GrindTree.ie ("we", "us") is the data controller for personal data collected through the platform. This policy explains what we collect, why, and the rights you have under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
1. Data We Collect
Students
- Name
- Email address
- Phone number (optional)
- Account credentials
- Booking and payment history
Tutors
- Name
- Email address
- Phone number
- Qualifications and experience
- Profile information (bio, photo, subjects, locations)
- Payment / payout information (held by Stripe)
Usage data
- Browser type and version
- Device and operating system
- IP address (truncated where possible)
- Pages viewed, searches and interactions
2. Purpose & Legal Basis
We process personal data to:
- Create and manage your account (contract).
- Process bookings and payments (contract).
- Provide customer support (legitimate interest).
- Improve and secure the platform (legitimate interest).
- Comply with legal and tax obligations (legal obligation).
- Send marketing communications where you have consented (consent).
3. Data Sharing
We share data only with:
- Stripe and other regulated payment providers for processing payments and payouts.
- Hosting and infrastructure providers acting as processors under contract.
- Legal authorities where we are required by law to disclose information.
We never sell personal data.
4. Retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax and accounting obligations (typically up to 7 years for financial records).
5. Your GDPR Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal exceptions.
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
6. Security
We use encryption in transit, secure cloud infrastructure and strict access controls. No system is perfectly secure — please use a strong, unique password.
7. Cookies
See our Cookie Policy for details on cookies and similar technologies.
8. Contact
Privacy questions or GDPR requests: grindtree.ie@gmail.com.