FindMyTutor UAE — Privacy Policy

Operated by Zyron FZE LLC

Effective Date: 1 May 2026
Last Updated: 1 May 2026

1. Introduction

This Privacy Policy explains how Zyron FZE LLC, operating under the trading name FindMyTutor UAE ("FindMyTutor", "the Platform", "we", "us", "our"), collects, uses, stores, shares, and protects your personal data when you access or use our website at https://findmytutoruae.com and any related services.

This Policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable data protection laws of the United Arab Emirates.

By using the Platform, you confirm that you have read and understood this Privacy Policy. Where we rely on consent to process your personal data, that consent is obtained at the point of registration, when you opt in to specific features (such as sharing your contact details), or in line with cookie consent on the Platform.

2. Data Controller

The data controller responsible for your personal data is:

Zyron FZE LLC, trading as FindMyTutor UAE.

Registered address: BC-892423, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates.

Contact for data protection matters: [email protected].

If you have any questions about how we handle your personal data, or wish to exercise any of the rights set out in Section 12, please contact us using the email above.

3. Scope of This Policy

This Privacy Policy applies to personal data we collect from or about:

Students and adult learners using the Platform.
Parents and legal guardians using the Platform on their own behalf or on behalf of a minor in their care.
Tutors creating profiles and using free or paid features of the Platform.
Visitors browsing the Platform without an account.
Anyone contacting our support team or other Platform staff.

4. Categories of Personal Data We Collect

We collect and process the following categories of personal data, depending on how you use the Platform.

4.1 Account Information

Full name.
Email address.
Phone number (optional, where shared).
Securely hashed password (we never see or store your password in readable form).
Account type (student, parent/guardian, or tutor).
Sign-in method (email and password, or third-party sign-in such as Google).
A confirmation that you are 18 or over, or that you are a parent/guardian creating the account on behalf of a minor in your care (this confirmation is captured but not displayed publicly).

4.2 Tutor Profile Information

Subjects, levels, and curricula taught.
Teaching method (online, in-person, or both).
Service area and city or emirate.
Hourly or session rates.
Availability.
Years of experience and biographical description.
Profile photo (where uploaded).
Documents uploaded for the optional Verified badge (such as qualification certificates or proof of identity).

4.3 Student / Parent Request Information

Subject and level the student needs help with.
Curriculum (e.g. UK GCSE, IGCSE, IB, A-Level, MoE).
Preferred location, area, or emirate.
Indicative budget.
Preferred teaching method (online or in-person).
Schedule and availability.
Free-text description of learning goals or context.
Privacy preferences indicating whether email and phone may be shared with subscribing tutors.

4.4 Messaging Data

Message content sent and received via the Platform.
Sender and recipient identifiers.
Timestamps and read status.
Conversation metadata.

4.5 Subscription and Payment Data

Subscription plan and billing period.
Subscription status (active, cancelled, lapsed).
Stripe customer and subscription identifiers.
Transaction reference numbers and payment status.
Country and (where required) tax-related information. We do not store full card numbers, CVV codes, or other sensitive cardholder data. All such data is collected and processed by Stripe under its own privacy and security terms.

4.6 Technical and Usage Data

IP address.
Browser type, version, and language.
Device type and operating system.
Pages visited, time spent, click paths, and referral sources.
Session identifiers and authentication cookies.
Diagnostic and error logs.

4.7 Support and Communications

Support emails and any attachments you send us.
Notes from any phone or in-person interactions with our team.
Records of complaints, feedback, and resolution outcomes.

5. How We Collect Personal Data

We collect personal data:

Directly from you, when you register, complete a profile, post a request, send a message, subscribe to a paid plan, or contact support.
Automatically, when you use the Platform — through cookies, server logs, and similar technologies (see our Cookie Policy).
From third-party providers, such as Stripe (payment confirmation), Google (where you sign in with Google), and our email delivery provider Resend (delivery and engagement data).

6. Why We Process Your Personal Data and the Legal Basis

We process personal data only where we have a valid legal basis under the UAE PDPL. The main bases we rely on are: (i) the performance of a contract with you (these Terms); (ii) your consent; (iii) compliance with a legal obligation; and (iv) our legitimate interests, where these are not overridden by your rights and freedoms.

6.1 Operating the Platform

To create and manage your account, display profiles and requests, enable matching between tutors and students, deliver messaging, and provide all the core features of the Platform. Legal basis: performance of a contract.

6.2 Processing Subscriptions

To manage paid subscriptions, process payments via Stripe, issue receipts, and apply or terminate access to paid features. Legal basis: performance of a contract; legal obligation (financial record-keeping).

6.3 Communications

To send you transactional emails (such as account confirmations, password resets, message notifications, and subscription receipts), to respond to support enquiries, and to inform you of material changes to our policies. Legal basis: performance of a contract; legitimate interests.

6.4 Improving the Platform

To analyse aggregated usage, improve our matching system, fix bugs, and develop new features. Where possible, we use anonymised or aggregated data. Legal basis: legitimate interests.

6.5 Safety, Fraud Prevention and Enforcement

To detect and prevent fraud, abuse, harassment, safeguarding concerns, and breaches of our Terms; to investigate complaints; and to enforce our policies. Legal basis: legitimate interests; legal obligation.

6.6 Legal Compliance

To comply with applicable UAE law, court orders, and lawful requests by regulators or authorities. Legal basis: legal obligation.

