Privacy Policy

Organisation: Edustep
Website: edustep.co.uk
Contact email: admin@edustep.co.uk

Edustep respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, store, and safeguard personal data when you interact with Edustep, including when we arrange tutoring services, communicate with families and tutors, and use third-party platforms such as WhatsApp, email, Zoom, and Google Meet.

1. Information We Collect

Edustep collects personal information that is necessary to provide tutoring services and operate effectively.

This may include:

Personal and Contact Information

  • Names of students, parents/carers, and tutors

  • Email addresses and phone numbers

  • Messaging contact details (e.g. WhatsApp)

Student Information

  • Age or date of birth

  • Educational level (e.g. GCSE, A-Level)

  • Learning needs, academic goals, or relevant educational information shared by parents or students

Tutor Information

  • CV details, references, and qualifications presented

  • Right to work information

  • DBS status (where applicable)

Communication and Usage Data

  • Messages exchanged via WhatsApp or email

  • Lesson scheduling and attendance information

  • Feedback, progress updates, and service communications

  • Technical data such as IP address or device/browser information when accessing our website

Edustep does not intentionally collect unnecessary personal data.

2. How We Use Your Information

Edustep uses personal information for the following purposes:

  • Arranging and managing tutoring services

  • Matching students with suitable tutors

  • Communicating with parents, students, and tutors

  • Sharing educational materials and scheduling updates

  • Monitoring service quality and student progress

  • Responding to enquiries and providing customer support

  • Meeting safeguarding, legal, and regulatory obligations

  • Improving Edustep’s services and internal operations

Personal data is only used where there is a lawful basis to do so.

3. Children’s Data

Edustep provides tutoring services primarily to children and young people under the age of 18. We recognise that children’s personal data requires a higher level of protection.

  • Personal data relating to children is typically provided by parents or carers

  • Communications involving students are structured to include parental oversight where appropriate

  • Children’s personal data is processed only for educational, administrative, and safeguarding purposes

Safeguarding the welfare of children is a core priority for Edustep. Where the processing or sharing of personal data relates to safeguarding concerns, this will be handled in accordance with Edustep’s Safeguarding & Child Protection Policy. Parents, carers, tutors, and staff are encouraged to refer to Edustep’s Safeguarding & Child Protection Policy for further details on how safeguarding matters are identified, managed, and escalated.

Parents or carers may contact Edustep at any time regarding their child’s personal data.

4. Communications and Messaging (WhatsApp, Email, Video Platforms)

Edustep uses third-party communication tools to deliver its services, including:

  • WhatsApp (for group communication, scheduling, and sharing educational materials)

  • Email

  • Zoom or Google Meet (for live tutoring sessions)

Edustep does not own or control these platforms but takes reasonable steps to ensure they are used appropriately, professionally, and in line with safeguarding expectations.

Messages and communications may be retained where necessary for:

  • Operational and administrative purposes

  • Quality assurance

  • Safeguarding, complaint handling, or dispute resolution

Tutors and staff are instructed not to use personal data for any purpose outside of Edustep services.

5. Sharing Your Information

Edustep does not sell personal data.

We may share personal information only in the following circumstances:

With Service Providers

Trusted third-party providers that support our operations (for example, communication or administrative platforms). These providers are required to handle data securely and only for agreed purposes.

Safeguarding and Legal Reasons

Where necessary to protect a child, fulfil safeguarding responsibilities, or comply with legal obligations, including responding to lawful requests from authorities. Further information about Edustep’s safeguarding responsibilities and procedures can be found in Edustep’s Safeguarding & Child Protection Policy.

Business Changes

In the event of a merger, acquisition, or business transfer, personal data may be transferred as part of that process.

Edustep does not share personal contact details with third parties for marketing purposes.

6. Lawful Basis for Processing

Under UK data protection law, Edustep processes personal data on the basis of one or more of the following:

  • Performance of a contract (providing tutoring services)

  • Legitimate interests (operating and improving our services)

  • Legal obligations (including safeguarding responsibilities)

  • Vital interests (where necessary to protect a child from harm)

7. Your Rights

You have rights under data protection law, including:

  • Access: Request a copy of the personal data we hold about you

  • Correction: Request correction of inaccurate or incomplete data

  • Deletion: Request deletion of personal data, subject to legal and safeguarding requirements

  • Restriction or Objection: In certain circumstances

  • Withdrawal of consent: Where consent is relied upon

Requests can be made by contacting admin@edustep.co.uk.

8. Data Security

Edustep takes reasonable and appropriate measures to protect personal data, including:

  • Restricted access to personal information

  • Secure storage of digital records

  • Use of trusted platforms and secure communication practices

While we take steps to protect information, no system can be completely secure. Users should take reasonable precautions when sharing information online.

9. Data Retention

Personal data is retained only for as long as necessary to:

  • Deliver tutoring services

  • Meet legal, safeguarding, or regulatory obligations

  • Resolve complaints or disputes

When personal data is no longer required, it is securely deleted or anonymised.

10. Changes to This Privacy Policy

Edustep may update this Privacy Policy from time to time to reflect changes in services, legal requirements, or operational practices.

Updated versions will be published on our website. Continued use of Edustep’s services after changes are made indicates acceptance of the revised policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact:

Email: admin@edustep.co.uk

By using Edustep’s services, you acknowledge and agree to the terms set out in this Privacy Policy.