Privacy Policy for F to A Tutoring - F to A Tutoring - Helping Learners Help Themselves.

Last Updated: August 11, 2025

Plain-Language Summary

At F to A Tutoring, we value your privacy. We collect basic details like your name, contact info, and academic needs to provide tutoring services. We keep your data safe using tools like encryption and limited access, and we only share it when needed (e.g., with tutors or payment providers). You have rights to access, correct, or delete your data. For kids, we get parent permission first. If there’s a data issue, we’ll tell the right people quickly. We don’t use auto-decisions that affect you big time, and you can opt out of marketing emails. Read the full policy for details.

Introduction

Welcome to F to A Tutoring. We are committed to protecting the privacy and personal information of our clients, including students, parents, and tutors, in accordance with the Data Protection Act of Zimbabwe (2021) and Section 57 of the Zimbabwe Constitution, which enshrines the right to privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you engage with our tutoring services, whether in-person or online.

By using our services or accessing our website (https://ftoatutors.com), you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

Who We Are

Our website address is: https://ftoatutors.com. F to A Tutoring provides educational tutoring services and operates this website to facilitate client interactions, registrations, and resources.

1. Definitions

Personal Information: Information relating to an identifiable person, including but not limited to name, contact details, educational history, or any other data as defined by the Data Protection Act of Zimbabwe.
Data Subject: Any individual (student, parent, or tutor) whose personal information is collected or processed.
Data Controller: F to A Tutoring, responsible for determining the purposes and means of processing personal information.
Data Processor: Any third party that processes personal information on our behalf.
DPA: The Data Protection Authority, overseen by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).

2. Information We Collect

We collect personal information to provide and improve our tutoring services. The types of data we may collect include:

Client Information: Names, contact details (email, phone number), addresses (for home tutoring), and payment information.
Student Information: Academic records, subjects of interest, learning needs, and progress reports.
Tutor Information: Qualifications, contact details, and professional experience.
Website Usage Data: Cookies, IP addresses, and browsing behavior to enhance user experience (with your consent).
Sensitive Information: Where necessary (e.g., for special learning accommodations), we may collect data such as health or disability information, with explicit consent.

We collect this information directly from you (e.g., through registration forms, emails, or tutoring sessions) or indirectly (e.g., via website cookies or third-party platforms with your consent).

Comments on the Website

When visitors leave comments on the site (e.g., on blog posts or resource pages), we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media Uploads

If you upload images to the website (e.g., for profile pictures or shared resources), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

3. How We Use Your Information

We process personal information for the following purposes, ensuring compliance with the principles of necessity, fairness, and lawfulness under the Data Protection Act:

To provide tutoring services, including matching students with tutors and scheduling sessions. For online tutoring, this may involve using video platforms where sessions are not recorded unless you consent, and any recordings are deleted within 30 days.
To communicate with clients and tutors regarding appointments, payments, or updates.
To monitor and assess student progress and tailor educational programs.
To improve our services and website functionality through analytics (with consent).
To comply with legal obligations, such as tax reporting or regulatory requirements.
To protect the rights, safety, and property of our clients, tutors, and the company.

4. Legal Basis for Processing

We process personal information based on the following legal grounds:

Consent: Explicit or implied consent from data subjects (e.g., signing up for tutoring services or agreeing to cookie usage).
Contractual Necessity: To fulfill our contract with you (e.g., providing tutoring services).
Legal Obligation: To comply with Zimbabwean laws and regulations.
Legitimate Interests: For purposes such as improving services or preventing fraud, provided these interests do not override your rights.

For minors, we obtain parental or guardian consent before collecting or processing personal information, in line with the Data Protection Act. This consent is verified through methods such as signed forms, email confirmation from the parent/guardian, or phone verification. We apply extra safeguards for minors’ data, including stricter access controls and shorter retention periods where possible.

