This is a placeholder draft, not legal advice. Have it reviewed against UK GDPR and the Data Protection Act 2018, check whether you need to register with the ICO, and fill in every TODO before launch.
Who we are
STEM Dorado Tutorials Ltd (company no. 17375628, registered in England and Wales) is the data controller for information collected through this website.
- Postal address: 74 Pintail Heights, 6 The Hyde, London NW9 6GP
- Email: info@stemdoradotutorials.com
- Phone: +44 7341 196526
- ICO registration number: number, if registered
Cookies and tracking
This website does not use cookies, analytics or advertising trackers. We don’t show a cookie banner because there is nothing to consent to.
- Our web fonts are loaded from Google Fonts, which receives your IP address to deliver them. Google Fonts does not set cookies.
- Bookings are made on Google Forms. When you follow a booking link you leave this site, and Google’s own privacy policy and cookies apply there.
- The contact form on this site is processed by our host, Netlify.
- If our staff sign in to the admin area, a login token is stored in their own browser. Public visitors never get one.
If we ever want to add analytics, we will ask for your consent first.
What we collect
| When | What | Why |
|---|---|---|
| Booking (Google Form) | Student’s name, year group and school; parent or guardian’s name, email and phone number; any medical conditions or allergies; photo consent (yes or no). | To manage the booking, contact you, and keep your child safe during practical science. |
| Contact form | Your name, email, optional phone and year group, and your message. | To reply to you. |
| Payments | Invoice and payment records. | To take payment and meet accounting obligations. name the payment provider |
Children’s data
Our students are aged 11–16. We collect students’ details from their parent or guardian, not from children directly, and the booking form should ask the person filling it in to confirm they are the parent or guardian. add that question to the Google Forms
- Medical and allergy information is special category data. We collect it only to keep your child safe, show it only to authorised staff, and delete it when no longer needed. confirm the lawful basis and Article 9 condition, for example explicit consent
- Photos of sessions may be shared with parents or used in the STEM Dorado magazine or on our website. We only use photos of your child if you said yes on the booking form. You can withdraw consent at any time by emailing us.
- We never sell children’s data or use it for marketing.
- State whether students can see or request their own data, and how you meet the ICO Children’s Code where relevant.
Lawful basis
Confirm lawful bases, for example: contract (managing a booking), legitimate interests (replying to enquiries), legal obligation (financial records), explicit consent (medical information, photos).
Where your data is stored and who can see it
- Booking responses are stored in Google Forms / Google Sheets in our Google account. Access is limited to our team. confirm who has access
- Contact-form messages are stored by Netlify, our website host, and emailed to us.
- Our website content (testimonials, tutor profiles, session plans) is stored in Supabase. No booking or contact data is stored there.
- List any other processors, such as the email provider and payment provider.
How long we keep it
Set retention periods, for example: enquiries that don’t become bookings deleted after 12 months; student records kept for the current academic year plus N years; financial records kept for 6 years.
Your rights
Under UK data protection law you can ask to access, correct or delete your data, restrict or object to how we use it, and withdraw consent at any time. Email info@stemdoradotutorials.com. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
We will update this page if anything changes and show the date at the top.