Privacy Policy
1. Introduction
1.1. This Privacy Policy explains how OpenTutor ("the Platform", "we", "our", "us") collects, uses, stores, and protects personal data of Students, Tutors, and others ("Users", "you") who engage with our services.
1.2. By using the Platform, you agree to the collection and use of your personal data in accordance with this Privacy Policy.
1.3. OpenTutor complies with the UK General Data Protection Regulation and the Data Protection Act 2018 ("UK GDPR").
2. Data We Collect
2.1. You will notice that there is a minimum (mandatory) category of personal data you need to provide our Platform to have and use your account with us. Please be aware that providing maximum (voluntary) category of personal data will increase your chance of benefiting from our services.
2.2. We collect and process the following categories of personal data:
• Personal Identification Data: Name, email address, phone number, profile picture, date of birth.
• Account Information: Login credentials, preferences, and communication history.
• Tutoring Information: Subject expertise, qualifications, availability, and reviews.
• Payment Information: Transaction history, payment method details (processed securely by third-party payment providers).
• Usage Data: Device type, browser type, IP address, pages visited, time spent on the Platform.
• Lesson Data: User voice, picture, and video.
• Algorithm and AI Training Data: We may use anonymized user data to improve our AI systems and algorithm functionality for better matching and platform efficiency.
3. How We Use Your Data
We use your data for the following purposes:
• To provide and manage the matching service between Students and Tutors.
• To process payments securely through third-party payment providers.
• To ensure compliance with UK safeguarding laws (DBS checks for Tutors, where applicable).
• To improve user experience and enhance Platform security.
• To comply with legal obligations and prevent fraud.
4. Legal Basis for Processing Data
We process personal data based on the following legal grounds:
• Contractual Necessity: Data processing is required to provide our services.
• Legitimate Interests: To enhance platform security, prevent fraud, and improve services.
• Legal Obligations: Compliance with UK data protection laws, tax regulations, and safeguarding requirements.
• Consent: When Users opt-in for marketing communications.
5. Data Sharing and Third Parties
5.1. We may share data with:
• Third-party payment processors (e.g., Stripe, PayPal) to handle transactions securely.
• Verification services for identity checks and DBS checks (where applicable).
• Regulatory bodies or law enforcement when required by law.
• Analytics providers to improve our Platform functionality.
5.2. We do not sell or rent personal data to third parties.
5.3. We do our best to use data servers and third- party services located in the U.K. to avoid international transfer of personal data.
6. Data Storage and Security
6.1. We implement security measures to protect personal data from unauthorized access, loss, misuse, or disclosure.
6.2. Personal data is stored on secure servers, and access is limited to authorized personnel.
6.3. Data retention periods:
• Account information: Stored as long as the account is active, archived as legally valid evidence in case of disputes pursuant to statute of limitations.
• Payment data: Retained for legal compliance with financial regulations by third parties.
• Electronic records and logs: Retained as legally valid evidence in case of disputes pursuant to statute of limitations.
6.4. If there is a personal data breach that is likely to result in a high risk of adversely affecting your rights as the data subject, we would inform you and the respective data protection agencies as to the accidents without undue delay.
7. User Rights
7.1. Under UK GDPR, you have the following rights:
• Right to Information: Be informed about how your data is being used
• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of personal data under certain conditions
• Right to Restrict Processing: Limit how your data is used in certain circumstance
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to data processing based on legitimate interests
7.2. To exercise any of these rights, contact us at support@opentutor.co.
9. Children's Privacy
9.1. The Platform is not intended for children under 13 years old. Users under 18 must have parental or guardian consent to use the Platform. Thus, persons under 18 will need to ask their parents or guardians to set up an account on the Platform that they may use under their supervision.
9.2. If we learn that a child's data has been collected without appropriate consent, we will delete it promptly.
10. Advertisement Communication
10.1. Our primary method of communication is the e- mail you provide when opening an account with us. You may be contacted by us through your e- mail for advertisement, promotion or solicitation purposes in connection with our services. In case you want to revoke your authorization to be contacted for advertisement purpose, please contact us at support@opentutor.co.
11. Your Responsibility
11.1. We do not control the content you upload to our Platform. In case you upload fake or stolen personal data, we are not responsible for the violation of applicable law caused by your action.
11.2. We do not control the content you provide through the integrated third- party services. In case you write, say, share or upload illegal matters, we are not responsible for the violation of applicable law caused by your action.
12. Amendments to This Privacy Policy
12.1. We may change this Privacy Policy partially or fully periodically and unilaterally with no need to notify you in advance or obtain your confirmation about the change. You will be notified of changes in case you have an account with us.
12.2. To avoid any doubt, continued use of the website after changes constitutes your acceptance of the changed Privacy Policy.
13. Contact Information
Your first and primary point of contact for your requests in connection with this Privacy Policy, is us. Please contact us at support@opentutor.co. However, in case you think your request is not fulfilled, you can also lodge a complaint with a supervisory authority. In the United Kingdom this is Information Commissioner"s Office and there contact details can be found at ico.org.uk.