Privacy Policy – StudyNova Ltd

Last updated: 01/09/2025

At StudyNova, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services or visit our website.

1. Who We Are

StudyNova (“we”, “us”, “our”) is a UK-based online tutoring platform delivering GCSE and A-Level lessons. For the purposes of data protection law, we are the data controller responsible for your personal data.

Contact information:
📧 hello@studynova.uk

2. The Data We Collect

We may collect and process the following personal data:

Interaction	Data Collected
Signing up	Student name, parent/guardian name, email address, academic year, subject selection
Payments	Billing details (e.g. name, address, card information processed via third-party provider)
Email support	Email address, message content, attachments
Live lessons	Name (Zoom display name), attendance data
Homework submission	Name, responses, attached documents
Surveys / reviews	Name, email (optional), feedback
Website use	IP address, device info, browsing activity (via analytics cookies if applicable)

We do not collect or process special category data (e.g. medical, religious, or biometric data), nor data relating to criminal convictions.

3. Children’s Privacy

StudyNova is intended for students aged 13 and above. In any case where a student under 13 signs up without appropriate parental consent, we will take steps to delete their personal data as soon as we become aware.

4. Lawful Basis for Processing

We process personal data in accordance with UK GDPR, using the following lawful bases:

Purpose	Data Processed	Lawful Basis
Delivering tutoring services	Name, email, subject selection, Zoom usage	Contractual necessity
Managing subscriptions and payments	Billing details	Contract / Legal obligation
Responding to emails and questions	Name, email, message	Legitimate interest
Sending resources, homework, updates	Name, subject, email	Legitimate interest
Optional feedback, surveys	Name, email (if provided)	Consent / Legitimate interest
Marketing emails (if applicable)	Email address	Consent (with opt-out option)

5. International Data Transfers

Some of our third-party service providers (e.g. Zoom, Google, email tools) may store or process your data outside the UK or European Economic Area (EEA), including in the United States.

Where such transfers occur, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses or equivalent legal mechanisms, to protect your data.

6. How We Share Your Data

We may share your data with the following types of third parties for the purposes listed above:

• Payment processors (e.g. Stripe)
• Video and communication platforms (e.g. Zoom, Gmail)
• Email and automation tools (e.g. MailerLite or Google Workspace)
• Analytics providers (if used, e.g. Google Analytics)
• Professional advisors (e.g. accountants, insurers)
• Government authorities or regulators where required by law

All third-party processors are subject to strict confidentiality and data protection agreements. We do not sell or share your data with advertisers or unauthorised third parties.

7. Data Retention

We only retain personal data for as long as necessary to:

• Deliver our services
• Fulfil legal, accounting, and regulatory obligations (e.g. tax records)

Typically, this means we retain:

• Student/parent contact data: indefinitely
• Payment records: up to 6 years, for tax/legal compliance
• Emails and queries: indefinitely
• Zoom lesson data: indefinitely
• Anonymous usage statistics: indefinitely
• All lesson recordings & chat box messages: indefinitely

You may request deletion of your data at any time (see Section 9).

 

8. Data Security

We implement robust security measures to protect your data, including:

• Password-protected systems
• Encrypted communications and file storage
• Limited access controls (only those with a business need can access data)

All third-party systems used (e.g. Stripe, Zoom, Google) are GDPR-compliant and meet industry standards for data security.

In the event of a suspected breach, we will notify affected users and the Information Commissioner’s Office (ICO) as legally required.

9. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right to access – request a copy of the data we hold on you
• Right to rectification – correct any inaccuracies
• Right to erasure – request deletion of your data
• Right to restrict processing – ask us to limit how we use your data
• Right to data portability – transfer your data to another provider
• Right to object – object to how we process your data in certain cases
• Right to withdraw consent – for any activity relying on consent (e.g. marketing)
• Right to lodge a complaint – with the Information Commissioner’s Office (ICO) at www.ico.org.uk

To exercise any of your rights, email us at hello@studynova.uk. We may need to verify your identity before actioning your request.

10. Cookies

Our website may use cookies to enhance your experience and track usage patterns. These may include:

• Essential cookies for site functionality
• Analytics cookies (e.g. Google Analytics)

You can manage or disable cookies via your browser settings or our cookie banner.

11. Automated Decision Making

We do not use your personal data for automated decision-making or profiling.

12. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date. You are encouraged to review this policy periodically.

13. Complaints

If you have any concerns or complaints about how your data is handled, please contact us directly:

📧 hello@studynova.uk

If you’re not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.