Policies & Safeguarding
Privacy Policy
How Miss Maths Daily collects, uses and protects parent and student information.
Last updated: 6 August 2026
Overview
- Miss Maths Daily collects parent and student information in order to provide one-to-one maths tutoring and to run the Student Portal.
- Miss Maths Daily is the data controller for this information. The portal's database, authentication, file storage and hosting are provided by our technology provider, who acts as a data processor on our behalf.
- This policy is written to be friendly to the UK GDPR and the Data Protection Act 2018. It explains what we collect, why we collect it, how long we keep it and what rights you have.
Information we collect
- Parent and guardian details: name, email address, phone number and emergency contact information.
- Student details: name, year group, key stage, school, target and working grades.
- Learning information: learning goals, strengths, areas to improve, lesson notes, session reports, homework tasks and submissions, and progress information.
- Portal activity: lesson bookings, attendance records, messages sent through the portal, resources accessed and sign-in activity.
- Enquiry information: anything you send us through the website contact or consent forms.
Why we use it (and our lawful basis)
- Delivering personalised maths tutoring — performance of our agreement with you.
- Tracking student progress over time — performance of our agreement with you.
- Providing lesson feedback and session reports — performance of our agreement with you.
- Communicating with parents about lessons, homework and scheduling — performance of our agreement with you.
- Improving learning resources and teaching materials — our legitimate interest in providing a better service, using summarised information wherever possible.
- Marketing, testimonials or feedback quotes — only with your separate, explicit consent, which you may withdraw at any time.
- We never sell personal data, and we do not use it for advertising or automated decision-making.
How data is stored securely
- All data is stored in a managed cloud database with encrypted storage and encrypted connections (TLS) for data in transit.
- Accounts are protected by password-based authentication with hashed passwords, secure session handling and checks against known breached passwords.
- Files such as homework submissions and report attachments are held in a private storage bucket that is not publicly listable or browsable.
- Access to the tutor's own devices and accounts is protected by device passcodes and strong, unique passwords.
- This describes the controls currently in place. It is a factual description, not an independent security certification or audit statement.
Student information is private
- The tutor can see the student and parent records needed to plan and deliver lessons.
- A parent can only see the records linked to their own child.
- A student can only see their own record, reports, homework, progress and messages.
- These limits are enforced automatically by database-level access rules, so one family can never view another family's information.
- No student information is ever published on the public website. Any examples shown on the website are illustrative demo content only.
- We only share information with third parties where required by law, or where there is a safeguarding concern (see our Safeguarding Policy).
Retention and deletion
- Student and parent records are kept while tutoring is active and for up to 3 years after the last lesson, so we can answer follow-up questions and keep an accurate record of the service provided.
- After that period, records are reviewed and deleted unless there is a legal reason to keep them (for example financial records, which are kept for 6 years).
- You can ask for your data to be deleted earlier by emailing us, and we will delete anything we are not legally required to keep.
Your rights
- Access: you can request a copy of the personal information we hold about you or your child.
- Correction: you can ask us to correct anything that is inaccurate or incomplete.
- Deletion: you can ask us to delete information where it is appropriate and we have no legal obligation to keep it.
- Restriction and objection: you can ask us to pause certain uses of the information, or object to processing based on legitimate interests.
- Withdrawing consent: where we rely on consent (such as testimonials), you can withdraw it at any time.
- To make a request, email us with your name and your child's name. We will respond within one month.
- If you are unhappy with how we handle your request, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Business contact details
- Business name
- Miss Maths Daily
- Data controller
- Viola — Founder & Tutor, Miss Maths Daily
- Website
- missmathsdaily.co.uk
- Postal address
- [Add your business address here]
- ICO registration
- [Add your ICO registration number here, if registered]
Placeholders marked with square brackets should be replaced with your final business details.
Shared responsibility note: This policy describes the controls and practices currently in place for the portal. Platform security features are provided by our technology provider and are described factually; they are not a guarantee or certification. Miss Maths Daily remains responsible for day-to-day data handling decisions such as what is uploaded, who is invited and how long records are kept.