Edge Tutor Data Protection and Privacy Policy

Last updated: 2026
Company: Edge Tutor International Pte. Ltd. (“Edge Tutor”, “we”, “us”, “our”)
Contact: privacy@edgetutor.co

1. Introduction

Edge Tutor recognizes the importance of handling personal data in a responsible and practical manner. As part of our business, we collect, use, store, disclose and otherwise process personal data relating to tutors, applicants, learners, clients, prospective clients, business contacts, vendors, website users and Company Personnel. Because Edge Tutor operates as an international education services business, including tutor recruitment, onboarding, training, scheduling, quality support and managed tutoring operations, personal data may arise in a range of operational, commercial, technical and support contexts.

This policy sets out the general standards and expectations that apply to the way Edge Tutor handles personal data across its business. It is intended to provide a practical framework for privacy and data handling, taking into account the size and nature of Edge Tutor’s operations, the fact that the business works across multiple jurisdictions, and the fact that Edge Tutor’s role may differ depending on the service arrangement. It is not intended to be a statement that Edge Tutor adopts the highest available standard in every jurisdiction or scenario, nor is it intended to create commitments beyond what is commercially reasonable, operationally appropriate, contractually required, and technically feasible for a business of this nature.

This policy is primarily a governance document. Edge Tutor may also issue separate privacy notices, website disclosures, applicant notices, client-facing terms, operational guidance or jurisdiction-specific addenda where appropriate. Those documents may address particular services, workflows, audiences or legal requirements in more detail than this policy.

2. Scope and application

This policy applies to personal data processed by or on behalf of Edge Tutor in the course of its business activities, whether in electronic, paper, audio, video or other format. It covers personal data held within Edge Tutor systems, within third-party systems used by Edge Tutor, and, where relevant, personal data handled by Edge Tutor personnel through client systems in connection with service delivery.

This policy applies to all individuals performing work for or on behalf of Edge Tutor, including consultants, contractors, temporary personnel, directors, advisors and other engaged persons (“Company Personnel”). References to Company Personnel are used because Edge Tutor’s operating model is consultant- and contractor-based, and this policy is not intended to imply the existence of an employment relationship where none exists.

This policy applies to personal data relating to a range of categories of individuals, including current, former and prospective clients; client representatives; tutors, teachers and applicants; learners and students; vendors and service-provider contacts; partners; website visitors; event participants; and Company Personnel. The specific obligations that apply to a given processing activity will depend on the nature of the data, the relationship, the role played by Edge Tutor, the systems involved, and the contractual or legal framework applicable to that activity.

3. Nature of Edge Tutor’s business and privacy context

Edge Tutor provides services connected to tutoring operations and education support. Depending on the engagement, this may include identifying and assessing tutors, onboarding and training tutors, supporting tutor management, scheduling, service delivery support, quality review, communications, account support, reporting and other operational services. In some cases, Edge Tutor may use its own systems or workflows to support these activities. In other cases, Edge Tutor may operate within a client’s platform, systems or environment, with the client retaining primary control over the end-user relationship and the relevant service infrastructure.

Because of this operating model, Edge Tutor does not always process personal data in the same capacity. In some contexts, Edge Tutor will decide why and how personal data is processed and will therefore act as a controller or equivalent. In other contexts, Edge Tutor may process personal data only as part of delivering services on behalf of a client, in which case Edge Tutor may act as a processor, service provider, or equivalent role under the applicable law or contract. In some arrangements, there may also be mixed responsibilities, and the precise allocation of responsibilities may depend on the contract, the systems used, and the practical division of roles.

Where a client uses its own teaching platform or similar environment, Edge Tutor’s role will generally be limited to the service activities agreed between the parties, and the client will ordinarily remain responsible for the operation of the platform itself, including its own notices, permissions, configuration choices and third-party integrations, except to the extent the parties expressly agree otherwise. Edge Tutor may nevertheless handle personal data within the scope of its own operational role and remains responsible for handling that data in a reasonable and appropriate manner consistent with this policy and any applicable contractual commitments.  

