thenextstep-logo (1)

Privacy Policy

Website: stepintoai.net
Trading name: The Next Step Tuition
Data Controller: Emmanuel Gibson Sampson, sole trader trading as The Next Step Tuition (“we”, “us”, “our”)
Contact: thenextsteptuition@gmail.com
Last updated: 30 December 2025

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and your rights.

Table of contents

  1. Who we are
  2. What data we collect
  3. How we use your data
  4. Our lawful bases
  5. Children’s data and parent responsibility
  6. Who we share data with
  7. Payments and financial data
  8. Online sessions, Teams and Zoom
  9. Marketing messages
  10. Cookies and analytics
  11. How long we keep data
  12. Security
  13. Your data protection rights
  14. How to complain
  15. International transfers
  16. Changes to this policy
  17. Contact us

1. Who we are

We provide online tutoring and coaching services through stepintoai.net. We may operate with a network of tutors. Your sessions may be delivered by Emmanuel or another approved tutor.

2. What data we collect

We collect data in three main ways: (a) data you provide, (b) data created during service delivery, and (c) data collected automatically when you use our Website.

2.1 Data you provide

  • Parent or guardian name, email address, phone number (if provided), billing address.
  • Student name, age or school year, school (if provided), and learning needs.
  • Booking details, availability, subject level, goals, and any messages you send us.
  • Payment related details required to process your order (handled mainly by payment providers).

2.2 Data created during tutoring

  • Session notes, learning plans, homework guidance, feedback, and progress records.
  • Communications about scheduling, attendance, and support.

2.3 Website and device data

  • IP address, browser type, device information, pages visited, and basic usage data.
  • Cookies and similar technologies (see section 10).

2.4 Special category data

Sometimes you may choose to share sensitive information about a Student, for example health information, special educational needs, or disability information. We ask you not to share sensitive information unless it is necessary for tutoring support. Where we do process this type of data, we do so with extra care, and typically only with explicit consent or where it is necessary for safeguarding and support.

3. How we use your data

We use personal data to:

  • Deliver tutoring services, including scheduling sessions and assigning a suitable tutor.
  • Communicate with you about bookings, changes, support, and service updates.
  • Process payments, manage orders, handle refunds if applicable, and keep financial records.
  • Improve our Website, services, and learning outcomes.
  • Prevent fraud, protect our business, and maintain platform security.
  • Comply with legal obligations.

4. Our lawful bases

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, we rely on:

  • Contract: to provide tutoring services you have purchased, and to take steps you request before booking.
  • Legitimate interests: to run and improve our business, protect against misuse, and maintain service quality, where this does not override your rights.
  • Legal obligation: where we must keep records or respond to lawful requests.
  • Consent: for certain optional activities, and for some categories of sensitive data where required.

5. Children’s data and parent responsibility

We provide tutoring to children and young people. If the Student is under 18, we expect a parent or guardian to book sessions, provide consent where required, and manage payments.

We aim to use clear language, limit data collection to what we need, and protect children’s data with extra care.

6. Who we share data with

We only share personal data when necessary to deliver services, operate the Website, or comply with law. This may include:

6.1 Tutors in our network

We share relevant Student information with the assigned tutor so they can deliver sessions effectively. Tutors are required to follow confidentiality and secure data handling rules.

6.2 Service providers

We use third party providers to run our Website and services, for example:

  • Website hosting, backups, and security services.
  • WordPress, WooCommerce, and learning management systems such as Academy LMS.
  • Payment providers such as Stripe and PayPal.
  • Email and communication tools.
  • Video session platforms such as Microsoft Teams and Zoom.
  • Analytics tools (see section 10).

6.3 Legal and regulatory

We may share data if required to do so by law, or to protect rights, safety, or to respond to lawful requests.

7. Payments and financial data

Payments on our Website are processed through WooCommerce and supported payment providers such as Stripe and PayPal, and we may also accept bank transfer.

We do not store full card details on our servers. Card payment data is handled by the payment provider. We may store order records, invoices, and payment status for accounting and customer support.

8. Online sessions, Teams and Zoom

Sessions are delivered online via Microsoft Teams or Zoom.

  • We do not record sessions by default.
  • If recording is ever required for a specific reason, we will seek appropriate consent in advance.
  • For best safeguarding practice, we expect professional boundaries and appropriate behaviour during sessions.

9. Marketing messages

We may send service messages that are necessary for your bookings, for example scheduling and policy updates.

If we send marketing messages, we will only do so where we have a lawful basis. You can opt out of marketing at any time by emailing thenextsteptuition@gmail.com.

10. Cookies and analytics

We may use cookies and similar technologies to:

  • Make the Website work properly, including checkout and login.
  • Remember preferences and improve user experience.
  • Understand how the Website is used so we can improve it.

You can manage cookies through your browser settings and, where available, our cookie banner or preference tool.

11. How long we keep data

We keep personal data only as long as necessary for the purposes it was collected, then we delete it, anonymise it, or securely archive it where required.

  • Orders and accounting records: typically kept for the period required for tax and accounting compliance. For self employed record keeping, this is often at least 5 years after the relevant deadline, and longer where required in specific cases.
  • Service records and communications: kept as long as needed to deliver services, handle queries, resolve disputes, and manage safeguarding.
  • Website logs: kept for a limited period for security and performance monitoring.

12. Security

We use reasonable technical and organisational measures to protect personal data, including access controls, account security, and secure handling practices. No system is perfect, but we work to reduce risk and respond quickly to issues.

13. Your data protection rights

Depending on your circumstances, you may have rights including:

  • Right to be informed about how your data is used.
  • Right of access to your personal data.
  • Right to correct inaccurate data.
  • Right to delete data in certain circumstances.
  • Right to restrict processing in certain circumstances.
  • Right to object to processing in certain circumstances.
  • Right to data portability in certain circumstances.
  • Right to withdraw consent where we rely on consent.

To request any of these rights, email thenextsteptuition@gmail.com. We may need to verify your identity before responding.

14. How to complain

If you have concerns, please contact us first at thenextsteptuition@gmail.com and we will try to resolve it.

You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO).

15. International transfers

Some of our service providers may process or store data outside the UK. Where this happens, we aim to ensure appropriate safeguards are used, such as contractual protections and other measures required under UK data protection law.

16. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our services after changes are posted means you accept the updated policy.

17. Contact us

If you have questions about this policy or how we handle personal data, contact us at:
thenextsteptuition@gmail.com