Privacy Policy

Last updated: 31st July 2026

This policy is written for parents, guardians, learners and website visitors.

At a glance

We use personal information only where we have a proper reason, collect no more than we need, take extra care with children’s information and do not sell personal information.

Parents or guardians normally provide registration and payment information for a learner
We use information to answer enquiries, take bookings, deliver education, communicate, keep learners safe and meet legal obligations
Wix supports our online forms, website analytics and payments. Other carefully selected providers may support communications, teaching and secure storage
Promotional photographs and videos are optional and are used only with specific, informed consent
You have rights over personal information and can contact us at info@majoeducation.org

1. Who we are

Májó Education is the trading name of Daniel Oshinyemi, a sole trader based in England. Daniel Oshinyemi trading as Májó Education is the data controller for the personal information described in this policy. This means we decide why and how that information is used.

Contact address: Suite RA01, 195–197 Wood Street, London, E17 3NU

Email: info@majoeducation.org

Website: www.majoeducation.org

2. Who this policy covers

This policy covers learners, parents and guardians, people who make enquiries or bookings, website visitors, and other people who communicate with Májó Education. A parent or guardian should read this policy with a learner in a way that is appropriate to the learner’s age and understanding.

3. Information we collect

Information about parents, guardians and customers

Name, email address, telephone number, postal or billing address and relationship to the learner.
Enquiry, registration, booking, payment and transaction information. Full payment-card details are generally handled by the payment provider rather than stored by us.
Communications, preferences, complaints, feedback and records of consent.

Information about learners

Name, date of birth or age, school year, course and relevant educational background.
Attendance, participation, submitted work, quiz or assessment results, tutor observations and feedback.
Information reasonably needed to provide support, accessibility adjustments or emergency assistance.
Safeguarding concerns, incident information and emergency-contact details where necessary.
Photographs, audio or video only where captured for a stated purpose and with an appropriate lawful basis.

Website and technical information

IP address, device and browser information, pages visited, referring source, timestamps, cookie identifiers and similar analytics information.
Information entered into online forms and choices made through our cookie banner or consent controls.

Special category information

Some health, disability, accessibility or safeguarding information may be legally classed as special category data. We collect it only where necessary and apply an additional legal condition, such as explicit consent, protection of vital interests, or safeguarding children and individuals at risk where the law permits.

4. How we collect information

Directly from a parent, guardian, learner or website visitor through online forms, bookings, payments, email, telephone or other communications.
During the delivery of sessions, including attendance, participation, work and feedback records.
Automatically through Wix and permitted cookies or analytics technologies when someone uses our website.
From tutors, education partners, venues or public authorities where appropriate, lawful and necessary.

If another person gives us information about a learner, they should ensure they are authorised to do so and that the learner and relevant parent or guardian understand how the information will be used.

5. Why we use information

UK data protection law requires us to identify a lawful basis for each use of personal information. We may use more than one basis where different activities are involved.

Typical information and purpose

Contact, learner and course details: respond to enquiries and administer registration
Booking, billing and transaction data: take payment and keep transaction records
Attendance, work, results, feedback and communications: deliver and improve sessions
Emergency, health, adjustment, incident or safeguarding data: support safety, welfare and accessibility
Technical, security and essential-cookie data: secure and operate the website
Analytics and non-essential cookie data: measure website use
Responsible adult contact details and marketing preferences: Send optional promotional messages
Image, voice and contextual information: use promotional photos or videos
Identity, correspondence and relevant records: handle rights, complaints and legal claims

6. Photographs, video and audio

We may wish to capture selected sessions or events to explain and promote Májó Education’s work. Participation in promotional media is optional and is not a condition of receiving our services.

Before capturing or using identifiable promotional material, we will provide a separate consent request that explains:

what will be captured and the activity or event involved;
the purpose of the material and whether a learner’s name or other details will appear;
where it may be used, such as our website, printed materials or specified social-media channels;
the intended audience, including whether publication makes it publicly accessible;
who may receive or help produce the material; and
how long the consent and material will remain in use.

Our default maximum period for promotional use is three years from capture, unless the consent request states a shorter period. We review retained promotional material at least annually and remove it when it is no longer needed. A parent or guardian, or a learner who is competent to exercise their own rights, may withdraw consent at any time by emailing info@majoeducation.org. Withdrawal does not make earlier lawful use unlawful, but we will stop new use and take reasonable steps to remove the material from channels we control.

Material already printed or copied, downloaded, reposted or indexed by third parties may not be fully recoverable. We will explain this risk before consent is given and will not tag a learner’s personal social-media account or publish unnecessary identifying details.

Routine online lessons will not be recorded unless we first identify a clear purpose, inform participants and parents or guardians, select an appropriate lawful basis, define access and retention, and apply suitable safeguards.