4. Applicable legal and contractual context

Edge Tutor is incorporated in Singapore and operates internationally, with Company Personnel and service operations spanning multiple locations. As a result, different privacy or data protection laws may become relevant depending on the circumstances, including the location of the relevant individuals, clients, personnel, systems, service delivery arrangements and contractual commitments. This policy is intended to be generally applicable across Edge Tutor’s business without being tied to a single jurisdiction’s framework.

Edge Tutor aims to handle personal data in a way that is broadly consistent with commonly recognized privacy principles and with those legal or contractual requirements that are reasonably identified as applying to the relevant processing activity. However, this policy is not intended as a guarantee that Edge Tutor will automatically apply whichever jurisdiction has the most demanding or expansive rules in every case. Rather, Edge Tutor will take a practical approach, informed by the nature of the processing, the applicable contract, the jurisdictions materially connected to the processing, the legal requirements reasonably understood to apply, and what is operationally and commercially reasonable in the circumstances.

Where Edge Tutor is subject to a specific client requirement, local legal requirement, or mandatory process in relation to a given data set or service, those requirements should be addressed through the relevant agreement, notice, workflow or internal guidance rather than assumed solely through this policy.

5. Definitions

For the purposes of this policy, “Personal Data” or “Personal Information” means information relating to an identified or identifiable individual, whether directly or indirectly, and regardless of the medium in which it is recorded. “Sensitive Personal Data”, “Special Category Data”, or equivalent expressions refer to categories of personal data that are treated as requiring greater care under applicable law, such as health-related data, biometric data, criminal convictions data, or other protected categories recognized by law. “Processing” means any activity involving personal data, including collecting, recording, organizing, storing, using, disclosing, transferring, reviewing, deleting or destroying it. “Data Subject” means the individual to whom the personal data relates. “Personal Data Breach” means a security incident involving unauthorized access, disclosure, loss, alteration, destruction or other compromise of personal data.

These definitions are intended to provide general guidance. Where a specific law applies and uses different terminology or narrower or broader concepts, the relevant local legal meaning may need to be considered for that context.

6. Privacy governance and contact point

Edge Tutor maintains a privacy contact and internal responsibility structure for privacy-related issues. This is intended to support the handling of privacy questions, escalations, requests and incidents in a practical and organized way, rather than to suggest the existence of a large or formalized compliance function beyond what is appropriate for the business at its current scale.

The primary privacy contact for Edge Tutor is:

Data Privacy
Email:
privacy@edgetutor.co

The primary privacy contact is responsible for coordinating privacy-related matters to a reasonable extent, including maintaining this policy, helping direct internal questions, supporting the handling of data-related complaints or incidents, coordinating with management or external advisors where needed, and helping maintain practical privacy oversight within the business. This role should not be read as a representation that Edge Tutor has established a statutory or fully independent data protection office in every jurisdiction, unless and until Edge Tutor separately determines that such an appointment is necessary or appropriate.

Company Personnel are expected to raise privacy or data handling concerns through the available internal channels, including to the primary privacy contact, relevant managers or other designated persons as appropriate.

7. General data handling principles

Edge Tutor expects personal data to be handled in a way that is fair, reasonable, proportionate and aligned with the purpose for which it is used. In practical terms, this means that personal data should generally be collected for legitimate business or service-related reasons, used in a manner that is not obviously inconsistent with those reasons, limited to what is reasonably needed for the relevant activity, kept reasonably accurate where appropriate, retained only for as long as there is a sensible need or requirement to do so, and protected using security and access measures that are appropriate for the nature of the data and the systems involved.

These principles are intended as guiding standards rather than absolute guarantees. Edge Tutor recognizes that in a growing and operational business, records may not always be perfect, systems may evolve over time, and privacy requirements may need to be balanced with contractual, operational, technical and commercial realities. The objective of this policy is to promote responsible and practical handling of personal data, not to impose rigid obligations that may be unrealistic in all circumstances.

