Privacy Policy

Last updated: June 2026

Adeyemi Academy ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect your personal data.

1. Information we collect

  • Account data: name, email, role (student/tutor), password (hashed).
  • Profile data: profile photo, bio, subjects, qualifications, hourly rate (tutors).
  • Verification data: photo ID, DBS certificates, references (tutors only).
  • Communication data: chat messages, session notes, files you upload.
  • Payment data: handled by Stripe — we never store card details.
  • Device data: device type, OS version, IP address for security.

2. How we use your data

  • To provide the tutoring service (matching, booking, video, chat).
  • To process payments securely via Stripe.
  • To verify tutors before they teach.
  • To send transactional emails (booking confirmations, receipts).
  • To improve the service and prevent fraud.
  • To respond to safeguarding concerns and legal requests.

3. Sharing your data

We only share data with:

  • Stripe — payment processing
  • 8x8 JaaS / Jitsi — video session hosting
  • Resend — transactional email delivery
  • MongoDB Atlas — encrypted database hosting
  • Apple Push / Firebase — push notifications
  • Law enforcement when legally required (e.g. safeguarding investigations)

We never sell your data to third parties.

4. Your rights (UK GDPR)

You have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Delete your account and data (right to be forgotten)
  • Object to processing and request restriction
  • Port your data to another service
  • Lodge a complaint with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, email adeyemiacademy@gmail.com with the subject "Data Request". We respond within 30 days.

5. International transfers

Some processors (Stripe, MongoDB) may transfer data outside the UK/EU. Where they do, transfers are covered by Standard Contractual Clauses (SCCs) or an adequacy decision.

6. Retention

Account data is kept while your account is active. On account deletion, we remove personal data within 30 days, except where retention is legally required (financial records: 7 years; safeguarding logs: 6 years).

7. Children under 13

Adeyemi Academy is intended for ages 13+. Learners under 18 must have a parent or guardian consent to registration.

8. Contact

Data protection officer: adeyemiacademy@gmail.com
UK ICO: ico.org.uk

← Back to home