1. Who we are
Luminari Education is a trading name of Mei Fong Chan (“we”, “us”, “our”), operating as an independent provider of private tuition and educational consultancy based in Winchester, United Kingdom.
We are the Data Controller responsible for your personal data collected through our website (https://luminarieducation.co.uk). If you have any questions regarding this Privacy Policy, please contact us at: mei@luminarieducation.co.uk
2. Personal Data We Collect
We may collect, use, and store the following types of personal information when you interact with our website or services:
-
Contact & Identity Data: Full name, email address, telephone number, and postal location.
-
Academic & Student Data: Student’s year group, age, current academic level, target examination board (e.g., AQA, Edexcel, IB), and learning requirements.
-
Financial & Transaction Data: Payment histories and billing details (processed securely via Starling Bank / direct bank transfer).
-
Technical Data: IP address, browser type, and basic analytical data collected during your visit to our website.
3. Legal Basis for Processing Your Data
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases to process your personal information:
-
Contractual Necessity: To deliver bespoke tutoring sessions, manage lesson bookings, and handle billing.
-
Legitimate Interests: To respond to your enquiries, provide academic advice, and improve our educational services.
-
Legal Obligation: To maintain accurate financial and accounting records for HMRC tax compliance (retained for up to 6 years).
-
Consent: When you voluntarily submit a contact form or request an academic consultation.
4. Protection of Minors (Children’s Data)
As we provide educational support to students preparing for GCSE and A-Level examinations, we strictly require all enquiries, session bookings, and financial agreements to be conducted directly by a parent or legal guardian. We do not knowingly collect personal data directly from children under the age of 13 without parental consent.
5. Data Sharing & Security
We value your privacy and never sell, rent, or trade your personal data to third parties. We may share necessary data with trusted service providers strictly to operate our business:
-
Secure website hosting and form processing providers.
-
Business banking partners (Starling Bank plc) for payment processing.
-
UK tax authorities (HMRC) where legally required.
Appropriate security measures are implemented to prevent your personal data from being accidentally lost, accessed, or used in an unauthorized way.
6. Your Legal Rights Under UK GDPR
Under UK data protection law, you have the following rights:
-
Right of Access: Request a copy of the personal data we hold about you.
-
Right to Rectification: Request correction of inaccurate or incomplete data.
-
Right to Erasure: Request deletion of your personal data (“Right to be Forgotten”).
-
Right to Restrict or Object: Object to or restrict our processing of your personal data.
-
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us directly via email.
7. Contact & Complaints
If you have any concerns regarding how we handle your personal data, please contact us first so we can resolve the matter. You also have the right to lodge a complaint with the UK data protection regulator:
-
Information Commissioner’s Office (ICO): https://ico.org.uk
