Privacy Notice

1. Who We Are

TechPals ("we", "us", or "our") is a digital inclusion service based in London. We are the data controller for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact Details:
Email: hello@techpals.org.uk

2. What Information We Collect

We collect only the minimum amount of personal data necessary to provide our services:

• Identity Data: Name and contact details (email, phone number) provided when you book a session or contact us.
• Technical Data: Basic device information if you choose to connect remotely for a session (e.g., IP address during the session).
• Servicing Data: Notes on your learning progress and specific technical issues discussed during sessions, stored securely to tailor future support.

We do NOT collect special category data (health, race, religion, etc.) unless explicitly volunteered by you as relevant to accessibility needs, and even then, only with your explicit consent.

3. How We Use Your Information

We process your data for the following purposes:

• To arrange and conduct tutoring sessions.
• To communicate with you about bookings, changes, or cancellations.
• To improve our service quality based on feedback.
• To comply with legal obligations (e.g., safeguarding checks where applicable).

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: To fulfill the agreement between you and us for tutoring services.
• Consent: For sending newsletters or storing additional notes beyond immediate session requirements.
• Legitimate Interests: To operate our business effectively and ensure service quality.

5. Data Sharing & Third Parties

We do not sell or rent your data. We may share data only with trusted third-party processors who assist us in delivering our services, such as:

• Email Service Providers: Secure platforms for communication.
• Video Conferencing Tools: Encrypted services for remote sessions.
• Accountants/Legal Advisors: For professional compliance.

All processors are bound by strict confidentiality agreements and UK GDPR compliance standards. No data is transferred outside the UK/EU without adequate safeguards.

6. Data Retention

We retain your personal data only as long as necessary:

• Active Clients: Data is kept while you are receiving services.
• Former Clients: Data is retained for 3 years after your last session for warranty/support purposes, then securely deleted.
• Inquiries: Data from non-engaged inquiries is deleted after 12 months.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate data.
• Erasion: Request deletion of your data ("Right to be Forgotten").
• Restriction: Limit how we process your data.
• Portability: Receive your data in a usable format.
• Withdraw Consent: At any time, where processing is based on consent.

To exercise these rights, email hello@techpals.org.uk. We will respond within one month.

8. Cookies

Our website uses minimal, essential cookies only for functionality (e.g., remembering form inputs). We do not use tracking or advertising cookies. You can manage cookie preferences in your browser settings.

9. Complaints

If you are unhappy with how we handle your data, please contact us first so we can resolve it. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.