Privacy policy
[TO BE REVIEWED BY A LAWYER]
Who is responsible
Thomas Denman, trading as [BUSINESS NAME], [ADDRESS], [EMAIL], is responsible for personal data used to provide English coaching.
Booking and lesson data
When you book, TidyCal processes your name, email address, appointment type, date, time zone and any information you enter in the booking form. Lesson notes and communications are used to deliver and manage coaching. Please do not include unnecessary sensitive information.
Payments and service providers
TidyCal handles scheduling, confirmations and reminders. Stripe handles payment and billing details. We receive booking and payment status, not your full card details. Zoom or Google Meet may process call information. Provider privacy policies explain their processing. International transfers require appropriate safeguards, such as applicable adequacy decisions or approved contractual clauses; [DATA TRANSFER DETAILS] need confirmation.
Purposes and lawful bases
We use booking data to take steps at your request and perform the coaching contract, and retain required financial records to meet legal obligations. Necessary service administration may rely on legitimate interests. Optional calendar cookies and Google Ads marketing rely on your consent, which you may withdraw at any time.
Cookies and advertising
Only necessary site storage is used by default. Your separate calendar and marketing preferences, timestamp and notice version are stored locally. TidyCal loads only after calendar consent or a request to show it. With marketing consent and configured tracking, Google Ads receives conversion type, purchase amount in GBP, transaction ID and permitted ad-click and browser identifiers to measure bookings and purchases and attribute advertising. We do not send client names or emails to Google Ads. Rejecting marketing blocks Google tags and conversions. Use Cookie settings in the footer to change or withdraw consent. Withdrawal does not undo earlier lawful processing.
Retention and security
Access to personal data is limited to what is needed to provide services and meet legal duties. [DATA RETENTION PERIODS] must specify how long booking records, lesson notes and accounting records are kept. Provider records and browser storage have their own retention settings.
Your UK GDPR and EU GDPR rights
Subject to the conditions in the applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. You can withdraw consent without affecting prior lawful processing. Contact [EMAIL] to exercise your rights. You may complain to the UK Information Commissioner’s Office or your EU supervisory authority.