.

At Roxstar Research, we are committed to protecting your privacy and ensuring that your personal information is handled securely and in compliance with the General Data Protection Regulation (GDPR). This statement outlines how we collect, use, store, and protect your personal data in connection with the tutoring services we provide.

Who We Are

Roxstar is a private tutoring service provider. We specialise in offering personalised tutoring services to students of all ages. Our business operates from Seaford, Easy Sussex and we can be contacted at drlauraevenstar@gmail.com.

What Personal Data We Collect

To provide you with our tutoring services, we may collect the following personal data:

• Student Information: Name, age, academic history, and any specific learning needs.
• Parent/Guardian Information: Name, contact details (email, phone number), and any relevant background information.
• Billing Information: For invoicing purposes, such as name, address, and payment details.
• Communication Data: Emails, phone calls, or messages exchanged between you and us regarding tutoring sessions.

We collect personal data through various means, including registration forms, phone calls, emails, and through interactions during the tutoring process.

How We Use Your Data

We will only use your personal data for the following purposes:

• To provide tutoring services, including scheduling sessions and tracking academic progress.
• To communicate with you regarding appointments, changes, billing, and any important updates related to the tutoring process.
• To manage payments and issue invoices.
• To comply with legal obligations related to our business.

We will not use your personal data for any purposes other than those described in this statement, unless we obtain your explicit consent or as required by law.

Legal Basis for Processing Your Data

We process personal data based on the following legal grounds:

• Contractual necessity: We process data to fulfill our tutoring contract with you.
• Consent: In some cases, we may ask for your explicit consent to collect or use certain data (e.g., special learning requirements).
• Legal obligation: For compliance with applicable laws, such as invoicing and tax requirements.

How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These measures include:

• Secure storage of your data (both digital and physical).
• Restricted access to personal data only to staff who need it to perform their duties.
• Regular security audits and updates to our data protection policies.

Sharing Your Data

We do not share your personal data with third parties, except in the following circumstances:

• Service Providers: We may use third-party providers for services such as payment processing and communication tools, who are contractually obligated to handle your data in a secure manner.
• Legal Compliance: If required by law or to protect our legal rights, we may disclose your personal data to regulatory authorities or law enforcement agencies.

How Long We Keep Your Data

We retain your personal data for as long as it is necessary to fulfill the purposes outlined in this statement, including any legal or contractual obligations (e.g., tax or invoicing records). When data is no longer needed, it will be securely deleted or anonymised.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccuracies in your data.
• Right to Erasure: You can request that we delete your data under certain circumstances (e.g., when it is no longer needed or if you withdraw your consent).
• Right to Restrict Processing: You can request that we limit the processing of your data.
• Right to Data Portability: You can request that we provide your data in a structured, commonly used format for transfer to another service provider.
• Right to Object: You can object to the processing of your data in certain circumstances.

  To exercise these rights, please contact us at drlauraevenstar@gmail.com.

Changes to This Statement

We may update this Privacy and Data Protection Statement from time to time. If we make significant changes, we will inform you through email or other communication methods. Please check our website periodically for any updates.

Contact Us

If you have any questions about how we handle your personal data or wish to exercise your GDPR rights, please get in touch with us at: Drlauraevenstar@gmail.com