Privacy Policy

Effective Date: May 1, 2026 · Last Updated: May 1, 2026 · Version 1.1

R² Academy Tutoring ("we," "our," or "us") is committed to protecting the privacy of our clients, students, and website visitors. This Privacy Policy explains how we collect, use, store, share, and safeguard personal information, in accordance with Canadian privacy laws — including the Personal Information Protection and Electronic Documents Act (PIPEDA).

By submitting our quote form or otherwise providing personal information to us, you consent to the practices described in this Policy. If you do not agree, please do not submit information through our site.

1. Information We Collect

We only collect information that is necessary to deliver, schedule, and bill for tutoring services. Through our website, email, and direct communication, this typically includes:

Parent or guardian name, email, phone number, and mailing address
Student name, age, grade level, and academic information (subjects, current marks, goals, course codes)
Scheduling preferences (preferred days/times, expected start date, session format and location)
Information about the student's learning needs that you choose to share — including ESL status, IEP details, and diagnosed conditions (see section 3, Sensitive Information)
Records of communications between you and our team
Billing records (sessions delivered, invoices issued, payments received)

If you are a tutor with an account on our portal at portal.r2academytutoring.com, we additionally collect your sign-in email and password (stored as a salted hash), profile information you choose to provide (photo, biography, qualifications, criminal record check), and records of sessions you log and invoices you submit. Tutor data is described further in the tutor agreement you sign with us.

Providing this information is voluntary, but some of it is necessary for us to match a tutor and deliver services.

2. How We Use Your Information

We use the information we collect to:

Match students with a suitable tutor
Schedule, deliver, and adjust tutoring sessions
Communicate with parents and guardians about services, scheduling, and billing
Issue invoices and maintain accounting records as required by law
Improve our services and the experience of clients on our site

We use information only for purposes that a reasonable person would consider appropriate in the context of tutoring services.

3. Sensitive Information

Some categories of information you may share with us — particularly IEP details, diagnosed conditions (e.g., ADHD, dyslexia, anxiety), and ESL status — are considered sensitive personal information under PIPEDA, especially because they relate to minors.

We treat sensitive information with extra care:

It is only viewed by the assigned tutor and the small number of administrators required to schedule sessions and manage billing.
It is never shared outside R² Academy except as required to deliver services to your child or as required by law.
You can choose not to share these details — providing them is optional, though doing so helps us match the right tutor.

By submitting information through our website, by booking a session, or by communicating with us, you consent to the collection, use, and disclosure of personal information as described in this Policy.

Marketing communications (CASL): we will only send you commercial electronic messages — such as newsletters, promotions, or service announcements that are not strictly transactional — if you have given express consent (e.g., by ticking a separate marketing-opt-in box on a form). Every commercial email we send will identify us, give a postal/electronic contact, and include a one-click unsubscribe link, in accordance with Canada's Anti-Spam Legislation (CASL). Transactional emails — quote confirmations, scheduling messages, invoices, password resets — are sent without a separate opt-in because they are necessary to deliver the service you requested.

How to withdraw consent: you may withdraw consent at any time by emailing admin@r2academytutoring.com. We will confirm receipt within 5 business days and complete your withdrawal request within 30 days, subject to legal or accounting obligations that require us to retain certain records (see section 8, Data Retention).

Recording of sessions: we do not record online tutoring sessions by default. If a recording is ever proposed (for example, to review a difficult concept), it will only happen with the explicit, written advance consent of the parent or guardian and the tutor, and the recording will be deleted on request.

We do not sell, rent, or trade your personal information.

To run the business and deliver services, we share limited information with the following categories of third parties. Each is contractually obligated to handle data securely and use it only for the purpose we engage them for:

Web hosting & database: Hostinger International Ltd. — stores quote-form submissions, account records, and email service for r2academytutoring.com.
Online session platform: Zoom Video Communications, Inc. — used to deliver online tutoring sessions.
Email delivery: Hostinger SMTP and PHPMailer — sends transactional emails (quote confirmations, invoices) to you.
Assigned tutors: independent contractors engaged by R² Academy under a written agreement that requires them to keep your information confidential.

We may also disclose information if compelled by law (e.g., a court order) or to protect our legal rights.

6. Where Your Information Is Stored

Personal information collected through our website is stored on servers operated by our hosting provider, Hostinger. Your data may be stored or processed outside Canada, including in Hostinger's data centers in the United States, Europe, or other regions. While stored outside Canada, the data may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We have selected a provider with industry-standard security practices.

7. Data Protection

We take reasonable physical, organizational, and technical steps to protect your personal information, including:

HTTPS/SSL on every page of the site
Database access restricted to authorized administrators with strong, rotated passwords
CSRF protection, rate limiting, and server-side validation on every form submission
Restricted access to records on a need-to-know basis

While we strive to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. See section 11, Data Breach Notification for what we do if something goes wrong.

8. Data Retention

We retain personal information only as long as necessary to deliver services and meet legal, accounting, and administrative requirements. Specifically:

Quote requests that do not result in an engagement: deleted after 24 months from the date of submission.
Active client records and billing data: retained for 7 years after the end of the engagement, in accordance with Canada Revenue Agency record-keeping requirements.
Tutor invoices and contractor records: retained for 7 years, also per CRA requirements.
Sensitive information (IEP, diagnoses, ESL): deleted promptly after the engagement ends, unless retention is required for billing dispute resolution.

When information is no longer required, it is securely deleted or anonymized.

9. Children's Information

Our services are directed to parents and guardians, not directly to children. When we collect information about a student under the age of 18, we do so with the explicit consent of the parent or guardian, and we treat that information with the protections described in this Policy and the additional safeguards in section 3. Parents and guardians may request access to, correction of, or deletion of their child's information at any time using the contact information at the bottom of this page.

10. Cookies & Website Data

Our website uses minimal browser storage:

Session storage for partially completed quote forms, so you can pick up where you left off (cleared automatically after 24 hours or on submit).
A CSRF session cookie to protect form submissions from cross-site request forgery.

We do not currently use cookies for advertising, retargeting, or cross-site tracking, and we do not use third-party analytics. If we add web analytics in the future (e.g., to measure page traffic), we will update this policy and notify visitors before any such tracking begins.

11. Your Rights Under PIPEDA

Subject to limited exceptions in law, you have the right to:

Access the personal information we hold about you
Correct information that is inaccurate or out of date
Withdraw consent for the use or disclosure of your information
Request deletion of your information, subject to our retention obligations
Complain to us, or to the Office of the Privacy Commissioner of Canada

To make a request, email admin@r2academytutoring.com. We will respond within 30 days. If we cannot fulfill your request, we will explain why.

12. Data Breach Notification

If a breach of security safeguards results in a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required under PIPEDA. We will keep records of any breach for at least 24 months, regardless of whether notification was required.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. Material changes will be communicated by email to active clients before they take effect.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

R² Academy Tutoring — Privacy Concerns
Email: admin@r2academytutoring.com

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada. Ontario residents may also contact the Information and Privacy Commissioner of Ontario for guidance, although PIPEDA is the primary federal statute that applies to our private-sector activity.

Read our Terms & Conditions →

↑ Back to top