Privacy Notice
This Privacy Notice governs the collection and sharing of personal data, including student data with DfE and approved contractors and schools. Please read it carefully. If you do not agree to our processing of personal data in the manner outlined below, please do not submit any personal data to us.
If you are a tutor or considering a role as an m2r Education tutor, please read our tutor data policy
GDPR
The General Data Protection Regulation (GDPR) is a regulation which replaces the Data Protection Regulation. The Regulation aims to harmonise data protection legislation across EU member states, enhancing privacy rights for individuals and providing a strict framework within which commercial organisations can legally operate. Even though the UK has left the EU, the GDPR is applicable in the UK. Furthermore, the Information Commissioner's Office (ICO) has confirmed that it will continue with a similar level of regulation.
This website is owned by m2r Ltd and the policy below lays out how GDPR applies to the way m2r Ltd handles your personal data. Our aim is to be responsible, relevant and secure when using your data. m2r Ltd is an international education services company and the purpose of this website is to provide tutoring services to you, your school or company. Our expectation is that individuals giving consent share these aims and objectives. If this is not your expectation, please do not complete the contact us form.
Please take a moment to read through what information we collect, who we share it with and how they might use it.
Who controls my personal data?
The Data Controller is m2r Ltd. It is Registered in the UK Company Number 4152824 at Langham House, 128 Westgate, Wakefield, WF2 9SR, W.Yorks, UK
The Data Controller’s representative is the Managing Director
You can contact them at datacontroller@m2rglobal.com
You can call them on 0044 1924 201973
m2r Limited is registered as a Data Controller with the Information Commissioner’s Office Certificate Number Z5625312
What is the purpose and legal basis of the processing?
At m2r Ltd we will rely on your ‘consent’ to process personal data. This is defined by the new General Data Protection Regulation (GDPR) standard of ‘consent’ as it’s legal basis for processing personal data.
GDPR defines consent as ‘any freely given, specific, informed and unambiguous indication of the data subjects’ (i.e. you) wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her’
By completing one of our online forms or submitting personal or student data on behalf of you or your child / school / LA, you understand and accept this as a valid legal basis for processing data in connection with helping to improve school grades.
Your data will not be shared with any third parties without your prior knowledge.
What data will the Controller collect and process?
The categories of personal data are your name, your email address and your mobile phone number. If you are contacting us from a school or another education company, we will also require your job title, office landline number and organisation name.
The categories of personal student data are first name and data regarding current and expected grades and / or outcomes. An email address will only be required if the tutor needs to share any lesson related material or links (if the lesson is conducted online) and only with consent by the parent / guardian / school or LA .
All data, including student data, is stored securely on Microsoft SharePoint. This is encrypted and password protected.
Who will have access to the data?
The recipients of your personal data are employees and contracted Tutors of m2r Ltd who require your data in order to provide tutoring services.
Student data will only be shared with tutors and only with written permission from the school / LA / parent or guardian etc and only if deemed relevant. If it is shared it would be at the start of a tutoring assignment and will only relate to data needed for lesson planning and to ensure outcomes are met.
Will the data leave the UK? If so, what safeguarding measures are in place?
m2r Ltd will send data outside of the UK if the assigned Tutor resides outside of the country. By agreeing to work with us, you agree that in order for us to assign the most ideal Tutor, we may have to send personal data outside of the UK.
How long will the data be kept for?
We will keep your personal data until you ask us to remove. You may wish to hear about new courses or wish to be kept in touch with regarding offers. These are the only reasons why we keep your data.
Student data will be kept until the student finishes the tutoring programme.
The data subject has the right to change their mind and withdraw consent at any point.
All data will be deleted from MS SharePoint plus any associated backups. Confirmation of this can also be provided.
What are my rights?
m2r Ltd confirms the following rights to each Data Subject:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.
If you wish to exercise any of these rights please email datacontroller@m2rglobal.com