7. Cookies, Wix and analytics

Our website uses Wix services to provide online forms, payment functionality, security and analytics. Some cookies and similar technologies are essential for the website to work. Non-essential analytics or advertising technologies will be used only after the required choice or consent has been obtained through our cookie controls.

A separate cookie notice or cookie banner should identify the cookies currently deployed, their providers, purposes and durations. Visitors can change their non-essential cookie choices using the available controls. Browser settings may also block cookies, although this can affect website functions.

8. Who we share information with

We share personal information only where needed and with appropriate protections. Recipients may include:

Wix and payment-service providers supporting our website, bookings, analytics and payments;
tutors, staff and contractors who need information to deliver or administer services;
email, videoconferencing, cloud-storage, IT-security, media-production or professional service providers;
venues, delivery providers or education partners where relevant to a booked service;
insurers, accountants, legal advisers and other professional advisers;
police, local authorities, safeguarding bodies, regulators, courts or other authorities where required or reasonably necessary.

Service providers acting on our behalf are expected to use information only on documented instructions, keep it secure and delete or return it when their work ends. We do not sell personal information.

9. International transfers

Some technology providers may store or access information outside the United Kingdom. Where this happens, we will use a lawful transfer mechanism and appropriate safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with any supplementary measures considered necessary. You may contact us for more information about the relevant safeguard.

10. How long we keep information

We keep information only for as long as necessary for the purpose collected, including legal, accounting, safeguarding and dispute requirements. The periods below are our normal guide and may be shortened or extended where circumstances or law require.

Records and normal retention periods

General enquiries that do not lead to a booking: up to 12 months after the enquiry is closed
Booking, contract, payment and core customer records: up to 6 years after the end of the relevant financial year or customer relationship
Attendance, learning, assessment and feedback records: up to 3 years after the learner’s final session, unless needed longer for a dispute or safeguarding purpose
Routine accessibility, health or emergency information: until the programme ends, then deleted or minimised within 3 months unless an incident, legal or safeguarding reason requires longer
Accident or significant incident records involving a child: normally until 3 years after the learner’s 18th birthday, subject to legal advice and insurer requirements
Safeguarding records: according to the nature of the concern and safeguarding requirements; serious records may be kept until the learner is 25 or transferred securely to an appropriate authority
Promotional photographs and videos: up to 3 years from capture, reviewed annually, unless the consent request states a shorter period or consent is withdrawn
Consent and withdrawal records: for as long as the relevant processing continues and normally up to 3 years afterwards to demonstrate the choices made
Website analytics and cookies: for the period shown in the current cookie notice or consent tool
Rights requests and complaints: normally up to 3 years after closure, or longer where needed for a legal claim

11. Security

We use proportionate technical and organisational measures designed to protect personal information from accidental loss, misuse, alteration, unauthorised access or disclosure. These measures may include access controls, strong authentication, secure configuration, backups, staff confidentiality, supplier checks and procedures for responding to personal-data breaches.

No internet or storage system is completely risk-free. If a breach creates a risk to people’s rights and freedoms, we will assess it promptly, take appropriate action and notify the Information Commissioner’s Office and affected people where the law requires.

12. Your data-protection rights

Depending on the circumstances, an individual may have the right to:

be informed about how their personal information is used;
request access to their personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase information in certain circumstances;
ask us to restrict how information is used;
object to processing based on legitimate interests or to direct marketing;
receive certain information in a portable format;
withdraw consent at any time where consent is the lawful basis; and
not be subject to a decision based solely on automated processing that has a legal or similarly significant effect, where applicable.

These rights are not absolute. We may need to verify identity and may retain information where the law permits or requires. We normally respond within one month. We do not currently make solely automated decisions with legal or similarly significant effects.

Children’s rights

Children have their own data-protection rights. Whether a parent or guardian acts for a learner depends on the learner’s age, understanding and circumstances. We will take the learner’s views and best interests into account. Requests involving information collected from a child, particularly erasure requests, will receive special consideration.

13. Marketing choices

Operational messages about an enquiry, booking, payment, timetable, safety or service are not marketing. Where we send optional promotional email or electronic messages, we will use consent or another route permitted by applicable electronic-marketing law. Recipients can unsubscribe using the message link or by contacting us. We do not direct behavioural advertising at learners or use learner educational records to create advertising profiles.

14. Complaints

Please contact us first if you have a question or concern so that we can try to resolve it:

Email: info@majoeducation.org

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. Current contact details and complaint guidance are available at www.ico.org.uk. You may also telephone the ICO on 0303 123 1113.

15. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be published on our website with its updated date. If a change significantly affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people and seek fresh consent where required.

16. Related notices and operational documents

This privacy policy should be read alongside the current cookie notice, safeguarding and child protection policy, and any short privacy information shown at the point an online form collects information.