FindMyTutor UAE — Privacy Policy

Operated by Zyron FZE LLC

Effective Date: 1 May 2026
Last Updated: 20 September 2026

1. Introduction

This Privacy Policy explains how Zyron FZE LLC, operating under the trading name FindMyTutor UAE ("FindMyTutor", "the Platform", "we", "us", "our"), collects, uses, stores, shares, and protects your personal data when you access or use our website at https://findmytutoruae.com and any related services.

This Policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable data protection laws of the United Arab Emirates.

By using the Platform, you confirm that you have read and understood this Privacy Policy. Where we rely on consent to process your personal data, that consent is obtained at the point of registration, when you opt in to specific features (such as sharing your contact details), or in line with cookie consent on the Platform.

2. Data Controller

The data controller responsible for your personal data is:

Zyron FZE LLC, trading as FindMyTutor UAE.

Registered address: BC-892423, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates.

Contact for data protection matters: [email protected].

If you have any questions about how we handle your personal data, or wish to exercise any of the rights set out in Section 12, please contact us using the email above.

3. Scope of This Policy

This Privacy Policy applies to personal data we collect from or about:

Students and adult learners using the Platform.
Parents and legal guardians using the Platform on their own behalf or on behalf of a minor in their care.
Tutors creating profiles and using free or paid features of the Platform.
Visitors browsing the Platform without an account.
Anyone contacting our support team or other Platform staff.

4. Categories of Personal Data We Collect

We collect and process the following categories of personal data, depending on how you use the Platform.

4.1 Account Information

Full name.
Email address.
Phone number (optional, where shared).
Securely hashed password (we never see or store your password in readable form).
Account type (student, parent/guardian, or tutor).
Sign-in method (email and password, or third-party sign-in such as Google).
A confirmation that you are 18 or over, or that you are a parent/guardian creating the account on behalf of a minor in your care (this confirmation is captured but not displayed publicly).
Your privacy settings, including whether your email address and phone number are shown to other users.
A normalised version of your email address (for example, ignoring dots and anything after a '+' in Gmail addresses), used to recognise duplicate accounts.

4.2 Tutor Profile Information

Subjects, levels, and curricula taught.
Teaching method (online, in-person, or both).
Service area and city or emirate.
Hourly or session rates.
Availability.
Years of experience and biographical description.
Profile photo (where uploaded).
Documents uploaded for the optional Verified badge (such as qualification certificates or proof of identity).

4.3 Student / Parent Request Information

Subject and level the student needs help with.
Curriculum (e.g. UK GCSE, IGCSE, IB, A-Level, MoE).
Preferred location, area, or emirate.
Indicative budget.
Preferred teaching method (online or in-person).
Schedule and availability.
Free-text description of learning goals or context.

4.4 Messaging Data

Message content sent and received via the Platform.
Sender and recipient identifiers.
Timestamps and read status.
Conversation metadata.

4.5 Subscription and Payment Data

Subscription plan and billing period.
Subscription status (active, cancelled, lapsed).
Stripe customer and subscription identifiers.
Transaction reference numbers and payment status.
Country and (where required) tax-related information.
Free trial information, including trial start and end dates and whether a free trial has been used.
Limited payment-card information provided to us by Stripe: a card 'fingerprint' (a unique code that identifies a card without revealing its number), the card type (for example credit, debit or prepaid) and the name on the card. We use this only to operate subscriptions and to prevent misuse of free trials. We do not store full card numbers, CVV codes, or other sensitive cardholder data. All such data is collected and processed by Stripe under its own privacy and security terms.

4.6 Technical and Usage Data

IP address.
Browser type, version, and language.
Device type and operating system.
Pages visited, time spent, click paths, and referral sources.
Session identifiers and authentication cookies.
Diagnostic and error logs.
A device identifier stored in your browser (in a cookie and local storage), used to recognise devices that have previously been used to start a free trial.

4.7 Support and Communications

Support emails and any attachments you send us.
Notes from any phone or in-person interactions with our team.
Records of complaints, feedback, and resolution outcomes.

5. How We Collect Personal Data

We collect personal data:

Directly from you, when you register, complete a profile, post a request, send a message, subscribe to a paid plan, or contact support.
Automatically, when you use the Platform — through cookies, server logs, and similar technologies (see our Cookie Policy).
From third-party providers, such as Stripe (payment confirmation), Google (where you sign in with Google), and our email delivery provider Resend (delivery and engagement data).