8. Categories of personal data that Edge Tutor may process

The categories of personal data processed by Edge Tutor will vary depending on the service, relationship and context. In many cases, Edge Tutor primarily handles ordinary business and operational information, rather than highly sensitive regulated financial data. That said, the business may still process a broad range of information in the course of recruitment, service delivery, support and account management.

Table 1: Illustrative categories of personal data

Category of data Typical individuals Examples Typical uses
Identity and contact data Tutor applicants, tutors, client contacts, vendor contacts, Company Personnel, prospects Name, email address, telephone number, country, city, contact details Communication, onboarding, relationship management, support, account administration
Professional and background data Tutor applicants, tutors, consultants, business contacts CVs, qualifications, certifications, language skills, experience, role/title Recruitment, matching, onboarding, training, service allocation
Operational data Tutors, learners, clients, Company Personnel Schedules, attendance records, support notes, service records, lesson-related notes, communications Service delivery, operational support, reporting, quality review
Contractual and commercial data Clients, vendors, consultants, contractors Contracts, invoices, payment details, billing contacts, commercial correspondence Contract administration, finance, compliance, account management
Technical and access data Website users, system users, tutors, Company Personnel IP addresses, device or browser details, login records, system logs, access records Security, troubleshooting, system administration, misuse prevention
Marketing and preference data Prospects, client contacts, event participants Subscription preferences, event registrations, communication preferences B2B marketing, newsletters, event administration, relationship management
Verification data Tutor applicants, contractors, certain client or vendor contacts Identification documents, supporting documents, qualification verification records Verification, onboarding, fraud prevention, compliance
Learner or student-related data Learners/students, typically within client engagements Limited identifiers, scheduling information, support records, lesson notes, progress-related information where shared with Edge Tutor Service delivery, support, quality review, client reporting
Sensitive or specially protected data Any category, in more limited cases Health-related details, accommodation requests, other specially protected information

The examples above are illustrative and may not apply in every engagement. Edge Tutor does not seek to collect more personal data than is reasonably needed for the relevant purpose, but the actual categories used may change over time as the business, client requirements and systems evolve.

9. Sources of personal data

Edge Tutor may obtain personal data from several sources. In many cases, the information is provided directly by the individual, such as when a tutor applies to work with Edge Tutor, when a client contact engages with our sales or account teams, when someone fills in a website form, or when Company Personnel provide information for onboarding or administration purposes. In other situations, personal data may come from a client, a partner, a referral source, a publicly available professional profile, an event organizer, a service provider, or a system used in connection with the delivery or support of services.

Edge Tutor may also collect some information automatically through websites, communication tools, security systems, scheduling platforms, access logs or similar systems. Such information may be used for practical business purposes such as operating services, maintaining security, troubleshooting issues, monitoring usage, supporting account administration or understanding engagement at a general level.

Where it is reasonable and practicable to do so, Edge Tutor prefers to obtain relevant information directly from the individual or from the party with primary responsibility for the relevant relationship. However, given the B2B and operational nature of the business, indirect collection will often occur as part of ordinary service delivery and account management.

10. How Edge Tutor uses personal data

Edge Tutor uses personal data for a range of ordinary business purposes connected to the operation of its services. These purposes may include assessing and communicating with tutor applicants, onboarding and supporting tutors and consultants, managing schedules and service delivery, responding to client requests, providing account support, carrying out training and quality activities, handling invoicing and payments, managing business relationships, improving workflows, maintaining technical systems, monitoring access and usage, addressing incidents or complaints, supporting business development and carrying out general internal administration.

In a client-service context, Edge Tutor may also use personal data to provide managed tutoring support, coordinate delivery, respond to learner or client issues, support tutoring operations, document relevant interactions, and prepare reports or internal records. In a marketing or business development context, Edge Tutor may use personal data to communicate with prospective or current business contacts about Edge Tutor’s services, events, updates or related opportunities, subject to applicable law and any relevant preferences.

