts: login email and a securely hashed password. We never store passwords in plain text.
• Payments: handled by Stripe. We receive a confirmation and limited details (such as the last four digits and payment status); we never see or store full card numbers.
• Lessons: online lessons run over a video service (Daily.co). Recordings are only made when enabled and are stored privately.
• Technical: minimal data stored in your browser (such as your theme choice and login session) to make the site work.

Why we use it and our lawful basis

• To provide tutoring (scheduling, lessons, notes, communication) — performance of our contract with you.
• To take payment — performance of our contract and our legal obligations (such as tax records).
• To keep students safe — our legitimate interest and legal obligations around safeguarding.
• To improve and secure the service — our legitimate interest, balanced against your privacy.

Who we share it with

We do not sell your data. We share it only with the processors needed to run the service: Supabase (database and authentication hosting), Stripe (payments), Daily.co (video lessons), and our email provider for booking confirmations. Each is bound to protect your data and use it only on our instructions. We may disclose information where the law requires it, or to protect a child from harm.

Where it is stored

Your data is held in our managed Supabase database (a GDPR-compliant hosting provider) and protected by row-level security so each account can only see its own information. Where any provider processes data outside the UK, appropriate safeguards (such as the UK International Data Transfer Agreement) are in place.

How long we keep it

We keep account and lesson records for as long as you have an account with us, and afterwards only as long as needed for legal, tax and safeguarding reasons (typically 6 years for financial records, in line with HMRC requirements). You can ask us to delete your account at any time — see Your rights.

Cookies and local storage

We do not use advertising or tracking cookies. We use your browser's local storage only for essential functions (keeping you logged in and remembering your light/dark theme).

Children's data

Because we teach children, we take particular care with their information and follow the ICO's Age Appropriate Design Code (the “Children's Code”).

• A parent or legal guardian sets up the account and provides consent. Bookings are made by the adult, not the child.
• We collect only the minimum about a student: their first name, level, subjects and lesson notes.
• A student login is optional. When used, the student only ever sees their own upcoming lessons and notes — never any payment, contact or other family information.
• We do not show advertising to students, do not profile them, and do not use their data for marketing.
• Tutor lesson notes are kept factual and educational. Parents can request to see any notes about their child.
• Parents/guardians can review, correct or delete their child's information at any time by contacting us.

If you believe we hold information about a child without proper consent, contact us at info@theandalusacademy.co.uk and we will resolve it promptly.

Safeguarding statement

The welfare of every child is our highest priority. We are committed to providing a safe learning environment, online and in person.

• Our tutors hold a current enhanced DBS check.
• Online lessons take place in a private virtual room. We recommend lessons happen in a shared family space and that a parent is contactable nearby.
• Communication about a student is with the parent/guardian. Tutors do not contact students privately outside the platform.
• Our designated safeguarding lead is Zen Alabeedin (Founder & Principal Tutor), reachable at info@theandalusacademy.co.uk.
• Any safeguarding concern is taken seriously and, where necessary, reported to the relevant local authority. In an emergency, always call 999.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our use of your data, and to data portability. To exercise any of these, email info@theandalusacademy.co.uk and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Terms of Service

Booking and payment

Lessons are booked through your account and confirmed by a tutor. Fees are shown at the time of booking and are payable via Stripe. Prices may change, but any change will not affect lessons already booked and paid for.

Cancellations and rescheduling

Please give at least 24 hours' notice to cancel or reschedule a lesson. Lessons cancelled with less than 24 hours' notice are charged in full and are non-refundable (the lesson, or the credit used to book it, is forfeited). Refund requests are handled fairly and in line with your consumer rights.

Conduct

We expect courteous behaviour from students, parents and tutors. We may decline or end service in cases of abusive, dishonest or unsafe conduct.

Reviews

Reviews left by parents are published as submitted. We may remove a review that is abusive, fraudulent, or breaches these terms.

Liability

We provide tutoring with reasonable care and skill, but we cannot guarantee specific grades or outcomes. Nothing in these terms limits liability where it would be unlawful to do so.

Changes

We may update these terms and this policy. The current version always lives on this page, with the date shown at the top.

Contact

Questions about this page? Email info@theandalusacademy.co.uk or message us on WhatsApp at 07467 050006.