This Privacy Policy describes how EduWin ("Company," "we," "us," or "our") collects, uses, and shares personal information in connection with your use of our educational technology platform, including tutoring, career advising, and subject competitions (the "Services"). By accessing or using our Services, you agree to this Privacy Policy.
1. Contact Details
If you have any questions about this policy or our data practices, please contact us:
Email: hello@eduwin.co.uk
2. Information We Collect, Use, and Why (Lawful Basis)
We collect and use personal information based on the following purposes, lawful bases, and specific data categories:
A. For Student Education and Welfare
| Information Collected | Purposes of Use | Lawful Basis (UK GDPR) |
|---|---|---|
| Names and contact details (students/children and parents/guardians/carers) | Registration, service provision, progress monitoring, safeguarding, tailoring tuition, tracking academic progress, identifying learning gaps. | Legitimate Interests: The effective and efficient delivery of the contracted educational services and the proactive safeguarding of student welfare.Processing is necessary to provide personalised and safe tutoring/careers support. |
| Exam results and qualifications, Progress reports | ||
| Attendance and reason for absence data | ||
| Account access information | ||
| Payment details and financial transaction information (transactions only) | ||
| Special Educational Needs and Disabilities (SEND) or additional support information |
B. For Queries, Complaints, or Claims
| Information Collected | Purposes of Use | Lawful Basis (UK GDPR) |
|---|---|---|
| Names and contact details, Account login or user information, Purchase or service history, Financial transaction information. | Investigating and resolving disputes, maintaining service quality, exercising or defending legal claims. | Legitimate Interests: The effective and accountable management of customer service, risk mitigation, and dispute resolution.Processing is necessary to investigate and respond fairly to complaints or defend against legal claims. |
| Special Educational Needs and Disabilities (SEND) or additional support information related to the claim. |
C. For Information Updates or Marketing Purposes
| Information Collected | Purposes of Use | Lawful Basis (UK GDPR) |
|---|---|---|
| Names and contact details | Sending information on new services, useful careers advice, or service updates. | Consent (for direct marketing where required). You have the right to withdraw consent at any time. |
| Website and app user journey information | Legitimate Interests: Commercial growth and the efficient provision of valuable, relevant information to existing customers. |
D. Where We Get Personal Information From
- Directly from you (the student or parent/guardian).
- Parents or carers.
- Other education establishments (where authorised by you).
3. Children's Privacy (ICO Children's Code)
We take extra care when handling the personal information of children, in compliance with the UK ICO Children's Code:
- Age-Appropriate Design: We provide a separate, clear, child-friendly privacy notice using simple language and visuals.
- Data Minimisation: We only collect the necessary information required for the educational service.
- Parental Rights: Parents or legal guardians can review, delete, or prohibit further collection or use of their child's personal information by contacting us.
4. Who We Share Information With
We do not sell your personal data. We share information only with:
- Service Providers: Third-party vendors (e.g., cloud hosting, payment processors) who process data on our behalf under strict contractual obligations.
- Tutors and Advisors: The specific tutors and career advisors assigned to you.
- Parents and Carers: Your authorised parents or legal guardians.
- Competition Results: Your name, score, and ranking may be publicly displayed on leaderboards or shared with your school (if applicable and authorised).
- Safeguarding: Organisations we need to share information with for safeguarding reasons.
- Legal Compliance & Business Transfers: As required by law or in connection with business changes (merger, sale, etc.).
5. How Long We Keep Information (Data Retention)
We retain personal information for as long as necessary to provide our services and comply with legal obligations. When an account is closed, we will delete or anonymise data within a reasonable timeframe unless legally required to retain it.
For more information on how long we store your personal information or the criteria we use to determine this, please contact us using the details provided above.
6. Data Security
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.
7. Your Data Protection Rights (UK GDPR)
You have the following rights under UK data protection law. To make a request, please contact us using the details in Section 1.
- Right of Access: Ask us for copies of your personal information.
- Right to Rectification: Ask us to correct or complete inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Ask us to delete your personal information.
- Right to Restriction of Processing: Ask us to limit how we use your personal information.
- Right to Object to Processing: Object to the processing of your personal data.
- Right to Data Portability: Request we transfer the information you gave us to another organisation or to you.
- Right to Withdraw Consent: Where consent is our lawful basis, you can withdraw it at any time.
We must respond to you without undue delay and in any event within one month. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website.
8. How to Complain
If you have any concerns about our use of your personal data, you can first make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO).
Information Commissioner's Office
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on our platform and updating the "Last updated" date.
© 2025 EduWin. All rights reserved.