Edge Tutor does not state in this policy that every use case will always be governed by a fully formalized assessment, review or approval process. Rather, the intention is that personal data should be used for purposes that are commercially sensible, relevant to the relationship, consistent with operational needs, and not clearly excessive or inappropriate in the circumstances.

11. Legal grounds and permitted bases for processing

To the extent the applicable law requires a legal basis or similar justification for processing personal data, Edge Tutor expects its processing to rest on one or more bases that are reasonably available in the circumstances. Depending on the context, these may include the need to enter into or perform a contract, to take steps at the request of the individual, to comply with legal or regulatory obligations, to support a legitimate business interest, to protect the interests of individuals or others in appropriate cases, or to rely on consent where consent is the appropriate mechanism.

In practice, Edge Tutor may process tutor applicant data because it is necessary to evaluate a potential engagement, process client contact data because it is necessary to manage a business relationship, process learner-related operational data as part of delivering contracted services, and process technical or log information because it is useful or reasonably necessary for system administration and security. Where Edge Tutor relies on consent, it will generally aim to do so in a manner that is reasonably clear and documented, but Edge Tutor does not represent in this policy that consent is the primary basis for all processing or that a formal documented consent mechanism will be used for every scenario in every jurisdiction.

12. Consent

Where Edge Tutor seeks or relies on consent, it will generally try to make the nature of the consent understandable in context and to respect withdrawals of consent to the extent required by law and reasonably practicable in the circumstances. Edge Tutor may rely on consent in cases such as subscription preferences, certain event-related uses, optional communications, or specific categories of more sensitive information where another basis is not more appropriate.

Withdrawal of consent may affect Edge Tutor’s ability to continue providing a particular service, communication or activity to the extent that the relevant processing cannot continue on another basis. Edge Tutor may also continue to retain or use certain information despite a withdrawal of consent where permitted by law, contract or legitimate operational need, for example for recordkeeping, security, dispute handling or compliance reasons.

13. Consequences of not providing personal data

Some personal data requested by Edge Tutor is optional, while some information may be needed for practical reasons. If a tutor applicant or contractor does not provide information that Edge Tutor reasonably needs to assess qualifications, communicate effectively, administer an engagement, process payment or carry out onboarding, Edge Tutor may be unable to proceed with or maintain the relevant arrangement. If a client or business contact does not provide relevant relationship or operational information, Edge Tutor may be limited in its ability to communicate, respond, support services, or manage the engagement properly. If certain information is needed for security, verification, compliance or contractual reasons and is not provided, Edge Tutor may not be able to offer access, proceed with the transaction, or deliver the service in the intended manner.

The practical effect of non-provision will depend on the circumstances, and Edge Tutor will generally seek to use only the information reasonably needed for the purpose at hand.

14. Transparency and notices

Edge Tutor may provide information about its processing practices through this policy, through website privacy notices, through application or onboarding materials, through contractual documentation, through specific service communications, or through other notices appropriate to the context. The form, content and level of detail of any such notice may vary depending on the audience, the service, the legal environment and the practical nature of the relationship.

Where Edge Tutor acts primarily on behalf of a client in connection with learner-facing or platform-based services, the client will often be responsible for the main end-user notice and permissions framework. Edge Tutor may nevertheless provide supplementary information or contractual support where appropriate. Where a client uses its own teaching platform, the client is generally expected to manage the platform-facing notice and consent structure, while Edge Tutor remains responsible for describing and managing its own role in a commercially reasonable manner within the scope of its services.  

Edge Tutor does not represent that a separate notice will always be created for every internal process or operational scenario. Rather, notices and disclosures should be used where appropriate and reasonably required.

15. Purpose limitation and proportionality

Edge Tutor expects personal data to be used in a way that is connected to the relevant business relationship, operational activity or service need. Information should not be collected or retained without some identifiable reason, and Company Personnel should avoid recording unnecessary personal commentary, excessive background detail or information that is irrelevant to the issue being handled.

