Wonders of Maths Limited (“WoM”, “we”, “us”, “our”) is a tutoring provider for children specialising in tailored tutoring adapted for each child’s optimum learning strategy. We are also a provider of software products and services that allow others to provide tailored tutoring adapted for each child’s optimum learning strategy.
This Privacy Notice is intended to ensure that our students, their parents/carers, our tutors and our software users (“you”, or “your”) are aware of the categories of your personal data we may collect, how we collect it, what we use it for and who we share it with.
By “personal data” we mean information about you which could identify you such as your name and contact details.
We will be the “data controller” of personal data processed in connection with this Privacy Notice. This means that we are responsible for deciding how we hold and use personal data about you. Our address is Northcliffe House, Young Street, Kensington, London, W8 5EH. Should you have any questions about this Privacy Notice you can contact us at this address or by emailing firstname.lastname@example.org.
We have appointed Martyn Rushton as Data Protection Officer (DPO) to oversee our data privacy matters. If you have any questions about this Privacy Notice or how we handle your personal data, please contact the DPO at email@example.com.
We may provide supplemental privacy notices on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your personal data. Those supplemental notices should be read together with this Privacy Notice.
If you provide us with personal data of anyone else (for example, someone who has referred you), please provide those persons with a copy of this Privacy Notice.
What personal data do we collect about you and what do we use it for?
The categories of personal data about you we may collect, store and use are set out in the table below and in each case we have specified what we use it for and our ‘lawful basis’ for processing it.
The law specifies certain ‘lawful bases’ under which we are allowed to use your personal data. Most commonly, we will use your personal data under the following lawful bases:
1. Where we need to perform the contract we have entered into with you;
2. Where we need to comply with a legal obligation;
3. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and/or
4. Where you have consented to us doing so.Information you provide to us
We collect personal data that you provide to us by undertaking our online assessment, filling in forms, or corresponding with us by post, phone, email, or otherwise.
Photos/video: we may collect photos that you send to us or we may take photos or videos ourselves
We would like to use these photos and videos for marketing and promoting our services to others.
We only do this if you, and your parent/carer consent
Contact details: your name and email address, your school name, year group and date of birth
To send you marketing emails about our products and services
Either your consent (where you have signed up to our marketing emails on our website) or our legitimate interests in promoting our products and services (where you are an existing student of ours and you chose not to opt-out of receiving these emails when we gave you the option). You can opt- out at any time by following the unsubscribe link in those emails.
Our online Learning Profile Assessment: When you complete this Assessment we collect your name, academic year, school, how you heard about us, your favourite subject, how much you read, whether you like the sciences, what maths set/group you are in, and your hobbies outside of school. We also ask you to complete a questionnaire asking you various questions about your learning behaviours. Finally, we ask you to undertake a maths assessment consisting of various problem questions and collect your answers and working out process (your supervising adult will tell us about this).
This helps us to work out your level, create a picture of your learning profile and match you with the right tutor. It also allows prospective tutors to understand you better and to inform our algorithm for recommending tutoring materials and methods.
Performance of our contract with you and otherwise in our legitimate interests to build a rounded picture to provide the best service.
Our offline tutoring services: When you sign-up for our offline tutoring we collect your contact details including your name, address, email address and telephone number. We may also ask you for your age, year group and name of school.
So that we can identify and communicate with you and to help us in creating classes and tailoring teaching to you
Performance of our contract with you.
Contact details: at the end of the student’s online Learning Profile Assessment we ask for your name and email address and any feedback you may have.
So that we can contact you in relation to the provision of our services or otherwise to send you information you have requested. To send you marketing emails about our products and services. For use in our tutoring software to enable tutors to send reports to you about a student’s progress.
Performance of our contract with you and/or our legitimate interests in contacting you in relation to our services or providing you with information about them. Either your consent (where you have signed up to our marketing emails on our website) or our legitimate interests in promoting our products and services (where you are the parent/carer of an existing student of ours and you chose not to opt-out of receiving these emails when we gave you the option). You can opt-out at any time by following the unsubscribe link in those emails.
Payment details: depending on your chosen payment method, we will process your bank account details or debit/credit card numbers.
To manage payments, fees, charges and refunds.
Performance of our contract with you and our legitimate interests in managing payments.
Behavioural information: When you take classes with us or receive tutoring from one of our tutors, we will create information about your learning behaviours and your progress.
To monitor and track your progress, to tailor our services to best suit you, and to develop and inform the way we provide our services.
Performance of our contract with you and our legitimate interests in developing our services.
Website and technical data: We also automatically collect certain data when you use our website or open one of our emails. We do this by using cookies, pixels and other similar technologies. This may include your IP address, device ID, location of your device, browser type, and internet service provider. Please see the ‘Cookies and Similar Technologies’ section below for further information.
