Privacy Policy

1. Who we are

Teacher Tash is the trading name of [Natasha's full name], a sole trader providing private English tuition to children. For the purposes of data protection, [Natasha] is the "data controller" responsible for your personal information.

Contact: [email protected] · [business postal address, if applicable].

2. What information we collect

We only collect the information you choose to give us through the booking form on this website:

• Your name and email address (the parent/guardian)
• Your child's first name and age
• Where you are, your child’s level of English, and the times that suit you
• Any message you choose to write about your child's needs or goals

If you go on to book lessons, we may also keep the records needed to deliver them (lesson times, progress notes, and payment records).

We do not collect browsing data, use tracking cookies, or use advertising trackers.

3. Why we use it, and the legal basis

We use your information to:

• Respond to your enquiry and arrange a free trial lesson (legal basis: taking steps at your request before a contract)
• Deliver and administer lessons, and keep you updated on progress (legal basis: the contract for lessons)
• Keep basic financial records (legal basis: legal obligation)
• Keep a record of your child’s learning — the lessons they finished, the stars they earned, the questions they found tricky, anything they drew, and Teacher Tash’s short notes on how a lesson went (legal basis: our legitimate interests in teaching your child well and reporting their progress to you). The contract for lessons is with you, not with your child, which is why we rely on legitimate interests for their learning record rather than on that contract or on your child’s consent. You can object at any time and we will stop.

4. Who we share it with

Your information is not sold or shared for marketing. It may be processed by a small number of trusted services that act on our behalf ("data processors"):

• Cloudflare, Inc. — hosts this website and stores enquiries and pupil learning records in its database, in Cloudflare’s Western Europe region.
• A copy of the pupil records is also taken each day to Teacher Tash’s own computer, so nothing is lost if the service is unavailable.
• Your email provider, when we reply to you

We only share information where necessary, under contract, and the providers listed only use it to provide their service to us.

5. International transfers

The information is stored in Cloudflare’s Western Europe region, and a daily copy is kept in the United Kingdom. Cloudflare is a US company, so where it processes data outside the UK we rely on its published safeguards, including Standard Contractual Clauses and the UK Addendum. If your child lives outside the UK, their information still travels to and is held in Europe — it is not stored in the country where they live.

6. How long we keep it

We keep things for a stated time, not “a reasonable period”:

• An enquiry that does not become lessons — 12 months, then deleted.
• Your child’s drawings — 12 months.
• Your child’s learning record and Teacher Tash’s notes — 2 years after their last lesson.
• Invoices and payment records — 6 years, because tax rules require it.

You can ask for your child’s information to be deleted sooner, at any time, and we will do it (see below).

For children — what we keep about you

7. Children's data

Enquiries reach us only through a parent or guardian who fills in the form. We never market to children.

Once a parent has arranged lessons, Teacher Tash may give the child a short sign-in code so they can do a lesson on their own device. When they do, we keep what they do in that lesson — which lessons they finished, the date, the stars they earned, the stickers they collected, the questions they found tricky, and anything they draw on screen with the pen. Teacher Tash also writes short notes about how a lesson went, for her own teaching and for reports to you. Your child is never shown those notes.

We do not ask a child for their address, their age, their school, their phone number or their email. Their first name is the only personal detail we hold about them, and it is the name you gave us.

8. Your rights

Under UK GDPR you have the right to:

• Be informed about how your data is used (this policy)
• Access the data we hold about you
• Have inaccurate data corrected
• Have your data deleted ("the right to be forgotten")
• Restrict or object to how we use it
• Receive a copy of your data in a portable format

To use any of these rights, just email [email protected]. If you're unhappy with how your data has been handled, you can also complain to the Information Commissioner's Office (ICO).

9. Cookies

We use one cookie, and only if your child signs in to do a lesson. It remembers that this device belongs to your child so they do not have to type their code every time. It lasts a year, it cannot be read by any other website, and it carries nothing about them beyond that. It is what the rules call a “strictly necessary” cookie: without it, signing in would not work at all.

There are no advertising cookies and no analytics. If that ever changes, this page will be updated and you will be asked first.

10. Security

We take reasonable steps to protect your information, but no method of transmission or storage is completely secure. We only hold what is necessary and delete it when it's no longer needed.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above will always reflect the most recent version.