Privacy notice
What I do with your information
This explains what personal information I collect when you enquire about tuition, register a student or work with me as a school — why I hold it, how long for, and what you can ask me to do with it.
1Who is responsible
The data controller is Gabeth Limited, trading as Gabeth Education Consultancy. That means I decide what information is collected and what happens to it, and I am accountable for it under the UK GDPR and the Data Protection Act 2018.
- Company
- Gabeth Limited, registered in England and Wales, company no. 11811101
- Registered office
- 6 Honeypin Drive, Aylesbury HP18 1AG, United Kingdom
- eb@gabetheducation.co.uk
- Phone
- +44 7346 816820
- ICO registration
- ZC265755
There is no separate data protection officer — I handle these questions myself, and the contact details above are the right ones for any request or complaint.
2What I collect, and why
| Information | Why I need it | Lawful basis |
|---|---|---|
| Your name, email, phone number and anything you tell me in an enquiry | To answer you and work out whether I can help | Legitimate interests — responding to someone who has contacted me |
| Student's name and email address | To send the Microsoft Teams invitation for each session | Performance of our contract |
| Year group, school, exam board, current and target grades, exam dates | To plan teaching that is aimed at the right specification and the right starting point | Performance of our contract |
| Parent or guardian name, address, postcode, phone and email | To contact you, to invoice you, and to quote for face-to-face tuition at your address | Performance of our contract; legal obligation for financial records |
| Access arrangements, SEND and relevant medical needs | To teach the student safely and appropriately | Explicit consent, given when you provide it on the registration form |
| Progress notes, assessment results and attendance | To track whether the tuition is working and report back to you | Performance of our contract |
| Invoices and payment records | To run the business and meet company and tax law | Legal obligation |
| Session recordings, testimonials, occasional update emails | Only where you have ticked the box asking for them | Consent, which you can withdraw at any time |
I do not buy contact lists, I do not use your information to advertise to you unless you asked for updates, and nothing here is used for automated decision-making or profiling.
3Information about children
Most of the students I teach are under 18. The agreement for tuition is with the parent or guardian, and it is normally the parent who gives me the student's details. I ask for the student's own email address only so the Teams invitation reaches them directly.
Where a student is under 18, I contact them through the parent or guardian's email, or on a thread that includes them. I do not hold information about a child beyond what I need to teach them well and keep them safe.
Safeguarding. If I believe a child is at risk of harm, I will share what is necessary with the school's designated safeguarding lead, with children's social care, or with the police. I will not ask for consent first, and I may not be able to tell you I have done it. This is the one circumstance in which I will pass on information without your agreement, and it is required of anyone working with children.
4Who else sees it
I do not sell your information and I do not share it for marketing. A small number of service providers process it on my behalf, under contract and only on my instructions:
- Microsoft — email, calendar, file storage and Microsoft Teams, which is where sessions take place.
- Netlify — hosts this website and receives registration form submissions before they reach my inbox.
- Cloudflare — manages the domain and its security, and runs the assistant in the chat window on this site.
- Anthropic — provides the AI model behind that chat assistant. What you type in the chat window is sent to Anthropic to generate a reply. Anthropic does not use it to train its models.
- My accountant and accounting software — for invoices and statutory records.
Some of these providers are based outside the United Kingdom, mainly in the United States. Where information is transferred outside the UK it is protected by the safeguards the law requires, such as the UK’s International Data Transfer Addendum or a government adequacy decision.
Beyond that, I will only disclose information where the law requires it, or where a child is at risk as described above.
When I work with a school
When a school engages me for cover, intervention or consultancy, any pupil data I handle belongs to the school. In that arrangement the school is the controller and I act as its processor, under the written terms in our engagement letter. This notice covers the information I hold as controller — your own enquiry and contract details — not pupil data I process for a school.
5How long I keep it
| What | How long |
|---|---|
| Enquiries that do not lead to tuition | 12 months, then deleted |
| Chat conversations on this website | Held only in your own browser for the length of the visit, and not stored by me. If you send the conversation on to me by WhatsApp, it is then an enquiry and follows the row above |
| Teaching records — progress notes, assessments, student and parent contact details | 2 years after the last session, then deleted |
| Invoices and financial records | 6 years from the end of the accounting period, because company and tax law requires it |
| Session recordings, where you consented to them | Deleted at the end of the course |
| Safeguarding records, if any | Kept and passed on in line with statutory guidance |
Financial records necessarily outlive teaching records. An invoice has your name and address on it and I am required to keep it for six years, so it survives the deletion of everything else.
6Keeping it secure
Information is held in Microsoft 365 on an account protected by multi-factor authentication, on encrypted devices, and is not kept on paper except where you send me something on paper. I am the only person with access. Where I no longer need something, I delete it rather than archive it.
7Your rights
Under the UK GDPR you can ask me to:
- give you a copy of the information I hold about you or your child;
- correct anything that is wrong or incomplete;
- delete it, where I do not have a legal reason to keep it;
- stop or limit what I do with it;
- send it to you or another provider in a portable format;
- stop relying on legitimate interests, where you object to that;
- withdraw a consent you gave — for recordings, a testimonial or update emails — at any time, without affecting anything done before you withdrew it.
Email eb@gabetheducation.co.uk and I will respond within one month. There is no charge. I may ask you to confirm who you are before I release anything about a student.
If you are unhappy with how I have handled your information, please tell me first and I will try to put it right. You also have the right to complain to the Information Commissioner's Office at any time: ico.org.uk/make-a-complaint or 0303 123 1113.
8This website
This site does not use advertising or analytics cookies, and there is no tracking of visitors across other websites. The only information it collects is what you type into the registration form and send to me.
The form is delivered by Netlify, which records the submission and passes it to my inbox. Netlify also logs standard technical information such as IP addresses for security purposes, as any web host does.
The chat assistant
The chat window on this site is automated. It is not me, and it cannot book a session, confirm a time or take a payment. It answers common questions about rates, how sessions run and how to get started, and it hands anything else to me.
What you type is sent to Anthropic, which generates the reply, and is held in your own browser for the length of your visit. I do not receive it and it is not stored on a server once you close the window. Because of that, please do not type anything sensitive into it — details of a child’s health, diagnosis or difficulties, or anything you would rather discuss privately. Send me those directly instead, and the chat will offer to do exactly that.
If you choose the WhatsApp button, your browser opens WhatsApp with a short summary of your questions ready to send. Nothing is sent until you tap send yourself, and you can edit it first. WhatsApp is operated by Meta, and once the message is sent, Meta handles it under its own terms. If you would rather not use WhatsApp, email or telephone work just as well.