Cambridge Potentia

Privacy Policy

Last updated: March 2026

1. Who We Are

Cambridge Potentia provides online coaching services for children aged 7–18. This policy explains how we collect, use, store and protect personal data when you use our platform.

2. Data We Collect

We collect the following types of personal data:

  • Account information — name, email address, Telegram contact details, role (parent, child, coach)
  • Child information — name, age, focus areas, coaching notes (provided by parents)
  • Session data — scheduling, attendance records, coach notes
  • Payment data — processed securely by Stripe; we do not store card details
  • Usage data — platform interactions for service improvement

3. How We Use Your Data

We use personal data to:

  • Deliver and manage coaching sessions
  • Communicate with parents and coaches about scheduling and progress
  • Process payments and issue invoices
  • Improve our platform and services
  • Comply with legal and safeguarding obligations

4. Legal Basis

We process data on the following grounds:

  • Contract — to deliver the coaching services you have engaged
  • Consent — parental consent for processing children’s data
  • Legal obligation — safeguarding duties and financial record-keeping
  • Legitimate interest — platform improvement and communication

5. Data Storage and Security

Your data is stored securely on encrypted servers. Payment information is processed by Stripe and never stored on our systems. We implement appropriate technical and organisational measures to protect your data.

6. Data Sharing

We do not sell personal data. We share data only with:

  • Coaches — session-relevant information to deliver coaching
  • Stripe — for secure payment processing
  • Authorities — if required by law or for safeguarding purposes

7. Children’s Data

We take special care with children’s data. Parental consent is required for all children under 18. Children’s data is used solely for delivering coaching services and is not used for marketing.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing or request restriction
  • Data portability

To exercise these rights, please contact us through Telegram or our website.

9. Data Retention

We retain personal data for as long as necessary to deliver our services and comply with legal obligations. Session records and financial data are retained for up to 7 years as required by UK law.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes. Continued use of our services constitutes acceptance of the updated policy.