6. Why We Process Your Personal Data and the Legal Basis

We process personal data only where we have a valid legal basis under the UAE PDPL. The main bases we rely on are: (i) the performance of a contract with you (these Terms); (ii) your consent; (iii) compliance with a legal obligation; and (iv) our legitimate interests, where these are not overridden by your rights and freedoms.

6.1 Operating the Platform

To create and manage your account, display profiles and requests, enable matching between tutors and students, deliver messaging, and provide all the core features of the Platform. Legal basis: performance of a contract.

6.2 Processing Subscriptions

To manage paid subscriptions, process payments via Stripe, issue receipts, and apply or terminate access to paid features. Legal basis: performance of a contract; legal obligation (financial record-keeping).

6.3 Communications

To send you transactional emails (such as account confirmations, password resets, message notifications, and subscription receipts), to respond to support enquiries, and to inform you of material changes to our policies. Legal basis: performance of a contract; legitimate interests.

6.4 Improving the Platform

To analyse aggregated usage, improve our matching system, fix bugs, and develop new features. Where possible, we use anonymised or aggregated data. Legal basis: legitimate interests.

6.5 Safety, Fraud Prevention and Enforcement

To detect and prevent fraud, abuse, harassment, safeguarding concerns, and breaches of our Terms; to investigate complaints; and to enforce our policies. Legal basis: legitimate interests; legal obligation.

Messages sent through FindMyTutor may be reviewed by our team to keep the platform safe, prevent fraud and enforce our Terms.

Access to messages is restricted to authorised members of our team, and every time a conversation is viewed, this is recorded in an internal log.

Free trial eligibility and duplicate accounts. To ensure each person receives only one free trial, we compare card fingerprints, card type, cardholder names, normalised email addresses, email domains, device identifiers, profile names, profile photos and phone numbers with those of other accounts. Some of these checks are automated and may result in a free trial being refused or cancelled without any charge — for example, where a card has already been used for a free trial or paid subscription, a prepaid card is used, or a disposable email address is used. Other matches are reviewed by our team. If you believe a free trial was refused or cancelled in error, contact us and a member of our team will review your case. Legal basis: legitimate interests (preventing fraud and misuse of the Platform); performance of a contract.

6.6 Legal Compliance

To comply with applicable UAE law, court orders, and lawful requests by regulators or authorities. Legal basis: legal obligation.

6.7 Marketing

Where you opt in, we may send you occasional updates, newsletters, or product announcements. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us. Legal basis: consent.

7. Sharing Contact Details Between Users

7.1 Students and Parents

You control whether tutors can see your email address and phone number, using the settings in your account. Both are switched off by default. If you switch them on, your details are shown only to tutors with paid access (an active paid subscription or free trial), on your requests and in conversations with you. They are never shown publicly, to visitors who are not logged in, or to tutors without paid access.

7.2 Tutors

Tutors with paid access may choose to show their email address and/or phone number to logged-in students and parents. Both are switched off by default. If a tutor's paid access ends, their contact details stop being shown.

7.3 Messaging

Where contact details are not shared, all communication takes place through the Platform's messaging system.

7.4 Misuse

Tutors must not store, copy, share, sell, or otherwise misuse contact details obtained through the Platform. Misuse is a serious breach of our Terms and may also constitute a breach of the UAE PDPL.

8. Sharing Personal Data With Third Parties

We do not sell your personal data. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the purposes set out in this Policy.

8.1 Service Providers

Stripe — payment processing.
Resend — transactional email delivery.
Our hosting and infrastructure providers — to host the Platform's website and database.
Analytics providers — to understand aggregated usage of the Platform.
Customer support tools — where used, to manage support tickets. All our service providers are bound by contractual obligations to protect personal data, use it only for the purposes we instruct, and apply appropriate security measures.

8.2 Other Users

Information you place on a public profile or request (such as your name, subjects, and biography) is visible to other users of the Platform. Contact details are shared only as described in Section 7.

8.3 Legal and Regulatory Authorities

We may share personal data with courts, regulators, law-enforcement authorities, or other bodies where we are required to do so by law, where it is necessary to comply with a lawful request, or where we reasonably believe disclosure is necessary to protect our rights, property, or the safety of others.

