Last updated: 9 October 2026
We are MYP Math Tutor. We respect your privacy and private life, but sometimes we need your Personal Data.
We consider Personal Data to be any information relating to an identified or identifiable person, in conformity with the General Data Protection Regulation (the GDPR).
This policy explains which Personal Data we use and why (the Privacy Policy). Furthermore, you will read how we process, store and protect your Personal Data. Finally, we outline what rights you have when we process your Personal Data.
This Privacy Policy applies to our Website www.mypmathtutor.com (the Website) and the services or products we provide (the Services). We process your Personal Data in accordance with the GDPR and all other relevant legislation and regulations in the field of protection of Personal Data, like Dutch Telecommunications Act (Telecommunicatiewet) regarding the use of cookies (the Relevant Legislation).
Are you under the age of 16?
If you are younger than 16 years old, you need permission from your parents or legal guardian to use our Website and Services.
Processing of Personal Data
In order to provide you with our Website and Services, we process your Personal Data.
How do we receive your Personal Data?
We receive Personal Data directly from you when you:
- fill in a form on our Website (scheduling a first lesson, getting in touch, or the newsletter and downloads);
- use the chatbot on our Website (enrolling, or asking us a question);
- book a free chat through our booking calendar (Calendly); or
- email us or register for lessons.
We also receive a small amount of technical data from your browser when you use our Website, for example your IP address, the page you were on, and the campaign or link that brought you to us.
Who is the controller of your Personal Data?
We are the controller of your Personal Data within the meaning of the Relevant Legislation. At the end of this Policy, you can find our contact details.
What Personal Data do we process, for which specified purpose(s), and on which legal basis?
We need some of your Personal Data in order for you to use our Website and Services.
We are allowed to process your Personal Data, because we comply with the Relevant Legislation. We lawfully process your Personal Data because we:
- Have legal bases for processing your Personal Data;
- Inform you about the processing; and
- Only process data for specific purposes, and no more than is necessary for that.
In the table below you will read (1) which Personal Data we process (2) for which purpose(s) and (3) on which legal basis.
We shall only use your Personal Data for the following purposes or for compatible purposes. By doing so, we will not use your Personal Data in an unexpected manner.
| (Personal) Data | Purpose(s) | Legal basis |
|---|---|---|
| Contact Data: First and/or last name Email address Address IP-address | We use these Data: To contact you To correspond with you For the delivery or performance of our Services to you | We process these Data on the basis of: A necessity to perform the contract |
| Payment Data: Payment Data of the paying party Invoices An overview of the purchases of our Services | We use these Data: To send invoices To update our financial administration To collect payment of invoices | We process these Data on the basis of: A necessity to perform the contract |
| Enquiry and booking Data (website forms, chatbot and booking calendar): Parent or guardian name Email address and phone number Country Student’s name, school, year and programme (MYP or DP) Weekly times that suit you and tutors you prefer Your message and any other information you choose to give us | We use these Data: To reply to your enquiry To match your child with a tutor and arrange a first lesson To book a free chat | We process these Data on the basis of: Taking steps at your request before a contract is made A necessity to perform the contract |
| Newsletter and download Data: First name and email address Whether you are an educator, parent or student Which downloads you requested A record of your consent and which wording you saw | We use these Data: To send you our newsletter To give you the resource you asked for To show that you agreed | We process these Data on the basis of: Your consent, which you can withdraw at any time |
| Website and campaign Data: IP address Pages visited and which form you used Referring website and campaign details in the link you clicked | We use these Data: To keep our Website secure and working To understand which forms and campaigns bring us enquiries Statistics, only if you accept cookies | We process these Data on the basis of: Our legitimate interest in running a secure website Your consent for statistics and campaign tracking |
Information about your child
If you are a parent or guardian, you may tell us about your child, for example their name, school, year and how they are getting on with maths. A free-text box in our forms and chatbot asks whether there is any other important information about your child that we should know.
This is optional. You do not have to answer it. If you choose to tell us something sensitive, for example about your child’s health, a learning difficulty or a learning support plan, you give us your explicit consent to use it to match your child with the right tutor and to teach them well. We do not use it for marketing and we do not put it in the confirmation email we send you. You can withdraw your consent at any time by emailing us, and we will delete this information.
