Data privacy

Last updated: May 2026.

Education Options takes the privacy of every visitor, school, and family seriously. This page explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have over it. It is written in plain English and is aligned with the UK General Data Protection Regulation, the EU General Data Protection Regulation, and the Data Protection Act 2018.

Data controller

The data controller for personal data collected through this website is Education Options sp. z o.o., a private limited company registered in Poland. Once Sophyra Limited (Ireland) is incorporated, the controller for new personal data will become Sophyra Limited trading as Education Options, and this page will be updated accordingly.

What personal data we collect

We collect only the personal data necessary to operate the services on this website and to respond to enquiries:

• Name, email address, and any context you provide when you book a complimentary consultation, send a contact-form enquiry, or purchase a digital resource.
• Any details you choose to share during the consultation or in follow-up correspondence, such as a school name, a child's academic stage, or specific concerns relating to the engagement.
• Technical data automatically collected when you visit the site: IP address, browser type, device type, pages viewed, and referrer. Used for security, fraud prevention, and performance monitoring only.

We do not collect special-category personal data (such as health, ethnicity, or political opinions) unless you choose to share it within an engagement, in which case we hold it under strict confidentiality with explicit consent.

Legal bases for processing

We rely on the following legal bases under UK GDPR Article 6:

• Consent for marketing communications and optional analytics cookies.
• Contract for fulfilling an engagement you have commissioned or a product you have purchased.
• Legitimate interests for responding to enquiries, operating the website securely, and preventing fraud.
• Legal obligation for retaining records required by tax, accounting, or safeguarding statute.

How we use your personal data

We use personal data to respond to your enquiry, deliver the consultation or engagement you have commissioned, send you the digital resources you have purchased, and where you have given consent, to send occasional updates about new resources or services. We do not sell or rent personal data to third parties.

Who we share data with (processors)

We use a small number of trusted service providers to operate this website. Each acts as a processor under written terms and applies appropriate technical and organisational measures:

• Vercel Inc. hosts the website and stores technical data necessary to serve pages.
• Cloudflare Inc. provides DNS, edge security, and content delivery.
• Zoom Communications Inc. provides the appointment scheduler and video conferencing for consultations.
• Google Ireland Ltd. provides our email and calendar (admin@eduop.com and admin@eduop.com).
• When digital products are paid for, the payment processor of record handles the transaction under its own terms.

International transfers outside the UK or EEA are made under Standard Contractual Clauses or an equivalent Article 46 safeguard.

How long we keep your data

Enquiry correspondence is kept for up to two years after the last meaningful interaction. Engagement records (consultations, advisory contracts, deliverables) are kept for six years after completion to meet statutory tax and accounting requirements. Marketing-consent records are kept for as long as you remain subscribed and for two years after withdrawal of consent.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time, where consent was the basis
• Complain to a supervisory authority (the Information Commissioner's Office in the UK, or the Data Protection Commission in Ireland)

Cookies

We use a minimal set of cookies necessary for the website to function (session cookies, security cookies). We do not use advertising cookies. Where any analytics cookie is loaded, we ask for your consent first.

Contact for data requests

To exercise any of the rights above, or for any other privacy question, write to admin@eduop.com. We aim to respond within ten working days and in any event within the statutory month.