Privacy Notice
Last updated: 25 September 2026
STEM by the Sea respects your privacy and the privacy of your children. This notice explains what personal information we collect, why we collect it, how we look after it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
STEM by the Sea is run by Andrew (Andy) Dean, based in Bempton, East Yorkshire. Andy is the data controller for the personal information described in this notice and is registered with the Information Commissioner’s Office (ICO). You can contact us about anything in this notice at andy@stembythesea.co.uk.
What information we collect
- Enquiries: your name, email address, phone number (if you give it) and the content of your messages.
- Bookings: parent or carer names and contact details, emergency contacts, your child’s name and age or school year, and details of who may collect them.
- Health, SEND and wellbeing information: such as allergies, medical conditions or additional needs that you choose to share so we can keep your child safe and adapt sessions for them.
- Tutoring records: notes on learning progress, targets and work covered.
- Photos and videos: only where you have given written consent.
- Payments: records of payments and invoices. We do not store card details.
- Website use: basic, anonymised statistics about visits to this website, collected by our website host.
Why we use it and our lawful basis
- To reply to enquiries and arrange sessions — taking steps at your request before entering into a contract, and performing that contract.
- To keep children safe — our legitimate interests and, for safeguarding, our legal obligations. Health and SEND information is used only with your explicit consent, or where it is needed to protect a child’s vital interests in an emergency.
- To keep financial records — legal obligation (tax and accounting).
- Photos, and news or updates by email — your consent, which you can withdraw at any time.
Who we share it with
We never sell your information. We only share it where necessary: with the trusted services we use to run the business (our website and email provider, WordPress.com and its email service, and our bank for payments); with funders, only in anonymised form, when reporting on funded places; and with the appropriate authorities if we are ever required to by law or to protect a child from harm.
How long we keep it
We keep personal information only for as long as we need it. Enquiries that don’t lead to a booking are deleted within 12 months. Booking, tutoring and consent records are kept for the time your child attends and then for up to 3 years. Financial records are kept for 6 years, as required by HMRC. Any safeguarding records are kept for as long as statutory guidance requires.
How we keep it safe
Information is stored securely on password-protected devices and accounts, and any paper records are kept locked away. Access is limited to Andy.
Your rights
You have the right to ask for a copy of the information we hold about you or your child, to ask us to correct or delete it, to restrict or object to how we use it, and to withdraw consent at any time. To make a request, just email andy@stembythesea.co.uk — we will respond within one month.
Cookies
This website is hosted by WordPress.com, which uses a small number of cookies to make the site work and to produce anonymous visitor statistics. You can control cookies through your browser settings.
Complaints
If you have any concerns about how we use your information, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
