Privacy Policy

Last updated: February 2026

Chayah Education is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Chayah Education is an educational support service providing personalised tutoring and educational services for children and young people in the United Kingdom.

Data Controller: Chayah Education Ltd
Contact Email: info@chayaheducation.co.uk

2. Information We Collect

2.1 Information You Provide

When you contact us or use our services, we may collect:

  • Contact information: Name, email address, telephone number, postal address
  • Enquiry details: Information you provide when making an enquiry about our services
  • Service-related information: Information necessary to provide our educational services, which may include details about the learner, their educational needs, and relevant background information

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Technical data: IP address, browser type and version, operating system
  • Usage data: Pages visited, time spent on pages, navigation paths
  • Cookie data: See our Cookie section below

3. How We Use Your Information

We use your personal information for the following purposes:

  • To respond to enquiries: Processing and responding to your questions about our services
  • To provide our services: Delivering educational support services as agreed
  • To communicate with you: Sending relevant updates about our services
  • To improve our website: Analysing how visitors use our website to improve user experience
  • To comply with legal obligations: Meeting our legal and regulatory requirements

We process your personal data based on:

  • Consent: Where you have given clear consent for us to process your data for a specific purpose
  • Contract: Where processing is necessary for a contract we have with you or to take steps at your request before entering into a contract
  • Legal obligation: Where processing is necessary to comply with the law
  • Legitimate interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights

4. Special Category Data

When providing educational services, we may need to process special category data (such as information about health or special educational needs). This data is processed with explicit consent and/or where necessary for the provision of health or social care services, in accordance with appropriate safeguards.

5. Data Sharing

We do not sell your personal data. We may share your information with:

  • Service delivery partners: Where necessary to provide our educational services
  • Schools and local authorities: Where they are the commissioning party or where required for safeguarding purposes
  • Professional advisers: Such as lawyers or accountants where necessary
  • Regulatory bodies: Where required by law or for safeguarding purposes

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • Enquiry data: Retained for up to 2 years after your last contact with us
  • Service records: Retained in accordance with legal requirements and best practice for educational and safeguarding records
  • Website analytics: Retained for up to 26 months

7. Your Rights

Under UK data protection law, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your data in certain circumstances
  • Right to restrict processing: Request limitation of how we use your data
  • Right to data portability: Request transfer of your data to another organisation
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

Types of Cookies We Use

  • Necessary cookies: Required for the website to function properly. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors use our website so we can improve it.
  • Functional cookies: Enable enhanced functionality and personalisation.

When you first visit our website, you will see a cookie consent banner powered by CookieYes. This allows you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customise your preferences by cookie category

You can change your cookie preferences at any time by clicking the cookie icon in the bottom right corner of the screen, or by adjusting your browser settings. Please note that disabling certain cookies may affect website functionality.

For more information about the cookies we use, please see our cookie declaration which is accessible via the cookie consent banner.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure data storage
  • Access controls
  • Regular security reviews
  • Staff training on data protection

10. International Transfers

We do not routinely transfer personal data outside the United Kingdom. If any transfer is necessary, we will ensure appropriate safeguards are in place in accordance with UK data protection law.

11. Children’s Data

As an educational service working with children and young people, we take the protection of children’s data very seriously. We process children’s data in accordance with UK GDPR requirements and our safeguarding policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: