Privacy Notice

Clever Clogs Academy, 41 Turnham Close, Winslow, Buckinghamshire MK18 3GQ. We are the data controller for the personal data described here, registered with the Information Commissioner’s Office under number ZB500833. Our data protection contact is Mathew McArthur — you can reach him at contact@cleverclogsacademy.com or 07455 084380.

We handle personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.

Enquiry form

Your name, email address, phone number, your child’s year group in September, what you are looking for, whether you want in-person or online lessons, which days could work, and anything you write in the notes box. We use it to answer your enquiry and arrange your introductory session. Our lawful basis is taking steps at your request before entering a contract.

Newsletter and free downloads

Your email address, your child’s year group, and which page you signed up from. We use it to send the monthly email and the resource you asked for. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in any email.

Health, additional needs and anything you tell us about your child

Where you tell us about a medical condition, an allergy, a disability, a diagnosis or an EHCP — on the enquiry form, in conversation, or at any point while your child is with us — we record it so that we can teach your child properly and keep them safe. This is special category data under the UK GDPR, and we process it under Article 9(2)(b) and Article 9(2)(h). You choose how much to share; we only ever ask for what changes what we do.

Your child’s learning record

Once your child starts with us: their year group and school, what they are working on, how they are getting on, and the progress reports we write. Our lawful basis is performing the contract to teach them.

Emergency contacts

The names and phone numbers of two emergency contacts. If you give us someone else’s details, please make sure they know you have.

Shop purchases

Your email address and the item you bought, so we can send your download link. Your card details are entered on Stripe’s own checkout page and are never seen by, sent to, or stored by us. Our lawful basis is performing the contract to supply what you bought.

• We do not sell, rent or share your details with anyone for marketing.
• We do not set any advertising or analytics cookie unless you have pressed Allow on the banner. Press No thanks, or ignore it, and none is set.
• We do not build a profile of you across other websites.
• We do not require an account to browse, to download a free resource, or to buy anything.

We use a small number of suppliers to run the tuition service and this website. Each only receives what it needs to do its job, acts on our instructions, and is bound by a contract with us.

Running the tuition

• Zoom and Microsoft Teams — the platforms we teach online lessons on.
• Google Drive, Dropbox and Microsoft 365 — cloud storage for lesson records, progress notes and administration.
• Xero and QuickBooks — accounting and invoicing.
• TutorBird — runs the Parent Portal, where your invoices, messages and session times live. The sign-in box on our Parent Portal page is TutorBird’s own, shown inside a frame of theirs: your password is typed into TutorBird and never passes through this website. Their privacy notice applies to what happens in that box and once you are logged in.

Running this website

• Vercel — hosts the website and processes standard server request logs.
• Resend — sends the emails we send you: enquiry confirmations, free downloads and purchase links. It also holds the newsletter list and sends the monthly email.
• Supabase — stores the content of this website: the pages, the class times, the shop items and our own administrator login. It does not hold enquiries or newsletter subscribers.
• Stripe — takes card payments for shop purchases. Stripe is the data controller for your card details, not us.
• Google (Ads and Analytics) — tells us which of our adverts led to an enquiry, and how the site is used, so we know whether the advertising is worth paying for. Only if you have pressed Allow on the cookie banner; otherwise nothing identifying you reaches Google.

Some of these suppliers process data outside the UK. Where they do, the transfer is protected by appropriate safeguards — such as the UK Government’s International Data Transfer Agreement (IDTA), or the supplier’s adherence to the UK–US Data Bridge.

The Challenge is a free taster your child can try on this website. It asks for a first name so it can say hello, and at the end you may ask us to email a written report. That is the only point at which anything leaves your device.

We do not store your child’s name or their answers. They are used to compose the one email you asked for and are then gone — there is no database of children’s results behind this, and no record of how anyone did. We keep the email address only to send that report, and we do not add it to the newsletter unless you tick the box that says so.

The report is written for a parent, which is why we ask for a grown-up’s address rather than a child’s.

This website sets no cookie of its own. The only cookies it can ever set are Google’s advertising and analytics ones, and only if you press Allow on the banner. They let us see which of our adverts actually brought a family to us, and which pages people read, which is how we decide whether to keep paying for the advertising. Until you press Allow, Google’s tag runs without storing anything that identifies you, and if you press No thanks it stays that way. The site behaves identically either way, and we remember your answer so you are not asked again.

Video lessons are click-to-play: nothing is requested from YouTube, and no YouTube cookie is set, until you press play on a video. If you do press play, YouTube’s own privacy notice applies to that.

The map on our enquiry page works the same way: nothing is requested from Google until you press “Show the map”. If you do, Google’s own privacy notice applies to the map.

We keep data only as long as we need it, or as long as the law requires. Once a period expires, the data is securely deleted or shredded.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to us using it. Email contact@cleverclogsacademy.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

This website is written for parents and carers, and the forms on it are for adults to complete. We do not knowingly collect personal data directly from children through this website. Information about a child — their year group, and anything you tell us about how they are getting on — is given to us by you, their parent or carer. See also our safeguarding page.