1. Who We Are

Everpath Academy provides premium online tutoring and educational resources for secondary school students. The data controller is the owner/operator of Everpath Academy, based in Derry, Northern Ireland.

If you have any questions about this policy or your data, contact us at: [email protected]

2. What Personal Data We Collect

We may collect and process the following types of data:

From Parents/Guardians:

Full name

Email address

Phone number

Billing address

Payment details (processed securely via third-party platforms like Stripe or GoCardless)

Student details (e.g. name, age, school year)

From Students:

Full name

Email address (if applicable)

Academic progress and performance data

Session recordings (with consent)

Any messages sent via our platform or to tutors

3. How We Collect Your Data

We collect personal data through:

Website forms

Payment and registration links

Email communication

Tutoring sessions and student platform usage

Feedback and review forms

4. Why We Use Your Data

We use personal data to:

Provide access to our online learning platform

Deliver tailored tutoring services

Communicate updates and progress with parents

Send invoices and process payments

Improve the quality of our services

Respond to enquiries or safeguarding concerns

Comply with legal and regulatory obligations

5. Lawful Basis for Processing

We rely on the following lawful bases:

Contract: to provide services you have purchased

Consent: for optional services or marketing communication

Legal obligation: to comply with safeguarding and financial reporting rules

Legitimate interests: to ensure high-quality service and user experience

6. Data Sharing

We will never sell or rent your data. We may share limited information with:

Trusted third-party service providers for the purpose of fulfilling services (e.g. Stripe, Google Workspace, Zoom)

Tutors who work directly with your child

Legal or safeguarding authorities, if required by law or to protect someone’s safety

All third-party services we use are GDPR-compliant.

7. Data Retention

We retain parent and student data for as long as necessary to provide services, comply with legal obligations, or resolve disputes.

We aim to delete inactive accounts and data after 12 months of non-use unless otherwise required.

8. Your Rights Under UK GDPR

You have the right to:

Access your personal data

Request correction of inaccurate data

Request deletion of your data (“right to be forgotten”)

Object to or restrict certain types of processing

Withdraw consent (where applicable)

Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact: ✉️ [email protected]

9. Cookies

Our website may use cookies to enhance user experience and track general usage statistics. You can disable cookies in your browser settings.

10. Data Security

We store all personal data securely using password-protected systems and encrypted platforms.

11. Children’s Privacy

We only collect data from children with parent/guardian involvement and consent. We never market directly to children.

12. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be published on our website.

Contact Us
If you have any concerns about your data or this policy, please email us at:
[email protected]