 
															Privacy and Data Protection
Your trust matters. We protect it.
At Hickling Hacks, we take privacy and data security seriously. Whether you’re a student, parent, tutor or school partner, you have the right to know how your information is handled — and to feel confident that your data is in safe hands.
This page outlines our approach to data protection in a clear, accessible way.
For full details, you can read our complete Privacy Policy (PDF).
How We Use and Protect Your Information
We collect and use personal data for one simple reason: to deliver high-quality tutoring services. This includes contact details, academic information, and progress records — all handled with care and in accordance with UK GDPR regulations.
We ensure that:
- Only authorised team members access your data 
- Personal data is securely stored using encrypted, password-protected systems 
- Sensitive information (e.g. about children or vulnerable adults) is reviewed regularly and stored with additional safeguards 
- No data is ever sold, and we do not use your information for third-party marketing 
Legal Grounds for Data Collection
We process personal information under the following lawful bases:
- To fulfil a tutoring or service contract 
- To comply with legal obligations (e.g. safeguarding) 
- Where there is a legitimate educational or operational interest 
- With your consent — which you may withdraw at any time 
Your Rights
Under UK data protection law, you have rights over your personal information, including:
- Accessing the data we hold about you 
- Correcting inaccurate data 
- Requesting deletion of your data 
- Restricting or objecting to certain types of processing 
- Receiving your data in a transferable format 
To exercise these rights or to ask any questions, email: Kirsty@HicklingHacks.co.uk
Security and Breach Protocols
We implement multiple safeguards to keep your data secure — including regular reviews, secure storage, and encrypted communications. In the unlikely event of a breach, we will:
- Act immediately to minimise risk 
- Notify affected individuals where necessary 
- Advise on next steps to protect your information 
