Smart Rebel Kids
Effective Date: 01/08/2025
At Smart Rebel Kids, we are committed to protecting your privacy and safeguarding the personal data of you and your child in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains how we collect, use, and store your information when you access our website, purchase our services, or participate in our sessions.
1. What data we collect
We may collect and process the following information:
From parents/guardians:
* Full name
* Email address
* Phone number
* Payment details (processed securely via Stripe or PayPal — we do not store your full card information)
From children (with parental consent):
* First name (or agreed alias)
* Age/year group
* Session participation details (e.g., notes, project work)
* Recordings of sessions (if consented)
2. How we collect your data
We collect information:
* Directly from you when you sign up, book a session, or fill out a consent form
* Through our website forms (hosted on Podia)
* From email communication and enquiries
3. How we use your data
We process personal data to:
* Deliver our online tutoring/enrichment sessions
* Communicate with you about bookings, updates, and resources
* Take payments and issue receipts
* Maintain safeguarding records as required by law
* Send you marketing emails (only if you have opted in)
4. Lawful basis for processing
We process your data under one or more of the following lawful bases:
* Contract — to provide the services you have booked
* Legal obligation — to comply with safeguarding and tax requirements
* Consent — for recordings, marketing, and storing optional information
* Legitimate interest — to improve our services and protect our business
5. Sharing your data
We do not sell your personal data.
We share it only with:
* Service providers such as Podia (website host), Zoom (video platform), Stripe/PayPal (payment processors), Google Workspace (email and file storage) — all of whom are GDPR compliant
* Safeguarding authorities or law enforcement if required by law
6. How we store your data
We store your information securely using password-protected devices and encrypted cloud services.
Retention periods:
* Parent contact details & payment records: kept for 6 years after your last booking (required for HMRC tax compliance)
* Lesson notes, child’s work, and progress reports: kept for 2 years after lessons end (for safeguarding and dispute resolution)
* Session recordings: kept for a maximum of 3 months (for safeguarding review if required)
* Marketing mailing list: kept until you unsubscribe or withdraw consent
We review and securely delete data once it is no longer needed.
7. Your rights under UK GDPR
You have the right to:
* Request a copy of the personal data we hold
* Ask us to correct or delete your data
* Withdraw consent at any time (for marketing or recordings)
* Object to certain types of processing
* Lodge a complaint with the Information Commissioner’s Office (ICO) at [www.ico.org.uk](https://www.ico.org.uk)
8. Children’s data & safeguarding
We only collect information about children with the explicit consent of a parent or legal guardian.
We comply with UK safeguarding best practice, and all staff hold an Enhanced DBS check with the Children’s Barred List (registered with the Update Service).
9. ICO registration
Smart Rebel Kids is registered with the UK Information Commissioner’s Office (ICO) as a data controller.
ICO registration number:
Cookies / website tracking
Our website (via Podia) may use cookies for analytics and essential functions. You can manage cookie settings through your browser.
11. Contact
If you have questions about this policy or your data, contact:
Smart Rebel Kids
The Guildhall
Market Square
Cambridge
CB2 3QJ
Smart Rebel Kids is the trading name of Katalin Botykai, sole trader registered in England & Wales.
Email: admin@smartrebelkids.com