- Who we are: MagiKats Ltd, operator of the MagiKats Tutoring network
- What data we collect: Names & contact details, purchase/booking history, location data
- Why we collect it: To deliver tuition services and communicate with you about your child's education
- Who we share it with: See Section 5 — Zooza, your franchisee centre or tutor, and authorities where required
- Your rights: Access, correction, deletion, objection and more — see Section 7
- Complaints: Raise concerns with us first — we respond within 30 days (Section 8)
- Children's privacy: We apply heightened protections for all children's data (Section 9)
- Contact us: admin@magikats.co.uk | magikats.co.uk
1. Who We Are
MagiKats Ltd ('we', 'us', 'our') operates the MagiKats Tutoring network of children's tuition centres across the UK. We are the Data Controller responsible for your personal data.
- Registered address: 16 Dene Lane, Farnham, Surrey, GU10 3RJ, UK
- ICO Registration Number: Z9330235
- Data Protection contact: Director — admin@magikats.co.uk
2. What Personal Data We Collect
We collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Name & contact details | Parent/guardian name, email address, phone number, child's name and date of birth |
| Purchase & booking history | Sessions booked, payments made, subscription details, attendance records |
| Location data | Address of the tuition centre you attend; your home address for enrolment purposes |
We do not collect special category data (such as health information) unless you voluntarily provide it — for example, to inform us of a learning need — and give explicit consent.
3. How We Collect Your Data
- Directly from you, when you register, make a booking or payment, or contact us
- When you interact with our website, app, or booking system
- From your chosen MagiKats centre (operated by a franchisee within our network)
4. Why We Use Your Data (Lawful Basis)
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Enrolling your child and delivering tuition | Performance of a contract (Article 6(1)(b)) |
| Maintaining enrolment records | Performance of a contract / Legal obligation (Article 6(1)(b) & (c)) |
| Communicating about sessions, progress and scheduling | Performance of a contract (Article 6(1)(b)) |
| Sending newsletters and marketing updates | Consent (Article 6(1)(a)) — you may withdraw at any time |
| Improving our services and operations | Legitimate interests (Article 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
| Sharing data with authorities for safeguarding or crime prevention | Recognised Legitimate Interests (DUAA 2025, Annex 1) — no balancing test required |
5. Who We Share Your Data With
We do not sell your personal data. The table below sets out the key recipients, the purpose of sharing, and where data is processed.
| Processor / Recipient | Purpose | Country | Transfer safeguard |
|---|---|---|---|
| Zooza | Session booking, enrolment records and attendance | Netherlands (EU) | EU adequacy — no additional safeguard required |
| Franchisee centres and online tutors | Fulfilling your enquiry and delivering tuition at the centre or with the tutor you have contacted | UK (currently; see note below) | N/A for UK. Appropriate safeguards will apply for future overseas locations |
| Safeguarding and law enforcement authorities | Where required by law or to protect a child's welfare | UK | Recognised Legitimate Interests (DUAA 2025) — no balancing test required |
6. How Long We Keep Your Data
- Enrolment and attendance records: 7 years after the last session
- Contact details: Deleted or anonymised within 2 years of your last interaction with us
- Marketing preferences: Until you withdraw consent
7. Your Rights
Under UK GDPR (as amended by the Data (Use and Access) Act 2025), you have the following rights:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data in certain circumstances |
| Restriction | Ask us to limit how we use your data |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests or for direct marketing |
| Withdraw consent | Where processing is based on consent, withdraw it at any time |
To exercise any of these rights, contact us at admin@magikats.co.uk. We will respond within one calendar month.
8. How to Make a Complaint
Under the Data (Use and Access) Act 2025, you have the right to raise a complaint directly with us before escalating to the ICO.
- Contact us in writing, describing your concern
- We will acknowledge your complaint within 30 days
- We will investigate and provide a full response without undue delay
If you remain dissatisfied, you may escalate to the Information Commissioner's Office: ico.org.uk | 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, SK9 5AF
9. Our Commitment to Children's Privacy
Because our services are specifically designed for children, we apply heightened data protection standards in line with the Data (Use and Access) Act 2025 and the UK GDPR's children's higher protection matters:
- We collect only the minimum data necessary to provide the tuition service
- We do not use children's personal data for marketing or profiling purposes
- Online systems used to manage children's data are designed with age-appropriate safeguards from the outset
- All staff receive training on the heightened duty of care when handling data relating to minors
- We never share a child's personal data with any third party except where strictly necessary, or where required by law or for safeguarding purposes
If you have any concerns about how your child's data is being used, please contact us immediately at admin@magikats.co.uk.
10. Cookies and Tracking
Our website may use cookies to improve your experience. You can manage your cookie preferences through your browser settings or our cookie consent tool. For full details, please see our Cookie Policy at magikats.co.uk.
11. Data Security
We have appropriate technical and organisational measures in place, including encrypted data storage, restricted access controls, and regular staff training on data protection.
12. Changes to This Notice
We may update this notice from time to time. The latest version will always be available at magikats.co.uk. We will notify you of material changes by email.
13. Contact Us
- MagiKats Ltd
- 16 Dene Lane, Farnham, Surrey, GU10 3RJ