Effective date: 09/06/2026
STEMITUP is committed to protecting your privacy and handling personal data fairly, lawfully, and transparently in line with UK GDPR and the Data Protection Act 2018.
This policy explains what data we collect, why we collect it, how we use it, how long we keep it, and the rights available to you.
1. Who we are
STEMITUP provides tutoring and education-focused recruitment services in the UK. For privacy-related enquiries, please email info@stemitup.co.uk.
2. Scope of this policy
This policy applies to information collected via our website, application forms, communication channels, and operational systems used to deliver tutoring and recruitment services.
3. Personal data we collect
- Identity data: title, first name, surname, date of birth.
- Contact data: address, postcode, email address, phone numbers.
- Professional and application data: qualifications, subjects, preferred tutoring services, level, location preferences, and comments.
- Compliance and safeguarding data: DBS declarations, right-to-work declarations, visa status information, and uploaded evidence documents.
- Communication data: enquiry details, support requests, and correspondence history.
- Technical data: IP address, browser user agent, and form submission metadata.
4. Special category and sensitive checks
Where recruitment or safeguarding obligations require enhanced checks, we may process additional information (such as DBS-related information) only where lawful, necessary, and proportionate.
5. How we use your data
- To review and process tutor applications.
- To contact applicants about interviews, onboarding, and opportunities.
- To perform compliance checks including right-to-work and safeguarding requirements.
- To maintain audit trails and secure records of submissions.
- To improve our services, user experience, and form reliability.
6. Legal bases for processing
Depending on context, we process data under one or more legal bases:
- Consent (for specific optional processing and communications).
- Legitimate interests (operating recruitment/tutoring services effectively and safely).
- Legal obligation (compliance, safeguarding, and statutory duties).
- Pre-contractual steps (assessing suitability ahead of potential engagement).
7. Consent management
Where processing depends on consent, you may withdraw consent at any time by contacting us. Withdrawal does not affect processing already carried out lawfully before withdrawal.
8. Marketing communications
If you consent, we may send updates about relevant opportunities and services. You can opt out at any time using the unsubscribe option in communications or by emailing us directly.
9. Sharing your information
We do not sell personal data. We may share data only with:
- Service providers supporting secure hosting, email delivery, and operational systems.
- Schools, education partners, or placement contacts where needed for role matching and onboarding.
- Regulators, law enforcement, or authorities where disclosure is required by law.
10. International transfers
Where service providers process data outside the UK, we use appropriate safeguards (such as contractual protections) to maintain equivalent data protection standards.
11. Data retention
We retain personal data only for as long as necessary for recruitment decisions, safeguarding/compliance records, legal obligations, and legitimate business purposes. Retention periods are reviewed regularly and data is securely deleted or anonymised when no longer needed.
12. Security measures
We maintain technical and organisational safeguards including access controls, secure storage, minimal-access principles, and monitoring to reduce unauthorised access, alteration, disclosure, or loss.
13. Your rights
Subject to legal conditions, you can request to:
- Access a copy of your personal data.
- Correct inaccurate or incomplete information.
- Delete your data in certain circumstances.
- Restrict or object to processing.
- Receive your data in a portable format where applicable.
To exercise any right, email info@stemitup.co.uk. We may request proof of identity before fulfilling a request.
14. Children and young people
Where services involve minors, personal data is handled with additional care and only for legitimate educational and safeguarding purposes.
15. Cookies and analytics
Our website may use cookies and similar technologies for essential functionality, performance monitoring, and service improvement. Browser settings may allow you to manage cookie preferences.
16. Complaints
If you are unhappy with how we process your data, please contact us first so we can investigate and resolve concerns. You may also complain to the UK Information Commissioner's Office (ICO).
17. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the current effective date.