At the same time, Edge Tutor recognizes that practical business operations often involve notes, communications, support records and working documents that are created in real time and may not always fit neatly into predefined categories. This policy therefore does not require perfection. Instead, the expectation is that Company Personnel exercise reasonable judgment and avoid unnecessary, clearly excessive or obviously inappropriate use of personal data.

16. Accuracy and data quality

Edge Tutor aims to keep personal data reasonably accurate and up to date where accuracy matters for the purpose at hand. For example, contact details, engagement records, qualification information, account information and service-related records may need updating over time. Where inaccurate data is identified and it is reasonable to correct it, Edge Tutor will generally seek to do so. Where records contain historical notes, assessments or communications created at a point in time, Edge Tutor may retain those records as historical records even if later developments change the underlying context, provided that doing so remains reasonable and appropriate.

Company Personnel are expected to avoid introducing obvious inaccuracies into records and to take sensible steps to correct known material errors when they become aware of them.

17. Retention and storage limitation

Edge Tutor keeps personal data for as long as it reasonably considers necessary for the relevant business, contractual, operational, legal, security, accounting or administrative purpose, taking into account the nature of the relationship, the function of the data, the need to maintain records, the possibility of disputes, and applicable client or legal requirements where relevant. Retention periods may therefore vary significantly depending on the category of information.

For example, Edge Tutor may retain application and onboarding records, contractual documentation, communications, support records, quality records, billing information, system logs or security-related records for periods that are appropriate to the particular function of the data and the needs of the business. In some cases, data may be deleted relatively quickly when no longer needed. In other cases, Edge Tutor may retain data for longer because it remains useful or necessary for a legitimate business purpose, because it may be relevant to a dispute or audit trail, or because a client, law or contract requires continued retention.

This policy is not intended to promise rigid deletion schedules for every data type. Retention decisions may involve operational judgment, commercial practicality and technical constraints.

18. Deletion and destruction

Where Edge Tutor determines that personal data is no longer reasonably needed, it may delete, anonymize, archive, suppress, restrict access to, or otherwise reduce the active use of that data, depending on what is appropriate and technically feasible. Electronic records may be deleted through normal system processes, administrative controls or provider tools, while paper records may be securely discarded, shredded or destroyed using practical methods appropriate to the nature of the records.

Edge Tutor does not guarantee immediate or absolute deletion from every system, backup, archive or downstream environment at the same moment. In practice, deletion may take time, may depend on system architecture, or may be limited by backup cycles, provider functionality, operational dependencies or legal holds. The expectation is that Edge Tutor will take commercially reasonable steps toward secure and appropriate deletion or disposal when data is no longer needed.

19. Security, integrity and confidentiality

Edge Tutor seeks to apply security measures that are appropriate for the type of data it handles, the systems in use, the resources of the business, and the risks reasonably identified in the circumstances. These measures may include access controls, passwords or authentication mechanisms, confidentiality expectations, system permissions, secure sharing methods, vendor selection measures, endpoint protections, monitoring, backups, and other administrative, organizational or technical safeguards. Not every safeguard will be appropriate in every context, and the exact controls may change over time as systems, risks and operations develop.

Company Personnel should handle personal data carefully, avoid inappropriate sharing, use approved systems where reasonably available, follow applicable access restrictions, and report concerns about confidentiality or security. Edge Tutor limits access to personal data on a business-need basis where practical, but this policy does not represent that no unauthorized access will ever occur or that all data environments will always be configured to an optimal standard at all times.

Where the business handles more sensitive information, Edge Tutor would generally expect a greater level of care. However, the level of control applied will still depend on what is proportionate, commercially reasonable and technically feasible in the circumstances.

20. Incident reporting and personal data breaches

Company Personnel should report without undue delay any known or suspected incident involving personal data that could create a material privacy, confidentiality or security concern. This may include accidental disclosure, misdirected communications, inappropriate system access, suspicious account activity, file loss, phishing compromise, misuse of shared folders, unauthorized downloads, lost devices containing business data, or other events suggesting that personal data may have been compromised.

