Privacy and Cookie Policy

Welcome to our website at www.gcseenglishsuccess.com and thank you for your interest in our courses, tuitions, and resources. We take the protection of your personal data very seriously and process your data in accordance with the UK`s Data Protection Act 2018 (“DPA”) and the General Data Protection Regulation (“GDPR”).

With the help of this Privacy Policy, we inform you comprehensively about the processing of your personal data by us and the rights to which you are entitled.

Personal data is information that makes it possible to identify a natural person. This includes in particular, your name, date of birth, address, telephone number, e-mail address, but also your IP address. Anonymous data as such only exists if no personal reference to the user can be made.

The Data Controller

In accordance with the DPA and the GDPR, the person responsible for processing of personal data when using the website is:

GCSE English Success, Sophia James (Sole Trader)

Unit 101541, PO Box 7169,

Poole, BH15 9EL

UK

E-Mail: sophia@gcseenglishsuccess.com

Web: https://gcseenglishsuccess.com/

Facebook: https://www.facebook.com/tutoringwithsophia

Categories of data subjects and types of data processed

During the course of using our website and services, we process the following types of data from visitors and users:

• inventory data (e.g., names, addresses),

• contact data (e.g., e-mail, telephone numbers),

• content data (e.g., text entries, messages, testimonials),

• usage data (e.g., web pages visited, interest in content, access times), and

• meta/communication data (e.g., device information, IP addresses, Google Advertiser ID or IDFA).

Purpose of the processing

The Purpose of processing personal data are:

• provision of the online offer, its functions and contents,

• responding to contact requests and communicating with users,

• security measures, and

• reach measurement/marketing.

Relevant legal basis

In accordance with the DPA and the GDPR, the following legal basis, unless specifically described below apply to the processing of your personal data:

• the legal basis for obtaining consent is art. 6(1)(a) and art. 7 GDPR,

• the legal basis for processing in order to fulfil our services and carry out contractual measures and respond to enquiries is art. 6(1)(b) GDPR,

• the legal basis for processing in order to fulfil our legal obligations is art. 6(1)(c) GDPR, and

• the legal basis for processing in order to protect our legitimate interests is art. 6(1)(f) GDPR.

Security of your personal data

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input, disclosure, ensuring availability and segregation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

Cooperation with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies, transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment service providers, is necessary for the performance of the contract, you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents (including Course Creators Kit operated by Course Creators Limited), web hosts, etc.). If we commission third parties to process data on the basis of a so-called "processing agreement", this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the United Kingdom (UK) or the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transferring data to third parties, this is only done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. GDPR are met. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the UK or the European Union or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

Your rights

These rights are standardised in both the DPA and GDPR. This includes:

• the right to information (Art. 15 GDPR),

• the right to rectification (Article 16 GDPR),

• the right to erasure (Article 17 GDPR),

• the right to restriction of data processing (Article 18 GDPR),

• the right to data portability (Article 20 GDPR),

• the right to object to data processing (Article 21 GDPR),

• the right to revoke any consent you have given (Art. 7 (3) GDPR), and

• the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).

Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights as a data subject.

The Information Commissioner`s Office (ICO) is the relevant data protection supervisory authority in the UK. The ICO is located at Wycliffe House, Water Ln, Wilmslow SK9 5AF, UK (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

Cookies

"Cookies" are small files that are stored on your device. Different information can be stored within the cookies. We may use temporary and permanent cookies and will explain this in our Cookie Policy. The legal basis for the use of cookies is either your consent or our legitimate interest.

Deletion of data

The data processed by us will be deleted or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e., the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

Contractual services

We process the data of our customers within the scope of our contractual services. In doing so, we process:

• inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers),

• content data (e.g., text entries, testimonials, and messages),

• contract data (e.g., subject matter of contract, term, this may also include non-personal data such as a student’s academic grades),

• payment data (e.g., payment confirmations and payment history),

• usage data and metadata (e.g., in the context of evaluating and measuring the success of marketing measures).

As a matter of principle,

• we do not process special categories of personal data, unless these are components of commissioned processing. The purpose of the processing is the provision of contractual services, billing, and our customer service. We process data that is necessary for the justification and fulfilment of contractual services and point out the necessity of their disclosure. Disclosure to external parties only takes place if it is necessary in the context of the service.

• we do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider (currently PayPal and Stripe).

When processing the data provided to us within the scope of providing our courses, tuitions, and classes, we act in accordance with the instructions of the client as well as the legal requirements of order processing pursuant to Art. 28 GDPR and do not process the data for any other purposes than those specified in the course, tuition and/or class.

We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (6 years).

In the case of data disclosed to us by the user within the scope of a course, tuition and/or class, we delete the data in accordance with the specifications of the course, tuition and/or class, in principle after the end of the course, tuition and/or class.