Newsletter and marketing
We only send you our newsletter if you tick the box to say you want it. Signing up to the newsletter, or downloading a resource, requires that tick. Booking a lesson, getting in touch or sending us a question through the chatbot does not sign you up for marketing.
You can unsubscribe at any time, using the link at the bottom of every email, or by emailing us. We then keep only your email address on a list of people we must not email, so we do not email you by mistake.
Are you obliged to share your Personal Data with us?
In some cases, the processing of your Personal Data is necessary. This is relevant, for example, when we have to process your Personal Data in order to oblige to a contract with you or to provide a service to you. Without your Personal Data, we cannot provide our Service to you.
How do we secure your Personal Data?
We prioritize the security of your Personal Data and implement robust measures to safeguard it against loss, destruction, unauthorized access, alteration, or disclosure. We ensure that only authorized personnel can access your data. Our security practices include:
- Secure Network Connections: We utilize Transport Layer Security (TLS), Secure Socket Layer (SSL), and other encryption technologies to protect data during transmission.
- Strict Access Controls: Only authorized administrators within MYP Math Tutor have access to stored data, ensuring it is handled responsibly and securely.
- Data Encryption: Personal Data is encrypted both in transit and at rest, adding an additional layer of protection against unauthorized access.
- Multi-Factor Authentication (MFA): We implement MFA for administrator access to prevent unauthorized logins and enhance account security.
- Secure Data Storage: All recorded sessions and Personal Data are stored on reputable, third-party platforms with industry-standard security protocols.
- Automated System Monitoring: Our systems are continuously monitored for suspicious activities, with real-time alerts in place to detect and mitigate security threats.
We regularly review and refine these security measures to ensure your Personal Data remains protected and accessible only when necessary.
How long do we store your Personal Data?
We shall not store your Personal Data longer than the period in which we need them for the aforementioned purposes. We delete the Personal Data after we no longer need them for the purpose we process them for. The following is a list of the categories of Personal Data and the (functionally defined) retention periods:
| Category of Personal Data | Retention period |
|---|---|
| Enquiry and booking Data, and Contact Data | If you do not become a client: 12 months after our last contact with you, then we delete it. If you become a client: while we teach your child and for 12 months after the last lesson, then we delete or anonymise it, except what we must keep by law. |
| Information about your child that you chose to share | Only while we teach your child, then deleted with the rest of your records. You can ask us to delete it sooner. |
| Payment Data and invoices | We keep these for as long as Dutch tax law requires us to keep business records, currently 7 years. |
| Newsletter and download Data | Until you unsubscribe. After that we keep only your email address on a list of people we must not email. |
| Consent records (which wording you saw, and your choices) | For as long as we keep the Personal Data they relate to. |
| Website and campaign Data | Kept with the enquiry or sign-up it belongs to. Website statistics are kept only as long as needed to understand how our Website is used. |
| Lesson recordings | 90 days (see Recordings below). |
| Partner and/or supplier Data | For as long as it is needed to provide our Services. |
With whom do we share your Personal Data?
Processors
We may share your Personal Data with data ‘processors’ within the meaning of the Relevant Legislation. We conclude a data processing agreement with these parties, which entails that they shall process your Personal Data carefully and that they shall only receive the Personal Data they need to provide their service. These parties shall only use your Personal Data in accordance with our instructions and not for their own purposes. We only share your Personal Data with the following processors:
| Provider | What they do for us |
|---|---|
| Supabase | The database where we store what you send us through our forms and chatbot, and our records. Our database is in Frankfurt, Germany. |
| Brevo | Sends our emails (such as confirmations of your enquiry) and our newsletter, and stores newsletter subscribers. |
| Cloudflare | Hosts and delivers our Website securely, and runs the code that receives our forms. It handles visitors’ IP addresses. |
| Calendly | Lets you book a free chat. It stores your name, email and the time you chose. |
| Teachworks | Scheduling, client accounts and invoicing for lessons. |
| Lessonspace | Hosts online lessons and stores lesson recordings for 90 days. |
| Stripe | Takes payment for invoices. |
| QuickBooks | Our financial administration. |
| Email, and, only if you accept cookies, website statistics through Google Tag Manager. | |
| YouTube (privacy-enhanced mode) | Plays our embedded videos. Nothing loads from YouTube until you press play. |
If we have a legal obligation to share your Personal Data, we will do so. This is the case, for example, if a public authority legally requires us to share your Personal Data.
