Privacy Policy
1. Introduction
- This Privacy Policy sets out how Spark Academy ("we", "us", "our") collects, uses, discloses, and protects the personal data of our Students, Parents, and website users. Spark Academy is committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
2. Data Controller
- Spark Academy, operated under CRT Enterprises Ltd, registered in England and Wales with company number 08451292, is the data controller responsible for your personal data.
3. Personal Data We Collect
- We may collect and process the following personal data:
- Contact Information: Name, address, email address, phone number.
- Student Information: Name, date of birth, school, year group, educational background, and progress.
- Medical Information: Details of any medical conditions, allergies, or special educational needs.
- Financial Information: Payment details, including credit or debit card information.
- Usage Data: Information about how you use our website and e-learning platform, including IP address, browser type, and browsing history.
- Photographs and Videos: Images and videos captured during tutoring sessions and events, subject to consent.
4. How We Use Your Personal Data
- We use your personal data for the following purposes:
- Provision of Services: To provide and manage our tutoring services, including enrolment, scheduling, and communication with Parents and Students.
- Administrative Purposes: To process payments, manage accounts, and maintain records.
- Health and Safety: To ensure the health and safety of Students during tutoring sessions.
- Marketing and Communications: To send newsletters, promotional materials, and updates, subject to consent.
- Compliance and Legal Obligations: To comply with legal obligations, resolve disputes, and enforce our agreements.
5. Legal Basis for Processing
- We process personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for us to process your data for specific purposes.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided that your rights and interests do not override those interests.
6. Data Sharing and Disclosure
- We may share your personal data with:
- Service Providers: Third-party service providers who assist us in providing our services, such as payment processors and IT support.
- Regulatory Authorities: Government bodies and regulatory authorities where required by law.
- Legal and Professional Advisors: Legal and professional advisors in the event of a legal claim or dispute.
- With Consent: Other third parties where you have given your consent for us to do so.
7. Data Security
- We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or damage. This includes encryption, access controls, and regular security assessments.
8. Data Retention
- We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When your data is no longer needed, we will securely dispose of it.
9. Your Rights
- You have the following rights regarding your personal data:
- Access: The right to request access to your personal data and obtain information about how we process it.
- Rectification: The right to request correction of inaccurate or incomplete personal data.
- Erasure: The right to request the deletion of your personal data, subject to certain conditions.
- Restriction: The right to request the restriction of processing of your personal data.
- Data Portability: The right to request the transfer of your personal data to another organization.
- Objection: The right to object to the processing of your personal data for certain purposes.
- Withdraw Consent: The right to withdraw your consent at any time, where processing is based on consent.
10. Exercising Your Rights
- If you wish to exercise any of your rights, please contact us at:
- Email: admin@spark-academy.co.uk
- Address: Spark Academy, CRT House, 176 Melton Road, Leicester, LE4 5EE
- We will respond to your request within one month and provide you with the information or actions you have requested, subject to legal and regulatory requirements.
11. Cookies and Tracking Technologies
- Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand where our visitors are coming from. You can manage your cookie preferences through your browser settings.
12. Changes to this Privacy Policy
- We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and we will notify you of significant changes.
13. Contact Us
- If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
- Email: admin@spark-academy.co.uk
- Address: Spark Academy, CRT House, 176 Melton Road, Leicester, LE4 5EE