Administration, financial accounting, office organisation, contact management

We process data within the scope of administrative tasks as well as organisation of our business, financial accounting, and compliance with legal obligations, such as archiving.

In doing so, we process the same data that we process in the context of providing our contractual services. The purpose and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services.

The deletion of data with regard to contractual services and contractual communication corresponds to the information mentioned in these processing activities.

In this context, we disclose or transmit data to the tax authorities, consultants such as tax advisors or auditors as well as other fee offices and payment service providers.

Furthermore, we store information on suppliers, organisers, and other business partners on the basis of our business interests, e.g., for the purpose of contacting them at a later date. This data, most of which is company-related, is stored permanently.

Contact

When contacting us, the user's details are processed for the purpose of handling the request and its processing. The user's details may be stored in a customer relationship management system or comparable enquiry organisation. We delete the enquiries if they are no longer necessary. We review the necessity every two years; furthermore, the legal archiving obligations apply.

Testimonial

Within the Testimonial section, we may display certain personal data, share certain details, knowledge and insights. When you approve and submit your Testimonial to us your consent is obtained, and you have choices about the information in your Testimonial.

The storage of Testimonials is based on your consent. You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Newsletter

On our website there is the possibility to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us. The registration is carried out by means of the so-called double opt-in procedure.

After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. If you register for our newsletter, which informs you about our latest products and services, the personal data you provide in this context (full name and e-mail address) will be processed by us for the purpose of sending you the newsletter. The legal basis for the newsletter is your consent as well as our legitimate interest. You can revoke your consent at any time with effect for the future.

Hosting

The hosting services used by us for the purpose of operating this website is Amazon Web Services (AWS). In doing so AWS, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of our website on the basis of our legitimate interests in an efficient and secure provision of the website in conjunction with the provision of contractual services and the conclusion of the contract for our services, including but not limited to our courses, tuitions, and classes).

Collection of access data and log files

We, or rather AWS, collect data on every access to our website on the basis of our legitimate interest. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified.

When you join our Facebook Group

When you join our Facebook Group, you may provide us through and Facebook, with personal data, share certain details, engage with others, exchange knowledge and insights, post and view relevant content. In accordance with Article 26 of the GDPR, Facebook (Meta Platform Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company Meta Platform Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) and we are jointly responsible for the processing of your data and enter into a so-called joint controller agreement, which clarifies how the jointly responsible parties will fulfil the obligations arising from the GDPR. For further information, please refer to Facebook`s Page Controller Addendum. Also, we would like to point out that this policy does not replace Facebook`s Privacy Policy and merely supplements it when you use our Facebook Group and services through Facebook.

Further, your use of the Facebook platform and its functions is your own responsibility, this applies in particular to the use of the interactive functions (e.g., commenting, sharing, rating). In addition, Facebook may use your data for market research, advertising purposes and to create profiles about your usage behavior and your interests. This allows, for example, advertisements to be placed within and outside the platforms that presumably correspond to your interests. We, as the provider of this policy, do not collect and process any data from your use of our service beyond this. For further information about Facebook`s use of your personal data, please refer to Facebook`s Privacy Policy and Facebook`s Page Controller Addendum.

Vimeo

We have integrated components from Vimeo. The integration requires that Vimeo can perceive the IP address of the user. The IP address is required in order to send the content to the user's browser. If you click on a Vimeo component (video) on my website, your internet browser will be prompted by the component to download a corresponding representation of the component. In this way, Vimeo knows which specific sub-pages you have visited. If you are logged in to Vimeo at the same time, Vimeo can track which sub-page containing a video you have visited. If you do not want information to be transmitted to Vimeo, log out of Vimeo before you visit our website.

Data Breaches/Notification

Databases or data sets that include Personal Data may be breached inadvertently or through wrongful intrusion. Upon becoming aware of a data breach, we will notify all affected individuals whose Personal Data may have been compromised, and the notice will be accompanied by a description of action being taken to reconcile any damage as a result of the data breach. Notices will be provided as expeditiously as possible after which the breach was discovered.

Children’s Privacy

Our services are restricted to users who are 13 years of age or older. We do not knowingly collect personal data from anyone under the age of 13. If you suspect that a user is under the age of 13, please contact us.

Changes

Because we’re always looking for new and innovative ways to improve our website and services, this policy may change over time. We will notify you before any material changes take effect so that you have time to review the changes.

Who should I contact for more information?

If you have any questions or comments about our Privacy Policy or wish to exercise your rights under applicable laws, please contact us using the following contact details:

GCSE English Success, Sophia James (Sole Trader)

Unit 101541, PO Box 7169,

Poole, BH15 9EL

UK

E-Mail: sophia@gcseenglishsuccess.com

Web: https://gcseenglishsuccess.com/

Facebook: https://www.facebook.com/tutoringwithsophia

This Privacy Policy was last updated on Monday, 05 June 2023

Welcome to GCSE English Success, our website at www.gcseenglishsuccess.com (“we”, “our” or “us”) operated by GCSE English Success, Sophia James (Sole Trader) acting as data controller in accordance with the UK`s Data Protection Act 2018 (“DPA”), the General Data Protection Regulation (“GDPR”) and the Privacy and Electronic Communications Regulations (“PECR”).