To provide, personalize, measure and improve our website experience and to assess the effectiveness of our email campaigns.
Either your consent (for example, when we require your consent for the optional cookies that we use) or our legitimate interests in operating our website and keeping it updated and relevant and informing our marketing strategy.
In addition to the uses above, please note that we may also process your information where we are required by law to do so or if we reasonably believe that it is necessary to protect our rights and/or to comply with judicial or regulatory proceedings, a court order or other legal process.
Special categories of personal data
There are more limited bases for processing special category personal data (which reveals or contains racial or ethnic origin, political opinions, religious and philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life and sexual orientation) and criminal convictions and offences data.
We ask all our tutors to undertake a Disclosure and Barring Service (DBS) check and so we may process information about criminal convictions and offences as part of those checks. This is to assist us in assessing the tutor’s fitness and propriety to perform their role which forms part of generally accepted principles of good practice. Our lawful basis for this processing is our legitimate interests in ensuring the fitness and propriety of our tutors and compliance with regulatory requirements (including those which form part of generally accepted principles of good practice in relation to tutoring of children).
Otherwise, we do not intend to actively collect special categories of personal data about anyone. Whilst we will use reasonable efforts to limit our holding of such data, please be aware that we may hold such data incidentally. For example, where you volunteer special category data to use, such as if you send us an email containing special category data. Where possible, we request that you redact or otherwise withhold such data unless it is necessary to provide such information and the information has been manifestly made public by you.
What if you do not provide the personal data requested?
Where we need to collect personal information by law, or under the terms of a contract we have with you, or in order to provide you with information you have requested, and you do not provide this information when requested, we may be prevented from complying with our legal obligations or we may not be able to perform all or part of the contract we are entering into with you or provide you with the information requested. For example, we require (a) certain information about a student in order to select an appropriate tutor and to create a tailored learning path, (b) your contact details in order to send you any information you have requested, and (c) your payment details in order to process your payment.
Change of purpose
We will only use your personal data for the purposes for which we collected it (as identified above in the What we use this data for column), unless we reasonably consider that we need to use it for another reason which is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the lawful basis which allows us to do so.
Who will we share your personal data with?
We may share your personal data where this is required by law, where it is necessary to perform our contract with you, where we have another legitimate interest in doing so or with your consent. The parties with whom we may share your personal data include:
1. Payment service providers who process card payments on our behalf will have access to the parent/carer’s payment card details;
2. Other service providers such as data management and storage providers who we use to run and host our services, marketers and advertisers helping us with our marketing.
We may share your personal data with third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with applicable law or judicial process or if we reasonably believe that disclosure is necessary to protect our rights and/or to comply with judicial or regulatory proceedings, a court order or other legal process.
WoM is based in the UK but we do use some service providers who host and provide their services from other countries including the USA. These countries may not have the same standard of data protection laws as the UK but, where required, we have put in place appropriate safeguards to ensure that your personal data is treated in a manner that is consistent with and respects the UK laws on data protection. If you require further information about this you can request it from firstname.lastname@example.org.
Cookies and similar technologies
Generally, we will keep information relevant to our dealings with you for maximum 7 years after our relationship with you ends.
In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once we no longer require your personal data for the purposes we collected it for, we will securely destroy your personal data in accordance with applicable laws and regulations.
Accuracy of personal data
It is important that the personal data we hold about you is accurate and current. Please let us know if your personal data changes during your relationship with us.
Your rights in relation to your personal data
You have rights as an individual which you can exercise in relation to the personal data we hold about you under certain circumstances. These rights are to:
- request access to your personal data (commonly known as a “data subject access request”) and request certain information in relation to its processing;
- request rectification of your personal data;
- request the erasure of your personal data;
- request the restriction of processing of your personal data;
- object to the processing of your personal data;
- not be subject to a decision based solely on automated processing which significantly affects you;
- request the transfer of your personal data to another party.
If you want to exercise one of these rights please contact us at email@example.com. We will do our best to accommodate your request or objection but please note that not all rights are absolute.
You also have the right to make a complaint at any time to a supervisory authority for data protection issues. In the UK, this is the Information Commissioner’s Office.
You will not usually have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact firstname.lastname@example.org. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) you originally agreed to unless we now have an alternative legal basis for doing so.
Changes to this privacy notice
We reserve the right to update this privacy notice at any time, and we will make an updated copy of such privacy notice available on our website and notify you when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
This Privacy Notice was written with brevity and clarity in mind and is not an exhaustive account of all aspects of our collection and use of personal data. If you require any further information, please do not hesitate to contact email@example.com.