Privacy Policy

Last updated: September 2026


Who I am

Aldora Education is the trading name of Paul Dwyer, a sole trader based in Bristol, United Kingdom. I am the data controller for personal information collected through this website.

You can contact me about anything in this policy at paul@aldoraeducation.com.

What this policy covers

This policy explains what happens to personal information collected through aldoraeducation.com and through direct correspondence with me about my services.

It does not cover personal data I process on behalf of a school during a consultancy engagement. Where I handle information belonging to a client school (staff records, pupil data, survey responses, interview notes), I act as a data processor under that school’s instructions, governed by a separate written agreement made before the work begins.

The information I collect

Information you give me. If you complete the contact form or email me, I receive your name, email address, any organisation or role you mention, and the content of your message. If we go on to work together, I will also hold the contact and billing details needed to run and invoice the engagement.

Information collected automatically. My host records standard server logs, including IP addresses, browser type and the pages requested. If you consent to analytics cookies, Google Analytics collects information about how you use the site, such as pages viewed, time on page and approximate location derived from a truncated IP address.

I do not collect special category data through this website, and I do not knowingly collect information from children.

Marketing

I do not operate a mailing list at present. If I introduce one, it will be opt-in only, and every message will carry an unsubscribe link. I will not add you to a list because you sent me an enquiry.

Who I share information with

I do not sell personal data or share it for advertising. I use a small number of service providers who process data on my behalf:

  • Hostinger – website hosting and server logs
  • Cloudflare – DNS and security, which involves processing IP addresses
  • Google (Workspace, Analytics, Site Kit) – email, document storage and website analytics

Some of these providers process data outside the UK, including in the United States. Those transfers are covered by the UK International Data Transfer Addendum or by the UK extension to the EU–US Data Privacy Framework.

I will also disclose information where I am legally required to do so, or where there is a safeguarding concern that obliges me to act.

How long I keep it

  • Enquiries that do not lead to work: 12 months
  • Client records, contracts and correspondence: 6 years after the engagement ends, in line with tax record-keeping requirements
  • Coaching notes: Duration of our coaching arrangement, plus 12 months, held separately and not shared with the client organisation
  • Server logs: as retained by my host, typically 30 days
  • Analytics data: 14 months

Your rights

Under UK GDPR you have the right to ask me for a copy of your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to how I use it, and to receive it in a portable format. Where I rely on consent, you may withdraw it.

Write to paul@aldoraeducation.com and I will respond within one month.

If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. I would ask that you raise it with me first so I have the chance to put it right.

Changes

I will update this policy when my practices change, and the date at the top will always show the current version.