1. Who We Are
Miss ICT is operated by Duygu Cella, a sole trader based in Norfolk, UK. We provide specialist Computer Science tutoring, SEND and EOTAS provision, Arcade coding education for home-educated learners, and digital educational resources.
Data controller: Duygu Cella · Get in touch · www.missict.com
2. What Data We Collect
Enquiry and Booking Forms
- Parent/carer name, email address, and phone number
- Child's first name and year group
- Enquiry type, exam board, and message content
Tutoring and Exam Intensives
- Session notes and progress records
- Exam board and grade targets
- For group intensives (max 4 students): a register of attending learners held securely for safeguarding purposes
SEND and EOTAS Provision
- SEN diagnoses, EHCP information, and learning needs shared by the referring body
- Communication preferences and accessibility requirements
- Progress notes, session records, and reporting for the commissioning authority
Arcade Services
- Arcade Live (max 3 learners per session): parent/carer name, email, and child's first name
- Arcade Circle: parent/carer email and community name only; no child personal details stored in the community space
- Arcade Home: email address for delivery of purchased materials only
Digital Resource Purchases
- Email address for delivery; payment is processed by third-party providers — Miss ICT does not store card details
Website
- Google Analytics 4 data (with consent); cookie preferences stored locally in your browser
3. How We Use Your Data
- To respond to enquiries and provide the requested service
- To schedule and manage tutoring, provision, and Arcade sessions
- To deliver digital resources and Arcade Home learning packs
- To maintain progress records and produce reports for SEND and provision learners
- To send service-related updates, timetable changes, or session reminders
- To send marketing communications via MailerLite — only where you have explicitly opted in
- To improve our website using anonymised analytics
- To fulfil safeguarding obligations where required by law
4. Legal Basis for Processing
| Purpose | Legal Basis |
|---|
| Delivering booked sessions and resources | Contract performance |
| Responding to enquiries | Legitimate interests |
| SEND progress records and reporting | Legal obligation / Legitimate interests |
| Marketing emails | Consent (opt-in only) |
| Website analytics | Consent (cookie banner) |
| Safeguarding disclosures | Legal obligation / Vital interests |
5. Data Sharing
We do not sell your personal data. We share data only where necessary:
- Calendly — booking platform (USA; SCCs apply)
- MailerLite — email marketing (EU; GDPR compliant)
- Google Analytics / GTM — website analytics (consent-based)
- Formspree — contact form processing
- Payment processors (Stripe / Ko-fi) — transaction processing only
- Local authorities and virtual schools — for EOTAS/SEND provision as required by placement agreements
In the event of a safeguarding concern, data may be shared with statutory agencies without requiring consent.
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|
| Enquiry and contact records | 2 years from last contact |
| Tutoring session records | 3 years from last session |
| SEND provision records | 7 years (statutory minimum) |
| Safeguarding records | Indefinitely (statutory requirement) |
| Purchase records | 7 years (financial records) |
| Marketing consent records | Until consent is withdrawn |
7. Your Rights
Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. Contact Get in touch — we respond within 30 days. You may also complain to the ICO.
8. Cookies
Our website uses cookies to support analytics and user experience. Manage preferences via the banner on your first visit. See our full Cookie Policy.
9. Contact
Privacy queries: Get in touch. Last updated: 13 March 2026.
