Privacy Policy
How we collect, use, and protect personal data across the Savian Academy website and tuition platform.
Last updated: 31 July 2026
1. Introduction
This Privacy Policy explains how Savian Academy Ltd ("we", "us", "our") collects, uses, and protects personal data when you use our website and tuition platform. We are subject to UK GDPR and regulated by the Information Commissioner's Office (ICO).
2. Data Controller
Savian Academy Ltd, registered in England & Wales (Company No. Pending]), is the data controller for personal data collected through this Service. Contact: [contact@savianacademy.com.
3. What Data We Collect
Depending on your role (parent, student, or tutor), we may collect:
- Account details — name, email, phone number, password (stored hashed, never in plain text)
- Child/student details provided by a parent — first name, year group, subject preferences
- Booking & scheduling data — demo bookings, class times, attendance records
- Payment data — handled directly by Stripe; we do not store your card details
- Communications — messages sent through our in-platform chat, and enquiries submitted via this site
- Tutor-specific data — DBS check status, availability, bank/UPI details (processed transiently via Wise, never stored raw — see below)
4. How We Use Your Data
- To provide and manage your account, bookings, and classes
- To process subscription payments and teacher payouts
- To match students with an appropriate tutor and maintain that relationship
- To communicate with you about your account, classes, or enquiries
- To meet our legal and safeguarding obligations
5. Legal Basis for Processing
We process personal data under UK GDPR on the basis of: performance of a contract (delivering the tuition service you've subscribed to), legitimate interests (platform safety, fraud prevention), legal obligation (tax, safeguarding), and, where applicable, your consent (e.g. non-essential cookies, class recording).
6. Children's Data & Parental Consent
Our students include children under 13. A parent or legal guardian must create and manage the child's account, and provides consent on the child's behalf for us to process their data as described in this policy. Children do not register their own accounts independently.
8. Data Retention
We retain account and class data for as long as your account is active, plus a limited period afterward to meet legal, accounting, and safeguarding obligations. You can request deletion of your data at any time, subject to those obligations (see Your Rights, below).
9. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure ("right to be forgotten"), subject to legal retention requirements
- Request a portable copy of your data
- Object to certain processing, or withdraw consent where processing is consent-based
- Lodge a complaint with the ICO if you believe we have mishandled your data
To exercise any of these rights, contact us at contact@savianacademy.com.
11. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed passwords, and access controls limiting who within our team can view sensitive data. No system is completely secure, but we take reasonable steps to protect your information.
12. Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours where required, and inform affected users without undue delay.
13. Changes to This Policy
We may update this policy as our processing activities change. We will update the "Last updated" date above and notify you of material changes.
14. Contact & Complaints
Questions or requests: contact@savianacademy.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.