Privacy Policy
Your privacy matters, and your child's matters more. This policy explains exactly what we hold, why, who else sees it, how long we keep it, and what you can ask us to do about it. It covers only data we actually process — if something isn't listed here, we don't collect it.
1Who controls your data
Ace A-Level Maths is the data controller for the personal data described in this policy. For any question, or to exercise any right in section 9, email support@acealevelmaths.com.
2The terms we use
- Personal data — any information that identifies a living person, directly or indirectly.
- Processing — anything done with personal data: collecting, storing, using, sharing, deleting.
- Controller — the organisation that decides why and how data is processed. For your data, that's us.
- Processor — a company that handles data on our instructions, such as our payment provider.
- Consent — a freely given, specific, informed and unambiguous agreement, given by a clear affirmative action. We never treat acceptance of our terms as consent to anything optional.
3Whose data we hold
Two groups: parents and guardians who enquire or enrol, and students, usually aged 16 to 18. Students are children in data protection law and are given particular care — see section 6.
4What we collect, why, and on what legal basis
| What | Why | Legal basis |
|---|---|---|
| Your name, email, phone number | To reply to your enquiry, arrange a call, administer your account | Steps before a contract, then performance of the contract |
| Student's first name, year group, exam board, current and target grade, and what you tell us about their difficulties | To assess suitability and to teach them properly | Our legitimate interest in assessing suitability and teaching effectively; performance of your contract |
| Work the Student submits, our marking of it, and their marks over time | To deliver the marking that is the core of the Programme, and report progress to you | Performance of the contract |
| Attendance and recordings of live classes | So students who miss a class can catch up; to review teaching quality | Our legitimate interest in delivering and improving the Programme |
| Payment records — amount, date, reference | To take payment and keep accounting records | Performance of the contract; legal obligation |
| Marketing preferences, if you opt in | To send the masterclass date or occasional updates | Your consent, withdrawable at any time |
What we do not collect: we do not take or store full card or bank details — those go straight to our payment providers. We do not collect location or GPS data, identity documents, or data from your social media accounts, and we do not buy data from anyone.
We do not ask for health or other special category data. If you volunteer something relevant to how we should teach the Student, we use it only for that and only with your consent.
5Class recordings
- Live classes are recorded so a student who misses one can catch up. A recording may capture a student's voice, name, camera image if on, and chat messages.
- Recordings are shared only with students in that cohort and their parents.
- They are never published, used in advertising, or shown outside the cohort without separate written consent that you can withdraw.
- A student who would rather not appear may keep their camera off and use the chat.
- Recordings are deleted at the end of the exam series in which that cohort sits its A-Level.
6Students under 18
- We contract with you, the parent or guardian — you provide the Student's details and you receive their reports.
- We collect the minimum we need to teach them.
- We do not market to students, profile them, or share their data with anyone for marketing purposes. Ever.
- A Student may ask us directly to see or correct their own data and we will help them, telling you as well unless that would not be in their interests.
7Who else sees the data
A small number of service providers process data on our behalf, under contract and only on our instructions. We can tell you exactly who they are at any time — just ask.
| Provider | What they handle | Where |
|---|---|---|
| Our website host and form provider | Website hosting and the enquiry form | UK / EU / USA |
| Our payment providers | Direct Debit and card payments | UK / EU / USA |
| Our email and file storage provider | Email, documents and secure storage | UK / EU / USA |
| Our video conferencing provider | Live classes and recordings | UK / EU / USA |
| Our scheduling provider | Call bookings | UK / EU / USA |
We never sell or rent your data, and we never share it with other tutoring businesses, agencies or advertisers. We disclose data only where the law requires it, or where there is a serious safeguarding concern about a child.
8Transfers outside the UK
Some providers are based outside the United Kingdom. Where we transfer data abroad we rely on one of the following, as applicable to that provider: UK adequacy regulations; the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or the UK Extension to the EU–US Data Privacy Framework.
9Your rights
Under UK GDPR you may ask us to: give you a copy of the data we hold about you or your child (a subject access request); correct it; delete it; restrict how we use it; provide it in a portable format; or stop using it where we rely on legitimate interests. Where we rely on consent you may withdraw it at any time, without affecting anything done beforehand.
Email support@acealevelmaths.com. We respond within one month, free of charge.
10How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that do not become enrolments | 12 months from your last contact |
| Student work, marking and marks | Until the end of the exam series, then 12 months |
| Class recordings | Until the end of the exam series |
| Contract and payment records | 6 years after the end of the tax year, as tax law requires |
| Marketing contacts | Until you unsubscribe, or 24 months of no engagement |
| Testimonials you have consented to | Until you withdraw consent |
11Security
Data is held in access-controlled accounts with strong passwords and two-factor authentication, and access is limited to what is needed to teach and administer the Programme. No system is perfectly secure, but we take appropriate measures and will notify you and the ICO of any breach where we are required to.
12Automated decisions
We make no decision about you or the Student by automated means, and we do not profile anyone.
13Cookies
Our website uses no advertising, targeting or analytics cookies, and sets no cookies that identify you. If you book a call, our scheduling provider may set cookies on its own booking page, governed by their policy. You can block or delete cookies in your browser settings; doing so will not stop our site working.
14Complaints
If you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office:
- Website: ico.org.uk/concerns
- Telephone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the chance to put things right first — please contact us before you do.
15Changes to this policy
If we change this policy we will update the date at the top, and email enrolled families where the change is significant.
Read our terms and conditions →