General Data Protection Regulation (GDPR) Notice

Effective Date: January 1, 2026

1. Introduction

This GDPR Notice explains how Abenezer Tutoring ("we," "us," or "our") collects, processes, and protects your personal data when you use our platform, in compliance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws of the European Economic Area (EEA).

2. Data Controller

Abenezer Tutoring is the data controller responsible for your personal data. If you have any questions about this notice or your data protection rights, you can contact us at:

• Email: legal@abenezertutoring.com
• Response time: We aim to respond within 30 calendar days.

3. Personal Data We Collect

We collect the following categories of personal data when you interact with our platform:

• Identity & Contact Data: Full name, username, phone number, parent/guardian phone number (optional).
• Educational Data: Course enrollments, attendance records, grades, achievements, and certificates.
• Technical Data: Login timestamps, activity logs, and platform interactions for security and service improvement.

We do not collect special categories of personal data (such as health information, biometric data, or political opinions).

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

5. Data Sharing and Transfers

We use the following third‑party service providers who may process your data on our behalf:

• Supabase – PostgreSQL database hosting (data stored in the EU Central‑1 region).
• Render – Backend application hosting (data processed in the EU region).
• Vercel – Frontend application hosting (data processed globally with appropriate safeguards).
• Sentry – Error monitoring (anonymized technical data only).

We do not sell your personal data to any third party. All data processors are contractually obligated to comply with GDPR requirements.

6. International Data Transfers

Some of our service providers may process data outside the EEA. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or reliance on adequacy decisions where applicable.

7. Data Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, we will remove your personal data within 60 days, except where retention is required by law or for legitimate educational record‑keeping purposes.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

• Right of Access: You may request a copy of your personal data.
• Right to Rectification: You may request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your data under certain conditions.
• Right to Restriction: You may request that we limit the processing of your data.
• Right to Data Portability: You may request your data in a structured, machine‑readable format.
• Right to Object: You may object to processing based on legitimate interest.

To exercise any of these rights, contact us at legal@abenezertutoring.com.

9. Right to Complain

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority in your EU member state of residence.

10. Automated Decision‑Making

We do not use your personal data for automated decision‑making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

11. Changes to This Notice

We may update this GDPR Notice from time to time. We will notify you of any material changes through the platform or via the contact information you have provided.

12. Contact

For any questions about this GDPR Notice or our data protection practices, contact:

Email: legal@abenezertutoring.com