Last updated: 12 July 2026
This Privacy Policy explains how Tutorly collects, uses, discloses and protects your personal information. Tutorly is a tutoring business operated by Jahid Hassan, CFA, CFP, based in Calgary, Alberta, Canada. We provide 1-on-1 and small-group accounting and finance tutoring to post-secondary students across Canada.
We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and — for visitors resident in Quebec — Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.
Our Privacy Officer
Jahid Hassan is accountable for Tutorly’s compliance with this policy and with applicable privacy law.
- Privacy Officer: Jahid Hassan
- Email: info@mytutorly.ca
- Phone: 403-667-0535
- Mail: 5005 Dalhousie Dr NW, Unit 175 #1538
Calgary, AB T3A 5R8
Canada
You can contact the Privacy Officer at any time to ask a question, request access to your information, correct it, withdraw your consent, or make a complaint. We respond within 30 days.
What we collect, and why
1. Contact form
What: your name, email address, and the message you write. Our form provider also records your IP address and the time of submission.
Why: to answer you.
Consent: by submitting the form, you consent to us using this information to reply.
2. Booking a session
What: your name, email address, the course or subject you need help with, your time zone, and the session date and time. Depending on what you enter, this may include free-text notes about your coursework.
Why: to schedule, deliver and keep a record of your tutoring session.
Payment: if you pay at the time of booking, your card is processed by Stripe. We never see or store your card number. We only receive confirmation that payment succeeded, and the amount.
3. Free study resources (email sign-up)
What: your first name and email address, plus a record of your consent — the date, time and IP address from which you subscribed and confirmed.
Why: to send you the resource you asked for, and — because you opted in — occasional study tips and new free resources.
Consent: we use confirmed (double) opt-in. After you sign up we email you a confirmation link, and you are only added to our list once you click it. You can unsubscribe from any email we send, at any time.
4. Website analytics
What: Google Analytics 4 collects a pseudonymous device identifier, your truncated IP address, the pages you view, how long you stay, your approximate location (city-level), your device and browser, and how you arrived at the site.
Why: to understand which pages help students and which don’t.
Consent: analytics cookies do not load unless you accept them in our cookie banner. If you decline, or ignore the banner, Google Analytics does not run. You can change your choice at any time via the cookie preferences link in our footer.
5. Reviews displayed on our site
What: our reviews widget may load content from Facebook/Meta, which can set cookies and see your IP address.
Consent: this is classified as a marketing cookie and does not load unless you accept.
6. Session recordings
What: if — and only if — you and we have both agreed to record a session, the recording captures your voice, your screen if you share it, and your image if your camera is on.
Why: because you asked for it, to revise from.
Consent: we never record without your express agreement, and you can say no. See section 7 of our Terms & Conditions.
Retention: we delete recordings 90 days after the session unless you ask us to keep them longer.
Where it goes: sessions run on Google Meet, and any recording is stored in Google Drive (Google LLC, United States).
7. Server logs
What: our host records standard web-server logs — IP address, request time, page requested, browser type.
Why: security, abuse prevention, and keeping the site running. These are strictly necessary and are not used to profile you.
What we do not do
- We do not sell or rent your personal information. Ever.
- We do not run advertising networks or share your data with advertisers.
- We do not use your information to make automated decisions about you.
- We do not knowingly collect information from children. Our service is aimed at post-secondary students. If you are under 18, a parent or guardian must consent before you book.
Who we share it with — our service providers
We use the following third parties to run the business. Each one processes your information on our behalf, under its own privacy policy and security commitments.
| Provider | What it handles | Information involved | Where it is processed |
|---|---|---|---|
| Formspree, Inc. | Our contact form | Name, email, message, IP address | United States |
| Cal.com, Inc. | Session booking and scheduling | Name, email, course, session time, time zone, notes | United States |
| Stripe, Inc. | Card payment for bookings | Name, email, card details (we never see or store your card number), amount, billing address | United States |
| MailPoet / Automattic Inc. | Email list and campaigns | First name, email, consent record, IP, opens and clicks | United States |
| Google LLC (Google Analytics 4) | Website analytics — only with your consent | Pseudonymous ID, truncated IP, pages viewed, device | United States |
| Google LLC (Google Meet & Drive) | Running sessions; storing recordings you have consented to | Name, email, audio/video/screen if recorded | United States |
| Meta Platforms, Inc. | Reviews widget — only with your consent | IP address, cookies | United States |
| Hostinger International Ltd. | Web hosting and server logs | IP address, request logs, all site content | United States |
Disclosure to your university
If your institution’s academic-integrity office contacts us about you, we will not disclose your session records without your consent, unless we are legally required to (for example, under a court order or subpoena). See our Academic Integrity Policy. If you are accused of misconduct and want us to confirm what we worked on, just ask — we will.