5. Data Storage and Security

We take measures to protect your personal information, including:

Encryption: Using secure encryption methods (e.g., AES-256) for storing and transmitting sensitive data.
Access Controls: Limiting access to personal information to authorized personnel only, using role-based access control (RBAC) systems.
Additional Safeguards: Implementing firewalls, antivirus software, and multi-factor authentication to prevent unauthorized access.
Regular Audits: Conducting periodic reviews (at least annually) to ensure compliance with data protection standards.
Retention Policies: Retaining data only for as long as necessary (e.g., student records are deleted one year after services end, unless required by law). If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on our website (if any), we also store the personal information they provide in their user profile indefinitely, unless deleted upon request.

Data is stored within Zimbabwe, except where cross-border transfers are necessary (see Section 8).

6. Sharing Your Information

We may share personal information with:

Tutors: To facilitate tutoring sessions (e.g., sharing student contact details or academic needs).
Third-Party Service Providers: For payment processing (e.g., EcoCash or Paynow), website hosting, or online tutoring platforms (e.g., Zoom or Google Classroom), provided they comply with data protection standards through contracts that include data protection clauses. Visitor comments may be checked through an automated spam detection service.
Regulatory Authorities: As required by law, such as the Zimbabwe Revenue Authority (ZIMRA) or POTRAZ.
Legal Protection: To defend our rights or comply with legal processes (e.g., court orders).

For online tutoring, we share minimal data (e.g., names and session links) with platforms like Zoom, which may involve data processing in other countries. If you request a password reset, your IP address will be included in the reset email. We do not sell, rent, or share your personal information for marketing purposes without your explicit consent.

7. Your Rights as a Data Subject

Under the Data Protection Act, you have the following rights:

Right to be Informed: To know how your personal information is used.
Right to Access: To request a copy of your personal data held by us.
Right to Correction: To correct inaccurate or misleading information.
Right to Object: To object to the processing of your personal information for specific purposes.
Right to Deletion: To request the deletion of your personal data, subject to legal obligations.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

To exercise these rights, contact us at [Insert Contact Email or Phone Number]. We will respond within 30 days, as required by law.

8. Cross-Border Data Transfers

If you are located outside Zimbabwe and provide information to us, or if we use international tutoring platforms (e.g., Zoom based in the United States), your data may be transferred to Zimbabwe or other countries (e.g., the United States for Google services). We ensure that any recipient country or organization provides an adequate level of data protection, as required by the Data Protection Act (Sections 28 and 29). This may include using standard contractual clauses or obtaining DPA authorization. Transfers occur only when necessary, such as for contract performance or with your consent. Visitor comments may be checked through an automated spam detection service, which could involve cross-border transfers.

9. Cookies and Website Tracking

Our website uses cookies to enhance user experience and analyze site performance. Cookie types include:

Essential Cookies: Required for basic site functionality (e.g., session management).
Analytics Cookies: To track usage patterns (e.g., via Google Analytics).

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

You can manage cookie preferences through your browser settings or our cookie consent tool on the website, which allows you to opt out of non-essential cookies without affecting core site access. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

10. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

11. Data Breach Notification

In the event of a data breach, we will notify the DPA within 24 hours of becoming aware of the breach, as required by the Data Protection Act (Section 19). If the breach poses a high risk to data subjects, we will notify affected individuals promptly to allow them to take protective measures. We maintain an incident response plan to mitigate harm and ensure transparency.

12. Automated Decision-Making

We do not use automated decision-making processes (including profiling) that produce legal effects or significantly affect you, as defined under the Data Protection Act (Section 25). All decisions, such as tutor matching, are made with human oversight.

13. Marketing Communications

We may send you marketing communications (e.g., newsletters about new tutoring programs) only if you have opted in during registration or via email preferences. You can opt out at any time by clicking the unsubscribe link in our emails or contacting us directly.

14. Training and Compliance

All staff and tutors are trained on data protection principles and Zimbabwe’s legal requirements. We conduct bi-annual training sessions to ensure compliance with best practices and to address emerging privacy risks.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated policy will be posted on our website, and we will notify you of significant changes via email or during tutoring sessions.

16. Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us at:

Email: admin@ftoatutoring.net
Phone: +263 772 445 551