Recordings
At MYP Math Tutor, we are committed to providing high-quality tutoring services and maintaining transparency in our interactions. To ensure the best possible learning experience and uphold our standards, all tutoring sessions are recorded. These recordings serve two purposes: first, to support quality control and continuous improvement of our services, and second, to provide an objective record in the event of any disputes between the client and the company. Recordings are securely stored for 90 days on Lessonspace, our third-party platform provider, and are accessible only to administrators within MYP Math Tutor. By using our services, clients acknowledge and consent to the recording and storage of their tutoring sessions in accordance with this policy.
Cookies
A cookie is a small text file that can be sent via the server of a website to the browser. The browser saves this file to your computer. Your computer is tagged with a unique number, which enables our site to recognize that computer in the future.
Our Website needs a little browser storage to work: it remembers your cookie choice and, if you use the chatbot, the conversation so far so you can carry on where you left off. This stays on your device.
Other cookies are optional. When you first visit, a banner asks you to Accept or Reject. If you press Accept, we load Google Tag Manager, which runs our website statistics tools and can set cookies. If you press Reject, or do not choose, these are not loaded. You can change your choice at any time with the settings icon at the bottom left of any page.
You can always delete or disable cookies yourself via the browser settings. However, please note that without cookies, our Website may not function as well as it should.
Other provisions
Transfer
Our database is in the European Economic Area (EEA), in Frankfurt. Some of our providers, for example Cloudflare, Google, Calendly, Stripe, Teachworks and QuickBooks, may process your Personal Data outside the EEA. We only do so where the country provides an adequate level of protection, for example under an EU adequacy decision such as the EU-US Data Privacy Framework, or where the provider has appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses.
We shall never transfer your Personal Data to other countries or to other parties than those mentioned above without your permission.
Websites of third parties
Our website may contain links to other websites. We are not responsible for the content or the privacy protection on these websites. Therefore, we advise you to always read the privacy policy of those websites.
Your rights
You have the following rights:
- The right of access: You can request access to your Personal Data;
- The right to rectification: You can request us to correct, limit or delete your Personal Data. In the event of fraud, non-payment or other wrongful acts, we can store some of your Personal Data in a register or on a blacklist;
- The right to data portability: You can request a copy of your Personal Data. We can provide this copy to third parties at your request, so you do not have to do so yourself;
- The right to object: You can object to the processing of your Personal Data;
- The right to file a complaint: You can file a complaint at the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you are of the opinion that we wrongfully process your data;
- The right to withdraw consent: You can always withdraw your permission to process your Personal Data. From the moment of your withdrawal, we cannot process your Personal Data anymore.
Asking us to delete your data
You can ask us to delete your Personal Data, or to use any of your other rights, at any time:
- Email [email protected] with “Data request” in the subject line. Use the email address you gave us, or tell us what it was, so we can find your records. We may ask you to confirm who you are.
- We reply within one month. If your request is complicated, we can extend this by up to two further months, and we will tell you why.
- We delete or anonymise your Personal Data in our own records, including our database and our email system, and we ask our providers to do the same. We may need to keep some records the law requires us to keep, for example invoices, and we will tell you if so.
- To stop receiving the newsletter, you can also use the unsubscribe link at the bottom of every email.
Modifications to the Privacy Policy
We may modify this Privacy Policy. If we substantially modify the Privacy Policy, we shall place a notification on our Website together with the new Privacy Policy. We shall notify registered users in case of a substantial modification. If you are not a registered user, we advise you to consult the Website and this Policy regularly.
Contact
In the event that you wish to exercise these rights, or in the event of other questions or remarks regarding our Privacy Policy, you can contact us via the following contact details.