1. Introduction
BVL ALL SCIENCE operates bvlallsciences.com, an online educational study centre offering primary, secondary, and sixth-form (A‑Level) tutoring, etc. Our mission is to deliver “sound education through excellent and impactful teaching methodologies”. We respect your privacy and are committed to protecting your personal data as required under the UK’s Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
2. What Personal Data We Collect
We collect only necessary personal information to deliver our services:
Student & Parent/Guardian Data (provided directly):
- Names, contact info (email, phone), demographic details (e.g. age, school year).
- Details of educational needs, learning preferences, and progress reports.
Website Usage Data (automatically collected):
- IP addresses, browser/device type, and access times.
- Activity logs: pages visited, forms completed, video interactions.
Communications: Email correspondence, chat logs, telephone call records when used for support or feedback.
3. How We Use Your Data
We process personal data for the following lawful purposes:
- Service Delivery: To match tutors, schedule lessons, track progress, and provide support.
- Administration: Invoices, appointments, technical maintenance.
- Improvement & Personalisation: To evaluate and enhance lesson quality, content, and user experience.
- Legal Compliance: For safeguarding, audits, and lawful obligations.
- Marketing (with consent): Newsletters, offers only sent to users who opt in.
4. How We Share Your Data
We share personal data only when necessary and under strict conditions:
- With tutors delivering sessions.
- With approved service providers (e.g., payment, hosting, analytics) who are GDPR-compliant.
- To legal authorities in cases of safeguarding concerns or other lawful requests.
We do not sell or share personal data for advertising or unrelated purposes.
5. International Transfers
As a UK entity, if data is transferred outside the UK, we ensure adequate safeguards (e.g. Standard Contractual Clauses) are in place to maintain UK GDPR compliance.
6. Data Security & Retention
We employ appropriate technical and organisational measures to protect personal data.
Retention Periods:
- Student records and lesson data: retained for up to 7 years or until no longer needed.
- Financial records: kept for at least 6 years to comply with UK tax regulations.
- Marketing data: retained unless you withdraw consent.
7. Your Rights Under UK GDPR
You have the right to:
- Access personal data
- Correct or update data
- Erase data (“right to be forgotten”) in some circumstances
- Restrict processing or object to it
- Request data portability
- Withdraw marketing consent at any time
To exercise these rights or lodge a complaint, contact our Data Protection Officer (details below). You may also contact the UK Information Commissioner’s Office (ICO).
8. Children’s Privacy
Our services are designed for children aged 5-18. We obtain parental or guardian consent before collecting personal data from any under-18 student. Children cannot consent independently.
9. Marketing Communications
We only send newsletters or promotional emails to users who have actively opted in. You may withdraw consent at any time via an unsubscribe link or by contacting us.
10. How we collect your Personal Data
We may collect data about you by you providing the data directly to us (for example by filling in forms on our site or by sending us emails). We may automatically collect certain data from you as you use our website by using cookies and similar technologies. Please see our Cookies Policy for more details about this.
We may receive data from third parties such as analytics providers such as Google based outside the EU, advertising networks such as Facebook based outside the EU, such as search information providers such as Google based outside the EU, providers of technical, payment, and delivery services, such as data brokers or aggregators.
We may also receive data from publicly available sources such as the Companies House and the Electoral Register based inside the EU.
11. Policy Updates
We may update this Policy periodically for example, to comply with legal changes. Any significant updates will be communicated via email or website notifications, and the “Effective Date” will be revised accordingly.
12. Third-Party Links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
