Privacy & Cookie Policy

Last Updated: March 2026  |  Effective immediately

1 Information We Collect

Information You Provide Directly

When you purchase resources, book sessions, register for a masterclass, or contact us, we may collect:

• Identity & contact: Full name, email address, phone number (if provided), billing address
• Educational information: Current year group, target grades, subject needs, learning requirements (if voluntarily disclosed)
• Parental/guardian details: For students under 18, parent or guardian name, email address, and consent records
• Payment information: Processed securely via Stripe — we do not store full card details on our servers
• Session and progress data: Attendance records, assessment results, session notes, assignment submissions, progress tracking data
• Masterclass registration data: Name, email, year group, and parent/guardian consent confirmation

Information Collected Automatically

• IP address, browser type and version, device information
• Pages visited, time spent on pages, referring website
• Cookie data (see Section 2)

Recordings

Live masterclass sessions may be recorded for safeguarding, quality assurance, and replay purposes. Participants are informed of recording before each session begins. Recordings are stored securely and deleted after 90 days unless a safeguarding concern requires retention. Please see our Safeguarding Policy for further details.

2 Cookie Policy

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help the site function properly and improve your experience.

Essential Cookies (Always Active)

These cannot be switched off as they are required for the site to function:

• WooCommerce session cookies: Enable shopping cart and checkout functionality
• Authentication cookies: Keep you logged in to your account or student portal
• Security cookies: Protect against fraudulent activity

Third-Party Cookies

• Stripe: Used to process card payments securely — see stripe.com/cookies-policy

Analytics Cookies (With Consent Only)

If we introduce analytics tools in future (e.g. Google Analytics), we will update this policy and obtain your explicit consent via our cookie banner before any such cookies are set.

Managing Cookies

You can control cookies via our cookie consent banner on first visit, or through your browser settings. Note that blocking essential cookies may prevent access to the shopping cart, account login, or student portal.

3 How We Use Your Information

Service Delivery

• Processing orders for digital resources and physical materials
• Scheduling and delivering one-to-one tutoring sessions via LessonSpace
• Registering students and parents for live masterclasses
• Providing educational feedback, progress tracking, and session replays
• Communicating about bookings, services, and session access

Business Operations

• Processing payments and maintaining financial records
• Responding to enquiries and providing customer support
• Improving our services and website

Safeguarding

• Maintaining parental consent records for students under 18
• Retaining session recordings for safeguarding and quality purposes
• Cooperating with statutory authorities if a safeguarding concern arises

Legal Compliance

• Tax and accounting records (required for 6 years)
• Compliance with UK GDPR, safeguarding legislation, and ICO obligations

Legal Bases for Processing

• Contract performance: To provide services you have purchased or booked
• Legitimate interests: To operate, improve, and communicate about our services
• Legal obligation: Tax, accounting, and safeguarding requirements
• Consent: For marketing communications and session recordings (given via our registration forms)

4 How We Share Your Information

We do not sell your personal data. We share it only with trusted service providers necessary to deliver our services:

• Stripe: Payment processing — stripe.com/privacy
• LessonSpace: Online tutoring sessions — thelessonspace.com/privacy
• Website hosting provider: Technical infrastructure for mrkpsychology.co.uk
• Email service provider: Sending order confirmations, session reminders, and communications
• Statutory authorities: Police, social services, or the ICO where required by law or where a safeguarding concern exists

5 Data Security

• SSL encryption for all data transmission across our website and portal
• Password-protected access to all student records
• Secure payment processing via Stripe (PCI DSS compliant)
• Session recordings stored in secure, access-restricted storage
• Access to personal data limited to authorised personnel only
• Regular security monitoring and updates

6 Data Retention

• Transaction and payment records: 6 years (legal requirement)
• Order history: Duration of customer relationship plus 2 years
• Tutoring session notes and progress data: Duration of tutoring relationship plus 2 years
• Parental consent records: Duration of tutoring relationship plus 3 years
• Session recordings: 90 days, unless retention is required for a safeguarding matter
• Masterclass registration data: 12 months after the event
• Marketing communications: Until you unsubscribe or request deletion

After these periods, data is securely deleted or anonymised unless we are legally required to retain it longer.

7 Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a portable, machine-readable format
• Object: Object to processing for specific purposes (e.g. direct marketing)
• Withdraw consent: Where processing is consent-based, you may withdraw at any time

8 Children’s Privacy

Our services are primarily aimed at students aged 16–18 undertaking AQA A-Level Psychology. We do not knowingly collect personal data from anyone under 16 without verified parental consent.

Where a student is under 18, a parent or guardian must review and agree to this Privacy Policy and our Safeguarding Policy on the student’s behalf before any services commence. We collect and retain parental consent records as evidence of this agreement.

If you believe we have collected data from a student under 16 without appropriate consent, please contact us immediately.

9 International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. Where any service providers transfer data outside the UK (for example, cloud services), we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including standard contractual clauses where applicable.

10 Third-Party Links

Our website may contain links to third-party sites including social media platforms, payment processors, and educational platforms. We are not responsible for the privacy practices of these external sites. Please review their policies separately.

11 Changes to This Policy

We may update this policy from time to time. For significant changes, we will notify current customers by email and update the “Last Updated” date. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

12 Complaints

If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.