Privacy policy

GetGrinds.ie (“we”, “us”) operates an online tutoring marketplace for users in Ireland. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Irish data protection law. This is not legal advice; it describes our current practices.

Who is responsible

For personal data collected through this website and related services, GetGrinds.ie is the data controller. Contact us at hello@getgrinds.ie.

What we collect

• Account data — name, email address, role (student, tutor or admin), and authentication details managed via our auth provider.
• Tutor profile data — bio, subjects, rates, location (county/town), availability, verification materials you submit, and public profile content.
• Booking and lesson data — scheduled times, status, prices in euro (cents), cancellation records, and related messages needed to run the booking.
• Payment data — payment and payout status mirrored from Stripe. Card details are handled by Stripe; we do not store full card numbers.
• Reviews — ratings and optional comments after completed lessons.
• Technical data — security logs, device/browser signals needed to run the service, and essential cookies (see our cookie notice).

Why we process data

• Contract — to create accounts, book lessons, process payments and payouts, and provide customer support.
• Legitimate interests — to keep the platform secure, prevent fraud, improve reliability, and verify tutors.
• Legal obligation — where we must retain financial or dispute records.
• Consent — where we ask for it (for example optional marketing, if offered).

Students under 18

Students may be under 18. Where a minor uses the service, a parent or guardian should oversee the account and bookings. We aim to minimise personal data and withhold contact details between parties until a booking is confirmed. Do not share unnecessary personal information about a child in public profile fields or reviews.

Who we share data with

• Stripe — payments, Connect onboarding and payouts. Stripe is the source of truth for payment state.
• Infrastructure providers — hosting, database and authentication (including Supabase and Vercel) that process data on our instructions.
• Email delivery — transactional messages such as booking confirmations.
• The other party to a booking — after confirmation, limited details needed to take the lesson (for example name and contact details for that booking).

We do not sell personal data. We may disclose information if required by law or to protect users and the platform.

International transfers

Some providers may process data outside the EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, as offered by those providers.

Retention

We keep account and booking data while your account is active and as needed to provide the service. If you request erasure, we anonymise personal fields where possible. Financial and dispute-related records may be retained where we have a legal or legitimate need to do so.

Your rights

Under GDPR you may have the right to:

• access your personal data
• rectify inaccurate data
• erase data (subject to legal retention)
• restrict or object to certain processing
• data portability
• withdraw consent where processing is based on consent
• complain to the Data Protection Commission

To exercise these rights, email hello@getgrinds.ie. We may need to verify your identity before responding.

Changes

We may update this policy from time to time. The effective date at the top of this page will change when we do. Continued use of the service after an update means you should review the revised policy.

Contact

Privacy questions: hello@getgrinds.ie. See also Terms of service and Cookies.