In this Cookie Policy, we inform you about the use of cookies on our website, which cookies we are using and how you can manage your consent to store cookies. For more information about how we protect your Personal Data, please see our Privacy Policy and for more information on cookies or if you feel that your interests were not accurately represented, please contact us using the details below.

Why do we provide information about cookies?

The provision of information about our use of cookies is required and set out in the PECR. Accordingly, the use of analysis and performance cookies and/or advertising cookies (collectively non-essential cookies) requires your consent. Thus, the legal basis for the collection of your Personal Data through non-essential cookies, is your consent.

What are cookies?

A cookie is a small simple file that is sent along with pages of our website and stored by your browser on the hard drive of your computer or other device. The information stored in it may be returned to our servers or to the servers of the relevant third parties on a subsequent visit.

Cookies transmit small amounts of data about your device to our web server. They enable websites to recognise your computer, smartphone or other device when you browse the internet. Tracking pixels, pixels, JavaScript and other tracking technologies also use cookies, invisible images or invisible codes that collect data about a user's visit to the website in a similar way to cookies. Depending on how long a cookie remains stored, we may refer to cookies as session cookies or persistent cookies:

i) Session cookies

A session cookie allows a website to recognise you while you browse the website, but the cookie is deleted when you log out or close the website in your browser. The cookie stores the products you add to your shopping cart as you browse the website for more products. A session cookie is deleted when you close the website in question.

ii) Permanent cookies

A persistent cookie recognises you again and again for a set period of time. It remains stored on your device or in your browser for this period (which can be minutes, days, or months) after you have logged out or closed the browser. Persistent cookies are used, for example, to store certain settings you have made on a website (such as your preferred language).

Cookies we use

The cookies that may be used by us can further be categorised as:

i) Essential or Necessary cookies

These cookies are needed to ensure that this website works properly and is secure so that you can navigate the website and use its features. At the same time, we store your preferences regarding our use of cookies on your device. Without these cookies, certain features of the website would not be available (for example, logging in to restricted areas of the website or saving the products you place in your online shopping cart). You would also not be able to use certain services on the website. These cookies do not collect any of your data for marketing purposes and they are not used to monitor your activity on the internet generally.

ii) Functional cookies

These cookies allow a website to remember the options you have selected (including user ID, disclaimer consent and your preferred language), your username if applicable, and any custom settings you have made (e.g., font sizes) or personalisation options you have selected when browsing. It may also be used to provide you with certain services that you may use.

iii) Advertising cookies (non-essential cookies)

On our website, we use advertising cookies that allow us to gain insights into our campaign results. These cookies link you as a website visitor to a unique ID, however, these cookies do not profile your behaviour and interests in order to serve personalised ads.

Consent

When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. Once you agree and accept you consent to our use of Advertising cookies, as described above. You can disable the use of cookies through your browser, but please note that if you do so, our website may not function properly.

Manage your consent

When you visit our website, one or more cookies are automatically stored on your device. If you do not want this to happen, it is best to use the following links (depending on the browser you use) to set your browser to prevent cookies from being stored on your device in the future. (Google Chrome, Mozilla Firefox, Flash cookies, Microsoft Internet Explorer, Opera, Safari)

What are you consenting to?

Cookie: _fbp Type: Advertisement Description: This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. Lifespan: 3 months

Cookie: fr Type: Advertisement Description: Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. Lifespan: 3 months

Facebook Remarketing

Within our website, so-called "Facebook pixels" of the social network Facebook, which is operated by Meta Platforms Inc., are used. With the help of the Facebook pixels (_fbp and fr), it is possible for Facebook to determine the visitors of our website as a target group for the display of advertisements, so-called "Facebook ads". Accordingly, we use the Facebook pixels to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixels we want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixels, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.

You can object to the collection by the Facebook pixels and use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare the objection via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/.

Does this policy change?

We may update our Cookie Policy from time to time. This might be for a number of reasons, such as to reflect a change in the law or to accommodate a change in our business practices and the way we use cookies. We recommend that you check here periodically for any changes to our Cookie Policy.

Who should I contact for more information?

If you have any questions or comments about our Cookie Policy or wish to exercise your rights under applicable laws, please contact us using the following contact details:

GCSE English Success, Sophia James (Sole Trader)

Unit 101541, PO Box 7169,

Poole, BH15 9EL

UK

E-Mail: sophia@gcseenglishsuccess.com

Web: https://gcseenglishsuccess.com/

Facebook: https://www.facebook.com/tutoringwithsophia

This Cookie Policy was last updated on Monday, 05 June 2023