1. Introduction

Miranda Spencer-Hope, trading as your_ (registered trading name: Your Success), is a sole trader based in England. ("we", "our", "us" in this policy.)

You may contact us by email: miranda@yoursuccess.education

We are responsible for collecting, processing, storing and safe-keeping personal information as part of providing our tutoring services and running our business. We manage personal information in accordance with UK data protection law, including the Data Protection Act 2018 and UK GDPR.

We are registered as a Data Controller with the Information Commissioner's Office (ICO), Registration Number: ZC234587

2. Because our students are under 18

Most of our students are aged 14–16. We take our responsibilities under the UK's Children's Code (Age Appropriate Design Code) seriously. This means:

• We only collect the minimum data necessary to deliver our service to a student.

• Students keep their cameras off during group sessions — this is a deliberate choice to avoid capturing unnecessary personal footage or images of a student's home environment.

• We do not use student data for profiling, behavioural advertising, or targeted marketing.

• Where a parent or guardian is the paying customer, some information (such as session recordings or feedback) may be accessible to them, since they are responsible for the student's use of our services.

3. What information we collect

This may include, but is not limited to:

1. Contact details (name, email address, phone number) — for both the paying parent/guardian and the student;

2. Payment information (processed securely by our third-party payment provider — see Section 6);

3. Details about the student's schooling, year group, and target grades;

4. Booking and attendance records;

5. Recordings of group live sessions (see Section 4);

6. Notes generated by AI note-taking tools during 1:1 sessions (see Section 4);

7. Technical data about how you use our website, such as IP address and browser information.

We do not usually collect special category data (such as health or medical information). If this is ever necessary — for example, to make a reasonable adjustment for a student — we will only do so with explicit consent.

4. Session recordings and AI notes

Group sessions are recorded. Recordings exist to support learning (so students can revisit content) and for safeguarding purposes. Recordings are not shared publicly and are only accessible to Miranda and, where relevant, the paying parent/guardian.

1:1 sessions are not recorded. Instead, we use an AI note-taking tool (currently Gemini) to generate session notes. These notes are for our internal record-keeping and to support the quality of tuition provided.

We will not use any personal data — including recordings, notes, or any other information you provide — to train AI models or similar technologies.

5. How we collect and use personal data

We collect information when you:

1. Enquire about or book a live session, 1:1 tuition, or purchase a digital product (revision notes, flashcards, predicted papers);

2. Sign up to our mailing list;

3. Contact us via our website, email, or social media;

4. Attend a live session (see Section 4).

We use this information to:

1. Process bookings and payments;

2. Deliver the service or product you have purchased;

3. Communicate with you about your booking or purchase;

4. Send you newsletters or marketing, where you have consented;

5. Respond to enquiries;

6. Improve our services.

We will not sell or lend your personal data to third parties, and will not share it for marketing purposes without your express consent.

6. How we store and share your information

Your information is stored securely via:

• Squarespace — our website and course-hosting platform;

• Squarespace Payments (powered by Stripe) — for processing payments;

• Stanstore - our link in bio tool which was previously the main platform

These third-party providers have their own privacy policies, which you can view on their websites. We only work with providers who have appropriate data protection safeguards in place.

7. Legal basis for processing

We process your data on the following legal bases:

1. Performance of a contract — to deliver the tuition or product you have purchased;

2. Consent — for marketing communications, which you can withdraw at any time;

3. Legal obligation — where we are required to keep certain records (e.g. for tax purposes);

4. Legitimate interests — for example, to maintain safe and effective delivery of our sessions.

8. How long we keep your data

We keep personal data only as long as necessary. As a general guide:

• Booking, payment and account information: up to 6 years (to meet UK tax and accounting record-keeping requirements);

• Group session recordings: [insert retention period, e.g. until the end of the academic year / term the recording relates to];

• Marketing contact details: until you unsubscribe.

9. Your legal rights

You have the right to:

1. Access the personal data we hold about you;

2. Ask us to correct inaccurate data;

3. Ask us to delete your data in certain circumstances;

4. Restrict or object to our processing in certain circumstances;

5. Withdraw consent at any time;

6. Complain to the ICO if you are unhappy with how we've handled your data: ico.org.uk

To exercise any of these rights, contact us at miranda@yoursuccess.education.

10. Marketing emails

We will only send marketing emails where you have opted in. You can unsubscribe at any time via the link in any marketing email, or by contacting us directly.

11. Cookies

Our website uses cookies to help it function and to understand how visitors use our site. You can manage cookie preferences through your browser settings or via any cookie banner presented on our site.

12. Changes to this policy

We may update this policy from time to time, for example if our services or the law change. We will update the "last updated" date at the top of this page.

13. Contact us

If you have any questions about this policy or how we handle your data, please contact us at miranda@yoursuccess.education.

If you remain concerned, you can contact the Information Commissioner's Office: ico.org.uk/global/contact-us