Privacy Notice

Who I am

SmartBean Tuition is run by Coderra in Jersey, and lessons are taught by Dr Jose Galan. Coderra is the data controller for the personal information collected through this website, under the Data Protection (Jersey) Law 2018. In this notice, "I" and "me" mean Dr Jose Galan on behalf of Coderra.

Contact me about anything in this notice at info@coderra.je or on 07700 717757.

What I collect

• Enquiries and course plans: your name, email, phone number (optional), the student's year group, your message, and any topics you chose in the course builder.
• Accounts: the student's name, email and phone number; a parent or guardian's name, email and phone number; school, year group, preferred way of having lessons, and an optional short bio and photo.
• Lessons: booking dates and times, the type of session, any notes you add, and my notes on topics covered, homework and progress.
• Starting-point checks: the answers you give, whether each was right, wrong or "I don't know", whether you said you're under 16 and when you confirmed a parent or carer knew, and your exam board if you choose to tell me. I don't record how long you take. Your display and reading choices (text size, font, colours, read-aloud) are saved only in your own browser and are never sent to me.
• Progress summaries (only if you agree): the date of a check and each topic's band (Secure, Developing or Priority), with no answers, so a later check can show progress.
• Payments: invoices are issued by Coderra JE Ltd through SumUp, so SumUp holds the parent's name and email and the lesson details on each invoice. You pay on SumUp's secure page or by bank transfer to Coderra JE Ltd. Card details are never seen or stored by this website or by me. I keep a record of each invoice (number, lesson, amount, how and when it was paid).

Why I use it

• To reply to enquiries and arrange tuition, including course plans you send me. This is in my legitimate interests and is a step you've asked me to take before agreeing lessons.
• To deliver lessons you've booked: scheduling, sending booking emails and meeting links, and tracking progress. This is necessary to provide the service you've agreed to.
• To plan lessons from your starting-point check. The results are simple rules (for example, "every answer right" means secure) that suggest where to start. I read them myself, and they're never used to turn anyone away. This is in my legitimate interests and yours, in planning tuition that fits.
• To show progress between checks, only if a parent or carer (or a student aged 16 or over) ticks the box agreeing to keep a summary. This is based on that consent, which can be withdrawn at any time.
• To take payments and keep financial records, which the law requires me to keep.

I don't sell your information, use it for advertising, or send marketing emails.

Children

Most of my students are under 18. For them, lessons are arranged with a parent or guardian, and I use the parent or guardian's contact details to arrange and update them. Parents and guardians can use any of the rights below on their child's behalf.

Before a starting-point check, students are asked if they're under 16. If they are, they must confirm that a parent or carer knows and is happy for them to do it.

Who I share it with

Only with the services that run the website and lessons, and only what each one needs:

• Railway: hosts this website and its database, on servers in the Netherlands.
• Resend: sends the website's emails, such as booking confirmations.
• SumUp: sends invoices and processes card payments.
• Google Meet: used for online lessons.
• Cal.com: provides the booking calendar. When you book through it, the details you enter go to Cal.com and to me, under Cal.com's own privacy policy.
• Google Fonts and jsDelivr: used only by some pages in the Resources section, to load fonts and the in-browser Python runner, so they see your IP address when those pages load.

The website and its database are stored in the Netherlands, in the European Union. Some of the other providers may also process data elsewhere, including the United States. Where they do, they protect it with safeguards recognised under data protection law, such as standard contractual clauses.

How long I keep it

• Enquiries and course plans: deleted automatically after 12 months.
• Starting-point check answers: deleted automatically 7 days after the check was finished (or started, if it wasn't finished). You can delete them yourself at any time with the "Delete my answers" link on your results.
• Progress summaries: only kept if you agree, for up to 12 months, and deleted straight away if you ask, or with the "Delete it" link on the Starting-point checks page.
• Accounts and lesson records: kept while your account is open. Ask me and I'll delete them.
• Payment and invoice records: kept for as long as Jersey tax law requires.

How I keep it safe

The website only works over an encrypted connection (HTTPS). The database isn't publicly accessible, and only I can see your details, through a password-protected admin area.

IP addresses and cookies

This website doesn't store your IP address, and its styling, scripts and maths display are served from this website itself, not from other companies' servers.

This website only uses the cookies it needs to work: one to keep you logged in and one that protects forms against misuse. There are no analytics, tracking or advertising cookies.

Your rights

You can ask me to:

• give you a copy of the information I hold about you;
• correct anything that's wrong;
• delete your information;
• stop or limit how I use it, or object to it;
• give you your information in a format you can take elsewhere.

Email info@coderra.je and I'll reply within four weeks.

Complaints

If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Jersey Office of the Information Commissioner at jerseyoic.org.

Changes

If I change how I use your information, I'll update this page and the date at the top.