Privacy Notice

Last updated 10 November 2026

1. Who is responsible

Aspire Affordable Tuition, trading as Aspire GCSE AI, is the data controller for personal data collected through this service under UK GDPR and the Data Protection Act 2018.

2. Data we collect and why

  • Account details (name, email, login credentials) — to create and secure your account (contract).
  • Study profile (year group, exam board, tier, school) — to show suitable questions (contract).
  • Answers and photos of working — to save your work and provide AI marking (contract).
  • Marks and progress — to show your progress tracker (contract).
  • Technical data (IP address, device and usage information) — for security, fraud prevention and improving the service (legitimate interests).
  • Support messages — to answer your questions (legitimate interests).

Card details are collected by our payment provider, Stripe, not by us.

3. Who we share data with

  • Hosting, storage and AI service providers that run the service on our behalf;
  • Stripe (including its Link service), our payment provider, for sales, subscription management, payments, tax and invoicing;
  • Professional advisers such as accountants and lawyers;
  • Authorities where required by law.

We never sell personal data.

4. International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Addendum.

5. How long we keep data

We keep account and study data while your account is active. When you close your account, we delete or anonymise it within 90 days, except where we must keep records for legal or tax reasons.

6. Security

We use encryption in transit, private storage for photos, access controls so only you can see your work, and short-lived links when photos are viewed.

7. Your rights

You can ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent at any time. We respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

8. Cookies

We only use essential cookies and browser storage needed to keep you signed in. We do not use advertising cookies.

Our administrator traffic report counts visits and page views by approximate town, region, country, device category and source category. Locations come from our hosting provider’s network-location estimates, not GPS, and may be unavailable or inaccurate. It stores daily totals, not IP addresses, account identifiers, exact locations or individual browsing histories. A new page load counts as a visit; repeat visitors cannot be identified. It uses no cookies or browser storage and honours Do Not Track and Global Privacy Control requests. Only authorised administrators can read these totals.