Privacy Policy

1. Introduction

This Privacy Policy explains how Klasu ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the Klasu platform at klasu.co.uk ("Platform").

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time and will notify registered users of material changes by email or via the Platform.

2. Who We Are

Klasu is an online tutoring marketplace operated by Jacob Whittle, trading as Klasu, a sole trader established in England, United Kingdom.

For the purposes of UK data protection legislation, Jacob Whittle, trading as Klasu, is the data controller for personal data processed in connection with the Platform, except where another organisation acts as an independent controller.

Business address: 

167-169 Great Portland Street

5th Floor

London

W1W 5PF

Email: support@klasu.co.uk

Website: https://klasu.co.uk

3. What Data We Collect

We collect different types of personal data depending on how you use the Platform and the type of account you hold.

3.1 Data You Provide Directly

• Account registration: Name, email address, password, phone number, account type (Student, Tutor, or Parent)
• Tutor profile information: Biographical details, qualifications, teaching experience, subjects offered, hourly rate, profile photograph and optional tutor introduction video.
• Tutor identity and verification information: Legal name, date of birth, identity documents, proof of address, qualification certificates, right-to-work information and related verification records.
• Student profile information: Name, learning preferences, date of birth (for age verification)
• Background checks: DBS certificate number and related verification data (Tutors only)
• Payment information: Payment card details are collected and processed by our payment provider, Stripe. Klasu does not store full card numbers.
• Messages and communications: Messages sent between Users through the Platform's messaging system
• Support queries: Information you provide when contacting our support team or using the AI support chat
• Reviews: Written reviews and ratings left by Students for Tutors

3.2 Data We Collect Automatically

• Usage data: Pages visited, features used, time spent on the Platform, and interaction patterns
• Device information: Browser type, operating system, screen resolution, and device identifiers
• IP address: Your internet protocol address, which may indicate your approximate location
• Online status: When you were last active on the Platform (used for messaging features)
• Cookies and similar technologies: As described in Section 8 below

3.3 Data from Third Parties

• Stripe: Payment confirmation, transaction status, and payout information
• DBS Update Service: Results of background check verifications for Tutors
• Lessonspace: Lesson attendance data, session duration, and recording availability

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Providing the Platform

• Creating and managing your account
• Facilitating Bookings between Students and Tutors
• Processing payments and Tutor payouts
• Providing the Online Classroom for Lesson delivery
• Enabling messaging between Users
• Displaying Tutor profiles in search results and directories

4.2 Safety and Moderation

• Verifying Tutor identities and background checks
• Filtering and moderating messages for prohibited content
• Detecting and preventing fraud, abuse, or other harmful activity
• Enforcing our Terms and Conditions and content policies
• Protecting the safety of Users, particularly children

4.3 Communications

• Sending transactional emails (booking confirmations, payment receipts, lesson reminders)
• Sending SMS notifications (where you have opted in)
• Responding to support queries
• Sending platform updates and service announcements

4.4 Improvement and Analytics

• Analysing platform usage to improve features and user experience
• Generating anonymised and aggregated statistics
• Monitoring platform performance and resolving technical issues

5. Legal Basis for Processing

We process your personal data under the following legal bases as defined by UK GDPR:

• Contract: Processing necessary to perform our contract with you (providing the Platform, processing Bookings and payments)
• Legitimate interests: Processing necessary for our legitimate interests (platform security, fraud prevention, content moderation, service improvement), where those interests are not overridden by your rights
• Consent: Where you have given specific consent (marketing communications, SMS notifications, optional cookies)
• Legal obligation: Processing necessary to comply with a legal obligation (tax reporting, responding to law enforcement requests)

6. Who We Share Data With

We share your personal data with the following categories of third parties, only to the extent necessary to provide the Platform and as described in this policy:

6.1 Other Users

When you use the Platform, certain information is visible to other Users. For Students, this includes your first name and last initial. For Tutors, your profile information (including name, biography, qualifications, and reviews) is publicly visible.

6.2 Service Providers

We use the following third-party service providers to operate the Platform:

• Stripe — payment processing and Tutor payouts. Stripe processes your payment information under its own privacy policy. Stripe Privacy Policy
• Twilio — SMS notifications (where you have opted in). Twilio Privacy Policy
• Lessonspace — online classroom for Lesson delivery, including optional session recording. Lessonspace Privacy Policy
• Amazon Web Services (AWS) — secure file storage for profile photographs, documents, and uploaded files
• OpenAI — AI-powered support chat functionality (conversation data is processed but not used to train AI models)
• Cloudflare — bot protection and security (Turnstile challenge)
• DigitalOcean — application and database hosting

6.3 DBS Update Service

Where a Tutor subscribes to the DBS Update Service, we may share their DBS certificate number with the Disclosure and Barring Service to verify the status of their criminal record check.

6.4 Legal and Regulatory

We may disclose your data where required by law, regulation, or legal process, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7. International Data Transfers

Our primary servers and database are hosted in the United Kingdom (London region) via DigitalOcean. However, some of our third-party service providers may process data outside the UK. Where your data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries that have received an adequacy decision from the UK government
• Other appropriate safeguards as required by UK GDPR

8. Cookies and Similar Technologies

8.1 What Cookies We Use

We use cookies and similar technologies to operate, secure and improve the Platform. These include:

• Essential cookies: Required for the Platform to function, including authentication, account security, booking functionality and remembering your cookie preferences. These cannot be disabled through our cookie settings.
• Security cookies: Cloudflare Turnstile and other security technologies help protect the Platform against fraud, bots and unauthorised access.
• Payment and classroom cookies: Stripe and Lessonspace may use cookies and similar technologies to securely provide payment processing and online classroom functionality.
• Analytics (optional): Google Analytics (GA4) and PostHog help us understand how visitors use the Platform and improve our services. This may include session recordings of website interactions, with text inputs masked to protect personal information. These technologies are used with your consent.
• Advertising measurement (optional): Google Ads, Meta (Facebook and Instagram) and OpenAI, where enabled, help us measure the effectiveness of our advertising campaigns. These technologies are used with your consent.
• Personalised advertising (optional): Advertising partners may use cookies and similar technologies to deliver more relevant advertisements based on your interactions with the Platform. These technologies are used with your consent.

We also use browser storage to remember your cookie preferences and, where permitted by your consent, information about the advertising or referral source that brought you to Klasu. Referral information may be stored for up to 90 days.

You can manage your preferences for optional technologies through our cookie consent settings.

8.2 Managing Cookies

When you first visit the Platform, you will be shown a cookie consent banner allowing you to accept or decline optional cookies. You can change your cookie preferences at any time through your browser settings. Disabling essential cookies may affect the functionality of the Platform.

9. Data Retention

9. Data Retention

We retain personal data only for as long as necessary to provide the Platform, fulfil the purposes described in this policy and meet applicable legal, regulatory, accounting and safeguarding obligations. Retention periods vary depending on the type of information and its purpose.

• Active accounts: Account and profile information is retained for as long as necessary to provide our services and manage your account.
• Closed accounts: