Privacy Policy

1. What I collect

From you directly:

• Name, email, phone (via the enquiry forms or WhatsApp)
• Student year level, curriculum (NCEA, Cambridge, IB, or university – including the paper, for university enquiries), and what you’d like help with
• Student work, progress notes, and assignment responses during tutoring

Automatically (from the website):

• On the site’s content, form, and thank-you pages (but not on error pages, the page-not-found page, or this privacy policy), a Google Tag (Google Ads) sends cookieless measurement signals to Google – such as the page visited, your IP address and browser details, and any Google Ads click identifier in the page address – so I can tell which ads lead to enquiries. It runs in Google Consent Mode with advertising and analytics storage switched off, and this site offers no way to switch it on, so Google does not set advertising or analytics cookies here. See Google’s Privacy Policy.
• On pages with a form, Botpoison (spam protection) stores a session token in your browser’s session storage and contacts Botpoison’s servers when the page loads. When you send a form, it runs a computational check in your browser and adds a token to the submission so Formspark can verify it. This uses session storage, not cookies, and the token is cleared when you close the tab.
• When a page with a form loads, the site prepares the Calendly booking widget for the thank-you page, which means your browser contacts Calendly’s servers before you reach that page. If you then send the form, the booking widget loads automatically on the thank-you page and Calendly may set cookies – see below for how your name and email are passed to it.
• When you send any of the enquiry forms, your name and email are kept temporarily in your browser’s session storage so they can be pre-filled in the booking calendar on the thank-you page. When that page loads, the name and email are passed to Calendly to pre-fill the booking form, whether or not you go on to book. The copy in session storage stays in your browser and is cleared when you close the tab.
• The website host (Render – see section 3) receives your IP address and browser details in order to serve each page, as any web host does.

2. How I use your information

I use what you give me to:

• Reply to enquiries and arrange tutoring
• Run sessions, set work, and track progress
• Stay in touch about scheduling, assignments, and progress
• Send progress updates when we’ve agreed to that
• Improve how I teach based on what works for each student

I don’t use the details you send me in an enquiry for marketing, and I don’t pass them on to third parties except as set out below. The Google Ads measurement described in section 1 only tells me which ads lead to enquiries; your form contents are not sent to Google.

3. Where your information is stored

I use these services to store or process your information:

• Render: hosting for this website; it serves the pages and may keep server and security logs (including IP addresses)
• Google Workspace (Gmail): emails and attachments
• Formspark: enquiry form submissions, including which page and subject each enquiry came from
• Botpoison: spam protection on pages with a form; it contacts its servers when such a page loads and runs a check in your browser when you send a form, using a session-storage token
• WhatsApp (Meta): messages
• Calendly: the booking widget prepared on form pages and shown on the thank-you page after you send a form; your name and email are passed to it to pre-fill the booking form, and Calendly may set cookies
• Google (Ads / gtag): loaded on content, form, and thank-you pages to measure enquiries and attribute them to ads, in Consent Mode with advertising and analytics storage switched off and no option on this site to switch it on, so it sends cookieless signals rather than setting advertising or analytics cookies
• Zoom (and Google Meet as a fallback): the video calls used for tutoring sessions

Some of these may store data outside New Zealand. I’ve taken reasonable steps to choose providers with good data protection practices.

4. How long I keep it

• Email & WhatsApp: for as long as we work together, plus 12 months after we finish (so I can answer follow-up questions or give references)
• Form submissions: up to 12 months; enquiries that don’t lead to tutoring may be deleted sooner
• Student work & progress notes: while you’re my student, plus 24 months (for future enquiries or recommendations)
• Website measurement and provider logs (Google, Botpoison, Calendly, and the website host, Render): kept under each provider’s own policy. The name, email, and Botpoison token kept in your browser’s session storage are cleared when you close the tab

You can ask me to delete your information at any time. Email me at james@aucklandmathstutor.co.nz and I’ll remove it within 30 days, unless the law requires me to keep it.

5. Keeping it secure

I take reasonable steps to protect your information, including:

• Password-protected accounts for all the services I use
• Encrypted connections (HTTPS; WhatsApp is end-to-end encrypted)
• Only I have access to your information

6. Your rights (Privacy Act 2020)

Under New Zealand’s Privacy Act 2020 you can:

• Ask for a copy of the information I hold about you
• Ask me to correct anything that’s wrong or incomplete
• Withdraw consent for particular uses (this might affect my ability to keep providing tutoring)
• Complain to the Office of the Privacy Commissioner if you think I’ve mishandled your information

To do any of the above, contact me at james@aucklandmathstutor.co.nz. I’ll respond within 30 days.

7. Sharing your information

I don’t sell or rent your information. I only share it:

• If you’ve given me clear permission
• When the law requires it
• With the services in section 3, only so they can do what I’ve described (e.g. deliver emails, store form submissions)

Parents and guardians: For students under 18, you can ask for access to your child’s progress information once I’ve confirmed who you are.

8. Data stored overseas

Some of the services I use (Render, Google, Meta, Formspark, Botpoison, Calendly, Zoom) may store data on servers outside New Zealand. I’ve checked their practices and am satisfied they meet standards comparable to what you’d expect under the Privacy Act 2020.

9. Changes to this policy

I may update this page from time to time. If I make a significant change, I’ll let active students know by email where appropriate. The “Last updated” date at the top shows when it was last revised.

10. Contact & complaints

Questions about your information or this policy?

If you’re not happy with how I’ve handled your information, you can make a complaint to the Office of the Privacy Commissioner (New Zealand).

11. Consent

When you send an enquiry form, start tutoring, or get in touch via WhatsApp or email, I collect, use, and (where set out above) share your information as described here.

You can withdraw that agreement at any time by contacting me – though that may mean I can’t continue providing tutoring.