8.4 Business Transfers

If Zyron FZE LLC is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of such a transfer and of any change in how your personal data is handled.

9. International Data Transfers

Some of our service providers (including Stripe and Resend) and our hosting infrastructure may process personal data outside the United Arab Emirates, including in the United States, the European Union, or other jurisdictions.

Where we transfer personal data outside the UAE, we ensure that an appropriate level of protection is in place by relying on one or more of the following safeguards, as required by the UAE PDPL:

Transfers to jurisdictions deemed by the UAE Data Office to provide an adequate level of protection.
Contractual safeguards (such as standard contractual clauses) with the recipient.
Your explicit consent to the transfer, where applicable.
Other safeguards permitted under the UAE PDPL. You may contact us for more information about the safeguards in place for any specific transfer.

10. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, and as required by law. Specific retention periods are set out in our Data Retention & Processing Policy. As a summary:

Active accounts: data is retained while the account is open.
Closed or inactive accounts: most personal data is deleted or anonymised within 12 months of closure, except where retention is required by law.
Financial records (payments, invoices, tax records): retained for at least 5 years to comply with UAE financial and tax regulations.
Messaging data: retained for up to 24 months after the most recent message in the conversation, then deleted or anonymised.
Verification documents: retained for up to 12 months after a verification decision, then deleted unless required to be kept longer.
Support communications: retained for up to 24 months after resolution.
Server logs and security logs: retained for up to 12 months.
Free-trial and fraud-prevention records (card fingerprints, card type, cardholder names, normalised email addresses, device identifiers and related trial records): retained while your account is open and for up to 3 years after it is closed, so that free trials cannot be reused by closing and reopening accounts.
Internal logs of our team's access to messages: up to 24 months.

11. How We Protect Your Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These include:

Encryption in transit using HTTPS/TLS.
Industry-standard password hashing (we never store passwords in plain text).
Role-based access controls and the principle of least privilege.
Server-side input validation and protection against common web vulnerabilities.
Regular monitoring, logging, and review of access to personal data.
Use of reputable third-party providers with strong security track records. No system is completely secure. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authority where required to do so under UAE law.

12. Your Rights

Under the UAE PDPL, and subject to the conditions and limitations of that law, you have the following rights:

12.1 Right to Be Informed

You have the right to be informed about how we process your personal data. This Privacy Policy is intended to fulfil that obligation.

12.2 Right of Access

You have the right to ask whether we hold personal data about you and to receive a copy of that data.

12.3 Right to Rectification

You have the right to ask us to correct inaccurate or incomplete personal data.

12.4 Right to Erasure

You have the right to ask us to delete personal data we hold about you, subject to exceptions where we are required or permitted by law to retain the data.

12.5 Right to Restrict Processing

You have the right to ask us to limit the way we process your personal data in certain circumstances.

12.6 Right to Data Portability

Where applicable, you have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to ask us to transfer it to another data controller.

12.7 Right to Object

You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing.

12.8 Right to Withdraw Consent

Where we rely on consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

12.9 Right to Lodge a Complaint

You have the right to lodge a complaint with the UAE Data Office or any competent supervisory authority if you believe we have not handled your personal data in accordance with the UAE PDPL.

12.10 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law (in most cases within 30 days). We may need to verify your identity before acting on your request.

13. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, secure your account, and analyse usage. For full details, please see our Cookie Policy. This includes a device identifier used for security and to prevent misuse of free trials, which is necessary for the Platform to operate and cannot be switched off in cookie settings.

14. Minors

Where a parent or legal guardian creates an account on behalf of a minor in their care, the parent or guardian is responsible for the minor's interactions with the Platform. We do not knowingly collect personal data directly from minors without parental consent. If we become aware that we have inadvertently done so, we will delete the data without undue delay.

If you believe a minor has provided personal data to us without appropriate consent, please contact us at [email protected] and we will take prompt action.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on the Platform with an updated "Last Updated" date. Where the changes are material, we will take reasonable steps to notify you (for example, by email or by an in-platform notice). Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have any questions about this policy, please contact us using the details below:

Zyron FZE LLC
Trading as FindMyTutor UAE
BC-892423, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
Email: [email protected]
Phone: +971 50 247 5166
Website: https://findmytutoruae.com