Reports should generally be made to the primary privacy contact at privacy@edgetutor.co, to a relevant manager, or through any other internal escalation route then in use. Edge Tutor will review reported incidents in a manner that is proportionate to the circumstances and will consider what practical remedial, containment or notification steps are appropriate in light of the known facts, applicable contractual obligations, legal requirements and the seriousness of the incident.

This policy does not state that Edge Tutor will investigate every incident to the same level or notify all incidents externally. Rather, responses will depend on the severity, credibility and context of the issue.

21. International transfers and remote access

Because Edge Tutor’s operations, personnel, clients and systems may be spread across multiple countries, personal data may sometimes be stored, viewed, transferred or accessed across borders as part of normal business operations. This may happen, for example, where one team supports services delivered in another location, where cloud services are hosted internationally, or where a client and Edge Tutor personnel are located in different countries.

Where cross-border handling of personal data is relevant, Edge Tutor will generally seek to use arrangements and safeguards that are reasonable in light of the applicable contract, the jurisdictions involved, the sensitivity of the data, the service model and the practical realities of the business. These safeguards may include contractual controls, access limitations, vendor terms, security measures or other administrative steps. Edge Tutor does not represent in this policy that a formal transfer impact assessment or bespoke transfer mechanism will be used in every cross-border scenario unless such steps are specifically required or adopted for that arrangement.

22. Sharing personal data and external recipients

Edge Tutor may share personal data internally and externally where there is a sensible business reason to do so. Internal sharing may occur among personnel involved in recruitment, onboarding, operations, account management, support, scheduling, finance, quality review, leadership, product, technology or administration. External sharing may occur with clients, service providers, hosting or communications vendors, scheduling or productivity tool providers, payment providers, advisors, auditors, insurers, regulators, authorities or transaction counterparties, depending on the relevant purpose and relationship.

Where Edge Tutor uses service providers or subprocessors, it will generally seek to put in place reasonable contractual protections and practical expectations relating to confidentiality, security and scope of use. However, the nature and detail of those protections may vary depending on the size of the vendor, the service being provided, the bargaining position of the parties, the sensitivity of the data and the commercial context. This policy does not represent that every vendor relationship will include bespoke negotiated data terms beyond what is reasonably available or appropriate.

23. Client-owned platforms and B2B delivery model

In some client engagements, the relevant tutoring or education services are delivered through a client-controlled platform. In those arrangements, the client will usually determine the structure of the platform, the data collected through it, the end-user relationship, and the applicable notices, settings and integrations. Edge Tutor may access or use certain data within that environment only to the extent needed to provide its agreed services, such as tutor delivery, support, scheduling, account coordination or operational reporting.

In those cases, Edge Tutor does not assume full responsibility for the privacy framework of the client’s platform or for tools the client elects to implement within its own environment, except to the extent Edge Tutor expressly undertakes a defined responsibility. Edge Tutor does, however, expect its personnel to handle data accessed through such platforms in a reasonable, confidential and role-appropriate way and to observe any agreed client requirements that are operationally workable and contractually applicable.  

24. Marketing, business development and communications

Edge Tutor may use personal data of current or prospective business contacts to communicate about its services, events, updates, business opportunities or related matters that it believes may be relevant to the recipient, subject to applicable law and any known preferences or restrictions. Such communications may be sent through email, direct outreach, event follow-up, newsletters or other B2B channels as appropriate.

Individuals may opt out of non-essential marketing communications using the means provided in the communication or by contacting Edge Tutor. Edge Tutor will generally try to respect opt-out requests within a reasonable period and may retain limited information for suppression purposes so that it does not continue sending communications after an opt-out has been registered. This policy is not intended to suggest that Edge Tutor operates a complex preference-center infrastructure or marketing compliance program beyond what is proportionate for a business of its scale.