Other disclosures
We may also disclose personal information where we are required to by law, or to establish or defend a legal claim.
Your information leaves Canada
This matters, so we are stating it plainly rather than burying it.
Every service provider listed above is located in the United States — including our web host. This means that essentially all of your personal information, including the server logs generated simply by visiting this site, is transferred to, stored in, and processed in the United States.
While your information is outside Canada, it is subject to the laws of that country. This includes the possibility that foreign courts, law enforcement or national-security authorities could lawfully compel access to it, under legal standards that differ from Canada’s — and without notice to you or to us.
We choose providers that offer contractual protections and recognised security practices. But we cannot promise that foreign law will never reach it. If you are not comfortable with this, please do not use the contact form or booking system — email us directly at info@mytutorly.ca and we will make other arrangements.
How long we keep it
| Information | Retention period | Reason |
|---|---|---|
| Contact form submissions | 24 months | To follow up and keep a record of the conversation |
| Booking and session records | 7 years | Canada Revenue Agency requires business records to be kept for 6 years from the end of the tax year |
| Payment records | 7 years | Same CRA requirement as booking records |
| Session recordings | 90 days | Long enough to revise from; we delete them after that unless you ask us not to |
| Email list membership | Until you unsubscribe | You control this |
| Proof of your email consent | 3 years after you unsubscribe | Canada’s Anti-Spam Legislation requires us to be able to prove consent |
| Google Analytics data | 14 months | Google’s retention setting; we do not need it longer |
| Cookie consent record | 12 months | To remember your choice and prove we asked |
| Server logs | Per our host’s standard policy | Security and diagnostics |
When a retention period ends, we delete or anonymise the information.
How we protect it
- The site runs over HTTPS — traffic between your browser and us is encrypted.
- Accounts that hold personal information use strong, unique passwords and, where the provider supports it, two-factor authentication.
- Access is limited to Jahid Hassan. Tutorly has no other staff and no contractors with access to your data.
- We collect only what we need, and delete it when we no longer need it.
No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the appropriate privacy commissioner, as PIPEDA, Alberta PIPA and Quebec Law 25 each require.
Your rights
You have the right to:
- Know what personal information we hold about you, and get a copy of it.
- Correct anything that is inaccurate or incomplete.
- Withdraw your consent at any time — for emails, use the unsubscribe link; for cookies, use the preferences link in our footer; for anything else, email us.
- Ask us to delete your information, subject to any legal obligation we have to keep it (for example, tax records).
- Complain if you think we have got it wrong.
If you are a resident of Quebec, you also have the right to:
- Data portability — receive the personal information you gave us in a structured, commonly-used technological format.
- De-indexing — ask us to stop disseminating your information, or to de-index a link to it, where dissemination contravenes the law or a court order, or causes you serious injury to reputation or privacy that outweighs the public interest.
- Be informed before we use your information for a purpose you did not consent to.
To exercise any of these rights, email info@mytutorly.ca. We may need to verify your identity first. We respond within 30 days, free of charge.
Complaints
Please come to us first — email the Privacy Officer at info@mytutorly.ca and we will try to resolve it. If you are not satisfied with our response, you can complain to:
- Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376
- Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca — 1-888-878-4044
- Commission d’accès à l’information du Québec (Quebec residents) — cai.gouv.qc.ca — 1-888-528-7741
Cookies
We use cookies. Analytics and marketing cookies only load if you accept them. Full details — every cookie, what it does, how long it lasts — are in our Cookie Policy. You can change your choice at any time using the cookie preferences link in our footer.
Changes to this policy
We may update this policy. The current version always lives on this page, with the date it was last updated at the top. If we make a change that materially affects how we handle your information, we will tell you — by email if you are on our list, and by a notice on the site.
Contact
Tutorly
Attn: Jahid Hassan, Privacy Officer
5005 Dalhousie Dr NW, Unit 175 #1538
Calgary, AB T3A 5R8
Canada
Phone: 403-667-0535
Email: info@mytutorly.ca
Cette politique est également disponible en français.