6.7 Marketing

Where you opt in, we may send you occasional updates, newsletters, or product announcements. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or by contacting us. Legal basis: consent.

7. Sharing Contact Details Between Users

Students and parents control whether tutors can see their email address and phone number. By default, contact details are not shared. If you choose to share, only tutors with an active paid subscription will see your contact details on the relevant request. If you choose not to share, all communication takes place through the Platform's messaging system.

Tutors must not store, copy, share, sell, or otherwise misuse contact details obtained through the Platform. Misuse is a serious breach of our Terms and may also constitute a breach of the UAE PDPL.

8. Sharing Personal Data With Third Parties

We do not sell your personal data. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the purposes set out in this Policy.

8.1 Service Providers

Stripe — payment processing.
Resend — transactional email delivery.
Our hosting and infrastructure providers — to host the Platform's website and database.
Analytics providers — to understand aggregated usage of the Platform.
Customer support tools — where used, to manage support tickets. All our service providers are bound by contractual obligations to protect personal data, use it only for the purposes we instruct, and apply appropriate security measures.

8.2 Other Users

Information you place on a public profile or request (such as your name, subjects, and biography) is visible to other users of the Platform. Contact details are shared only as described in Section 7.

8.3 Legal and Regulatory Authorities

We may share personal data with courts, regulators, law-enforcement authorities, or other bodies where we are required to do so by law, where it is necessary to comply with a lawful request, or where we reasonably believe disclosure is necessary to protect our rights, property, or the safety of others.

8.4 Business Transfers

If Zyron FZE LLC is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of such a transfer and of any change in how your personal data is handled.

9. International Data Transfers

Some of our service providers (including Stripe and Resend) and our hosting infrastructure may process personal data outside the United Arab Emirates, including in the United States, the European Union, or other jurisdictions.

Where we transfer personal data outside the UAE, we ensure that an appropriate level of protection is in place by relying on one or more of the following safeguards, as required by the UAE PDPL:

Transfers to jurisdictions deemed by the UAE Data Office to provide an adequate level of protection.
Contractual safeguards (such as standard contractual clauses) with the recipient.
Your explicit consent to the transfer, where applicable.
Other safeguards permitted under the UAE PDPL. You may contact us for more information about the safeguards in place for any specific transfer.

10. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, and as required by law. Specific retention periods are set out in our Data Retention & Processing Policy. As a summary:

Active accounts: data is retained while the account is open.
Closed or inactive accounts: most personal data is deleted or anonymised within 12 months of closure, except where retention is required by law.
Financial records (payments, invoices, tax records): retained for at least 5 years to comply with UAE financial and tax regulations.
Messaging data: retained for up to 24 months after the most recent message in the conversation, then deleted or anonymised.
Verification documents: retained for up to 12 months after a verification decision, then deleted unless required to be kept longer.
Support communications: retained for up to 24 months after resolution.
Server logs and security logs: retained for up to 12 months.

11. How We Protect Your Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These include:

Encryption in transit using HTTPS/TLS.
Industry-standard password hashing (we never store passwords in plain text).
Role-based access controls and the principle of least privilege.
Server-side input validation and protection against common web vulnerabilities.
Regular monitoring, logging, and review of access to personal data.
Use of reputable third-party providers with strong security track records. No system is completely secure. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authority where required to do so under UAE law.

12. Your Rights

Under the UAE PDPL, and subject to the conditions and limitations of that law, you have the following rights:

12.1 Right to Be Informed

You have the right to be informed about how we process your personal data. This Privacy Policy is intended to fulfil that obligation.

12.2 Right of Access

You have the right to ask whether we hold personal data about you and to receive a copy of that data.

12.3 Right to Rectification

You have the right to ask us to correct inaccurate or incomplete personal data.

12.4 Right to Erasure

You have the right to ask us to delete personal data we hold about you, subject to exceptions where we are required or permitted by law to retain the data.

12.5 Right to Restrict Processing

You have the right to ask us to limit the way we process your personal data in certain circumstances.

12.6 Right to Data Portability

Where applicable, you have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to ask us to transfer it to another data controller.

12.7 Right to Object

You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing.

12.8 Right to Withdraw Consent

Where we rely on consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

12.9 Right to Lodge a Complaint

You have the right to lodge a complaint with the UAE Data Office or any competent supervisory authority if you believe we have not handled your personal data in accordance with the UAE PDPL.

12.10 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law (in most cases within 30 days). We may need to verify your identity before acting on your request.

13. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, secure your account, and analyse usage. For full details, please see our Cookie Policy.

14. Minors

Where a parent or legal guardian creates an account on behalf of a minor in their care, the parent or guardian is responsible for the minor's interactions with the Platform. We do not knowingly collect personal data directly from minors without parental consent. If we become aware that we have inadvertently done so, we will delete the data without undue delay.

If you believe a minor has provided personal data to us without appropriate consent, please contact us at [email protected] and we will take prompt action.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on the Platform with an updated "Last Updated" date. Where the changes are material, we will take reasonable steps to notify you (for example, by email or by an in-platform notice). Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Policy.

Contact Us

If you have any questions about this policy, please contact us using the details below:

Zyron FZE LLC
Trading as FindMyTutor UAE
BC-892423, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
Email: [email protected]
Phone: +971 50 247 5166
Website: https://findmytutoruae.com