25. Verification, fraud prevention and operational checks

In some situations, Edge Tutor may carry out reasonable checks or reviews for verification, onboarding, payment administration, trust-and-safety, misuse prevention, or general operational integrity. For example, Edge Tutor may review qualifications, request documentary support, check for obvious inconsistencies in an application, validate identity information to a practical extent, review unusual account activity, or maintain records relevant to disputes or inappropriate conduct. Such checks are intended to support ordinary business needs and reduce operational risk, rather than to implement a formal financial-crime or regulated screening program of the kind used in highly regulated sectors.

Any such checks should be carried out in a proportionate and commercially sensible way, taking into account the purpose of the check, the type of data involved, and the role of Edge Tutor in the relevant context.

26. Learners, minors and education-related data

Because Edge Tutor operates in the education and tutoring sector, some services may involve data relating to learners, including in some cases individuals under the age of majority. In many B2B or white-label arrangements, the client will maintain the primary relationship with the learner or with the parent or guardian and will generally be responsible for managing the principal notice, consent or authorization framework required for the educational service or platform. Edge Tutor’s role in such cases will often be operational and service-based rather than relationship-based.

Where Edge Tutor handles learner-related data, it aims to do so in a limited and practical manner consistent with the service being delivered. This may include scheduling information, lesson support notes, issue escalation records, participation information or other data made available to Edge Tutor by the client or generated in the course of service delivery. Edge Tutor does not seek to collect unnecessary learner information and would generally expect sensitive or highly personal learner information to be handled only where there is a clear reason to do so.

27. AI, automation and profiling

Edge Tutor recognizes that modern businesses may use software tools that involve automation, data analysis, assistance features or AI-enabled functionality. To the extent Edge Tutor uses such tools, it expects them to be used in a practical and responsible manner, especially where personal data is involved. Company Personnel should avoid putting confidential or personal data into public or unapproved tools where doing so would create an unnecessary confidentiality, contractual or security risk.

Edge Tutor does not state in this policy that all automated tools are subject to a formal approval framework or that all processing involving automation undergoes a dedicated privacy assessment. Rather, the expectation is that potentially higher-risk uses of AI or automation, particularly those involving sensitive data or significant decisions about individuals, should be escalated for internal consideration where appropriate. Edge Tutor would generally seek to avoid relying solely on automated processes for decisions likely to have material legal or similarly significant effects on individuals unless there is a clear basis and a practical reason for doing so.

28. Privacy by design and practical review

Where Edge Tutor introduces new tools, processes, data flows, vendors or service models that involve personal data, it is generally good practice to consider at an early stage what information will be used, why it is needed, whether the use is proportionate, whether there are confidentiality or security issues, and whether any notice, contractual or operational controls should be added. Edge Tutor encourages this type of practical early-stage review, particularly for changes involving new categories of personal data, large-scale operational shifts, new platform arrangements, or more sensitive data.

This policy does not require a formal written impact assessment for every project or change. More structured review may be appropriate in some circumstances, but the level of review should be proportionate to the likely risk, the scale of the change, and the resources available.

29. Data subject rights and requests

Depending on the applicable law and the context, individuals may have rights in relation to their personal data, such as rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about how their data is used. The exact rights available, and the scope of any obligation on Edge Tutor to respond, may vary by jurisdiction, by the role Edge Tutor plays, and by the type of data involved.

If Edge Tutor receives a request relating to personal data, it will generally seek to review the request in a practical and reasonable manner, taking into account the identity of the requester, the nature of the data, the role played by Edge Tutor, applicable contractual arrangements and any legal requirements that are known to apply. Edge Tutor may ask for information needed to verify identity or authority before taking action. Where Edge Tutor acts primarily on behalf of a client, it may need to refer the requester to the client or coordinate with the client rather than handling the request independently.

This policy does not state that every request will be granted in full or within a uniform timeframe in all cases. Responses will depend on the relevant facts, applicable law and practical constraints.

30. Complaints and escalation

Individuals who have questions or concerns about how Edge Tutor handles personal data may contact the primary privacy contact at privacy@edgetutor.co. Edge Tutor will generally try to review complaints in good faith and to respond in a manner proportionate to the issue raised. Depending on the context, Edge Tutor may also involve management, external advisors, the relevant client or other appropriate persons in considering the issue.

