Privacy Policy

CompSci Tutoring ("we", "us", "our") is operated by Gareth Edgell, based in the United Kingdom. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data controller: Gareth Edgell, trading as CompSci Tutoring.
Contact: gareth@compscitutoring.com

2. What data we collect

Account data

When you create a free account, we collect your email address, the name you provide (optional), and the date you registered. This is stored securely via Supabase (a third-party authentication and database provider).

Usage data

We may collect anonymised data about how you use the site — for example, which topics you practise and how many questions you answer — to improve the platform. This data is not linked to your identity without your consent.

Tutoring enquiries

If you book a tutoring session or contact us via the tutoring page, we collect your name, email address, and any information you include in your message. We use this solely to respond to your enquiry and arrange sessions.

Cookies

We use strictly necessary cookies to keep you signed in to your account. We do not use advertising or tracking cookies. If we add analytics in the future, we will update this policy and ask for your consent.

3. Legal basis for processing

We rely on the following legal bases under UK GDPR:

• Contract — to provide the account-based services you sign up for.
• Legitimate interests — to improve our platform and prevent abuse.
• Legal obligation — where we are required to retain records by law.
• Consent — where you have explicitly opted in (e.g. a mailing list).

4. How we use your data

• To create and manage your account.
• To send transactional emails (e.g. password reset, email confirmation).
• To respond to tutoring enquiries.
• To improve the revision platform and content.
• To comply with legal obligations.

We will never sell your personal data to third parties.

5. Third-party services

We use the following third-party services that may process your data:

• Supabase — authentication and database hosting. Data is stored in EU data centres. Supabase Privacy Policy.
• Vercel — website hosting and edge network. Vercel Privacy Policy.
• Google Fonts — font delivery via Google's CDN. Google may log the request IP address. Google Privacy Policy.

6. Data retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law.

7. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please email gareth@compscitutoring.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure; if you believe your account has been compromised, please contact us immediately.

9. Children's privacy

Our platform is designed for students aged 14 and above (GCSE and A Level). Users under 18 should have a parent or guardian review this policy. We do not knowingly collect data from children under 13.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at gareth@compscitutoring.com.