Tutopiya is an online tuition ed tech company that provides 1-1 and group classes to students from multiple syllabi including IGCSEs, GCSEs, IB, and AQA. Our student base comes from multiple ethnicities and grades across the UAE, Malaysia, and Singapore. Our tutor base primarily includes tutors from Sri Lanka and India. We are committed to protecting the privacy of our students and tutors and respect the right of individuals to request the erasure of their personal data under certain circumstances.
This policy applies to all personal data held by Tutopiya, including the personal data of our students and tutors.
Tutopiya holds personal data on the following legal basis:
Consent: Individuals have provided their explicit consent for the processing of their personal data for specific purposes such as providing tutoring services, processing payments, and maintaining academic records.
Contractual: The processing of personal data is necessary for the performance of a contract with the individual, such as for the provision of tutoring services or for the processing of payments.
Legal obligation: The processing of personal data is necessary to comply with a legal obligation, such as for tax or regulatory purposes.
Legitimate interests: The processing of personal data is necessary for the legitimate interests pursued by Tutopiya or a third party, such as for the improvement of our services or for the prevention of fraud.
Individuals have the right to request the erasure of their personal data in the following circumstances:
Personal data is no longer necessary for the purposes for which it was collected: Personal data will be retained only for as long as it is necessary for the purposes for which it was collected. Once the purpose is fulfilled, we will delete or anonymize the data.
The individual withdraws their consent and there is no other legal basis for processing the personal data: If an individual withdraws their consent to the processing of their personal data, we will stop processing it and delete it unless there is another legal basis for processing.
The individual objects to the processing of their personal data and there are no overriding legitimate grounds for the processing: If an individual objects to the processing of their personal data, we will assess whether there are any legitimate grounds that override their interests, rights, and freedoms.
Personal data has been unlawfully processed: If personal data has been unlawfully processed, we will take steps to rectify the situation and, if necessary, delete the personal data.
The personal data has to be erased for compliance with a legal obligation: If there is a legal obligation to delete personal data, we will do so.
Individuals can make a request to have their personal data erased by contacting Tutopiya’s Data Protection Officer (Lakmal – contact by emailing lakmal@tutopiya.com). The DPO will verify the identity of the individual making the request and will respond within 3-4 working days.
If the request is granted, Tutopiya will take all reasonable steps to erase the personal data, including notifying any third parties who have access to the personal data.
If an individual requests the erasure of their personal data, Tutopiya may be unable to provide tutoring services or fulfill legal obligations. In such cases, we will inform the individual of the consequences of erasure.
Tutopiya is committed to complying with the GDPR. This policy is subject to regular review to ensure ongoing compliance with all applicable laws and regulations.
We will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, accounting, or reporting requirements. We will securely delete or anonymize personal data when it is no longer required for these purposes.
We take appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. We regularly review and update our security measures to ensure the ongoing integrity, confidentiality, and availability of personal data.
In the event of a data breach, Tutopiya will notify the affected individuals and the relevant authorities as required by law. We will take all necessary steps to contain and investigate the breach and prevent any further unauthorized access or processing of personal data.
Tutopiya may engage third-party processors to process personal data on our behalf. We will only engage processors that provide sufficient guarantees regarding their security and privacy practices. We will also ensure that the processing activities are conducted in accordance with our instructions and applicable data protection laws.
Individuals have the right to access, rectify, and restrict the processing of their personal data. They also have the right to object to the processing of their personal data and to request the transfer of their personal data to another controller. Tutopiya will facilitate the exercise of these rights in accordance with applicable laws and regulations.
If you have any questions or concerns about our right-to-erasure policy, please contact Tutopiya’s Data Protection Officer (Lakmal) at lakmal@tutopiya.com
Tutopiya is committed to protecting the privacy and personal data of our students and tutors. This policy outlines the circumstances under which individuals may request the erasure of their personal data and the steps that Tutopiya will take to comply with such requests. We will review and update this policy as necessary to ensure ongoing compliance with all applicable laws and regulations.
Get in Touch
+65 6016 0923