If an individual is dissatisfied with Edge Tutor’s response, they may have the option under applicable law to raise the matter with a regulator or authority. This policy does not attempt to list all such authorities or to specify complaint rights for every jurisdiction.

Internally, Company Personnel should promptly escalate complaints, regulator inquiries, client privacy concerns, legal demands relating to personal data, and other issues that may require management attention.

31. Recordkeeping and documentation

Edge Tutor may maintain records and documentation relating to its handling of personal data to the extent it considers this useful, necessary or appropriate for business operations, compliance, client management, dispute handling, audit support, security or internal organization. Such records may include contracts, notices, request logs, incident records, vendor documentation, training records, account records, onboarding records, communications, or internal guidance materials.

The existence of this section should not be read as a representation that Edge Tutor maintains exhaustive or highly formalized privacy documentation of the type maintained by large regulated institutions. The level of documentation maintained will depend on practical need, business scale, contractual demands and available resources.

32. Training, awareness and monitoring

Edge Tutor may provide privacy and security guidance, onboarding, training or reminders to Company Personnel to support appropriate handling of personal data. The formality, frequency and depth of such training may vary depending on role, client requirements, operational changes, incidents, business growth and internal priorities. Some personnel may receive more detailed guidance where their role involves greater data access or heightened client expectations.

Edge Tutor may also review or monitor aspects of compliance with this policy in a practical way, including through management oversight, access controls, issue reviews, process updates, client feedback, internal checks or other appropriate means. This policy does not commit Edge Tutor to a formal recurring audit program unless separately adopted.

33. Policy review, language and local supplements

Edge Tutor may review and update this policy from time to time as its services, systems, operational model, client requirements or understanding of relevant legal obligations evolve. Historic versions may be retained for internal reference where useful. Edge Tutor may also issue local addenda, operational guidance, service-specific notices, summaries or translations where appropriate. If Edge Tutor publishes translated versions, it may specify which version is the operative version for internal interpretation, subject to any local legal requirements.

This policy should be read together with any applicable client commitments, platform terms, website notices, confidentiality obligations, acceptable-use requirements, information security practices or operational procedures that may apply to a particular activity.

34. Compliance and acknowledgement

Company Personnel are expected to read and follow this policy to the extent relevant to their role. The policy is intended to guide reasonable conduct and practical decision-making in relation to personal data. Failure to follow the policy may be addressed through the relevant contractual, managerial, access-control or operational mechanisms available to Edge Tutor, depending on the circumstances.

This policy does not create employment rights, does not form part of an employment contract, and does not guarantee that Edge Tutor will implement every privacy control or legal framework in the same way in every scenario. Its purpose is to set out a grounded and workable standard for handling personal data within the business.

Appendix A — Illustrative processing scenarios and typical roles

Processing scenario Likely Edge Tutor role Practical note
Tutor recruitment, application review and onboarding Usually controller Edge Tutor generally determines how applicant and onboarding data is used
Consultant or contractor administration Usually controller Includes communications, payment administration and engagement management
Website inquiries, newsletters and B2B outreach Usually controller Relates to Edge Tutor's own sales and marketing activity
Client account management and service support Controller and/or processor depending on context Role may vary depending on the data and service model
Client-owned teaching platform services Often processor / service provider for relevant service data Client generally controls the platform environment
Learner support data handled under client instructions Often processor / service provider Role depends on contract and actual use
Edge Tutor's own security logs and access monitoring Usually controller Relates to Edge Tutor's own systems and operations

Appendix B — Examples of sources of personal data

Edge Tutor may receive personal data directly from tutor applicants, consultants, clients, prospects, vendors, partners and Company Personnel. It may also receive data from clients in connection with service delivery, from website forms and communications, from scheduling or support systems, from publicly available professional sources, from referral channels, from event organizers, or from service providers and vendors used in support of business operations.

Appendix C — Contact details

Data Privacy
Email: privacy@edgetutor.co

Learn More About

EDGE Tutor
International