1. Overview

Kidda (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, apply for a role, join our community, or use any of our services.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and all relevant privacy laws.

By using our website or submitting your information, you agree to the practices described in this policy.

2. Who We Are

Kidda teaches Punjabi to adults and children through structured courses delivered online and in small groups.

Our legal entity details:

Business Name: Kidda Ltd
Email: [email protected]
Address: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ

We act as the Data Controller for all personal information we collect.

3. What Personal Data We Collect

We collect the following categories of personal data, depending on how you interact with us:

A. When you apply for a role

Name, email address, phone number, location/timezone, CV, work history and qualifications, your answers to application questions, availability, interview notes, references (if applicable).

B. When you enquire or sign up to Kidda

Name, email, phone, payment details (processed securely by Stripe), learning preferences, any messages you send us, attendance records.

C. When you or your child use the app

Kid profile information set up by a parent or guardian, course progress, quiz and lesson activity, homework submissions, in-app messages between students and tutors, and safeguarding-related records where relevant.

D. When you visit our website

IP address, device type, browser type, cookies, basic analytics (Google Analytics or similar).

E. Communications

Emails, WhatsApp messages, recorded lessons (if applicable), support queries.

We only collect what we need to deliver our services or assess applications.

4. How We Use Your Personal Data

We use your personal information for the following purposes:

For Applicants

Reviewing and assessing your application

Contacting you about your application

Arranging interviews and work samples

Evaluating suitability for a role

Completing hiring checks and references

Keeping records of your application process

For Students & Parents

Delivering lessons and supporting your learning

Tracking attendance, progress, and outcomes

Sending reminders, homework, or resources

Managing payments and subscriptions

Providing customer support

General Uses

Improving our services

Internal analytics and performance tracking

Responding to messages or enquiries

Ensuring safety, quality, and compliance

Marketing (only with your explicit consent)

We do not sell your data or share it for advertising purposes.

5. Our Legal Basis for Processing

Under UK GDPR, we process data using the following legal bases:

1. Contractual necessity

To deliver lessons, manage your account, or process your application.

2. Legitimate interests

To operate Kidda effectively (e.g., recruitment, analytics, internal reporting).

3. Consent

For marketing communications or where legally required.

4. Legal obligation

Where we must keep certain information for tax or compliance purposes.

6. How We Store and Protect Your Data

We only share data with trusted service providers who help us run Kidda. These providers process data on our behalf under data processing agreements and cannot use it for their own purposes:

Supabase — hosts our database and application infrastructure

Vercel — hosts our website and app

Stripe — processes payments securely

Go High Level — CRM and marketing automation

Notion — internal operations, including lead management, scheduling, and attendance/homework records

WhatsApp Business — class updates, reminders, and communication with students and parents

We do not sell personal data.

All systems use secure encryption and comply with GDPR.

7. How Long We Keep Data

We retain data only as long as necessary:

Applicants: up to 12 months from final decision

Student records: up to 6 years for legal purposes

Marketing data: until you withdraw consent

General enquiries: up to 12 months

You may request deletion at any time (subject to legal exceptions).

8. International Transfers

Some of our service providers operate outside the UK. Where this occurs, we ensure legal safeguards are in place, such as:

UK-approved Standard Contractual Clauses (SCCs)

Adequacy decisions

Equivalent data protection standards

9. Children's Privacy

Kidda provides lessons to children as well as adults, and we take extra care with children's data in line with the ICO's Age Appropriate Design Code (Children's Code).

A child's account or profile ("kid profile") is set up and managed by a parent or legal guardian, who agrees to this Privacy Policy and our Terms & Conditions on the child's behalf.

We collect only the data needed to deliver lessons and track learning progress for a child. We do not use a child's data for advertising or profiling, and non-essential data collection is off by default for kid profiles.

A parent or guardian can request access to, correction of, or deletion of their child's data at any time by contacting [email protected].

We do not currently use AI to interact directly with children on the platform. If this changes, we will update this policy and notify parents/guardians in advance.

Where a safeguarding concern arises involving a child, we may share relevant information with appropriate safeguarding bodies or authorities in line with our legal obligations, as described in our Terms & Conditions.

10. Your Rights Under UK GDPR

You have the right to:

Access your personal data

Correct inaccurate data

Request deletion

Withdraw consent at any time

Object to certain types of processing

Request data portability

Restrict processing

Make a complaint to the ICO

To exercise your rights, contact us at: [email protected]

11. Cookies

We use cookies and similar technologies to operate our website, remember your preferences, and analyse site performance.

Strictly necessary cookies are used automatically, as they're required for the site to function.

Any non-essential cookies (such as analytics or advertising cookies) are only set with your consent, given via the cookie banner shown on your first visit. You can change your preferences or withdraw consent at any time through that banner or your browser settings.

12. Use of AI

For adult users, our app includes AI-assisted features to support learning: an AI conversation partner for language practice, AI feedback on homework and exercises, AI-generated lesson content, and an AI chat/support assistant. We do not currently use AI to interact directly with children using the app.

AI-generated feedback and content is subject to appropriate human oversight, and it will always be clear to you when you're interacting with an AI feature rather than a person.

13. Data Security & Breach Notification

We use appropriate technical and organisational measures, including encryption, access controls, and regular security review, to protect your data. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours where required by law, and notify affected individuals without undue delay where the breach is likely to result in a high risk to them.

12. Links to Other Websites

Our website may link to external pages. Kidda is not responsible for their privacy practices.

13. Updates to This Policy

We may update this Privacy Policy occasionally.
We will update the “Last updated” date and notify you of material changes.

14. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us by email: [email protected]