1. Who We Are
The data controller for your personal information is:
Business name: IELTS Training Camp
Operated by: Sahil Sayed
Location: London, United Kingdom
Contact: sahil.ieltstraining@gmail.com
Website: ieltstrainingcamp.com
As a sole trader operating in the UK, we take our data protection obligations seriously. If you have any questions about how we handle your data, please contact us at the email above.
2. Data We Collect
We collect the following categories of personal data:
Personal & Contact Data
Collected when you submit an enquiry form, register for a course, or contact us directly:
- Full name
- Email address
- Phone number (if provided)
- Country or city (if provided)
- Message content and enquiry details
Usage & Technical Data
Automatically collected when you visit our website:
- IP address (anonymised for analytics)
- Browser type and version
- Pages visited and time spent
- Referring website
- Device type (desktop/mobile)
This data is collected via Google Analytics and is anonymised. You can opt out via our cookie banner.
Payment Data
Payment processing is handled entirely by Stripe. We do not store, see, or have access to your card number, CVV, or full payment details. Stripe processes this data under their own privacy policy and PCI-DSS compliance framework.
We retain a record of the transaction (amount, date, course purchased) for accounting and legal purposes.
Communications Data
We retain message history from enquiry forms in our secure admin dashboard to enable us to respond effectively and maintain service continuity.
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Responding to your enquiries | Name, email, message |
| Sending course information and payment links | Name, email |
| Processing course enrolment and payments | Name, email, payment record |
| Delivering purchased courses and materials | Name, email, enrolled course |
| Improving our website and user experience | Anonymised usage data (Google Analytics) |
| Sending marketing emails (with your consent) | Name, email |
| Legal and accounting obligations | Transaction records, student records |
Marketing emails
We will only send you marketing emails if you have explicitly opted in (via a checkbox on our enquiry form). You can withdraw this consent at any time by clicking “unsubscribe” in any email, or by contacting us directly.
4. Legal Basis for Processing (GDPR Article 6)
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
Legitimate Interests
Responding to your enquiries, providing information about our courses, and maintaining our admin records. We have assessed that our interests do not override your rights and freedoms.
Consent
Sending you marketing emails, newsletters, or promotional content. You must actively opt in. You can withdraw consent at any time.
Contract Performance
Processing payments and delivering courses to enrolled students. This processing is necessary to fulfil our contractual obligations to you.
Legal Obligation
Retaining financial and student records as required by UK tax law and other legal obligations.
5. Data Sharing
We never sell your data.
Your personal data is never sold, rented, or traded to any third party for their own marketing purposes.
We share data only with the following trusted service providers, and only to the extent necessary to deliver our services:
Vercel
GDPRRole: Website hosting and infrastructure
Location: USA (EU-US Data Privacy Framework certified)
Compliance: Adequate safeguards per GDPR Article 46
Stripe
GDPRRole: Payment processing
Location: USA / Ireland
Compliance: GDPR compliant, PCI-DSS certified
Resend
GDPRRole: Transactional email delivery
Location: USA
Compliance: GDPR compliant, Standard Contractual Clauses
Google Analytics
GDPRRole: Website usage analytics (anonymised IP)
Location: USA
Compliance: GDPR compliant, IP anonymisation enabled, user can opt out
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data. To exercise any of them, email sahil.ieltstraining@gmail.com. We will respond within 30 days.
Right to Access
Request a copy of all personal data we hold about you.
Right to Erasure
Request that we delete your personal data ('right to be forgotten').
Right to Rectification
Request correction of any inaccurate or incomplete data.
Right to Portability
Receive your data in a structured, machine-readable format (e.g. CSV).
Right to Restrict Processing
Ask us to pause processing of your data while a complaint is being resolved.
Right to Withdraw Consent
Withdraw marketing consent at any time. Unsubscribe from any email or contact us directly.
Note: some rights are subject to exceptions. For example, we may be required to retain certain financial records for legal and tax purposes, which means we cannot always fulfil a deletion request in full.
7. Data Retention
We retain personal data only for as long as necessary:
| Data Type | Retention Period | Reason |
|---|---|---|
| Enquiry data (non-student) | 2 years | Legitimate interest in follow-up and service improvement |
| Student records | 7 years | HMRC / legal requirement for business records |
| Payment records | 7 years | Legal obligation (Stripe retains billing data) |
| Marketing consent records | Until consent withdrawn | Evidence of lawful processing |
| Marketing email data | Deleted immediately on unsubscribe | Respecting user withdrawal of consent |
| Analytics data | 26 months (Google Analytics default) | Website performance analysis |
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction:
- SSL/TLS encryption (HTTPS) on all pages
- Database encrypted at rest (Vercel Postgres / Supabase)
- Admin dashboard access restricted by password authentication
- Regular dependency and security updates
- Payment data handled entirely by PCI-DSS certified Stripe — we never touch card details
No method of data transmission or storage is 100% secure. While we take our responsibilities seriously, we cannot guarantee absolute security. If you suspect a data breach, please contact us immediately.
10. International Data Transfers
Some of our service providers (Vercel, Stripe, Resend, Google Analytics) process data in the United States. Under UK GDPR, transfers to third countries require appropriate safeguards.
Vercel is certified under the EU-US Data Privacy Framework, which the UK government recognises as providing an adequate level of protection. Stripe and Resend rely on Standard Contractual Clauses (SCCs) approved under Article 46 UK GDPR.
By using our website or services, you acknowledge that your data may be transferred to and processed in countries outside the UK. We ensure that all such transfers are carried out with appropriate safeguards in place.
11. Children's Privacy
Our services are intended for adults preparing for the IELTS exam. We do not knowingly collect personal data from children under the age of 16 without verifiable parental or guardian consent.
If you are a parent or guardian and believe we have inadvertently collected data from your child, please contact us at sahil.ieltstraining@gmail.com and we will delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we do, we will update the “Last Updated” date at the top of this page.
For significant changes that materially affect how we process your data, we will notify registered users by email where practicable. We encourage you to review this page periodically.
Continued use of our website or services after a change to this policy constitutes your acceptance of the updated terms.
13. Contact & Complaints
For any questions, requests, or concerns about how we handle your personal data, please contact:
Sahil Sayed — IELTS Training Camp
Email: sahil.ieltstraining@gmail.com
We aim to respond to all data protection requests within 30 days.
Right to Lodge a Complaint
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF