A short, specific account of the data this site handles. It describes what actually runs on these pages, not a template.
Last updated 2 August 2026.
Insight Bay is a one person practice. All personal data described here is handled by the founder and by no one else.
The booking and contact forms collect the parent or guardian name, the student's first name, an email address, an optional telephone number, your country and region, and whatever you choose to write in the free text fields. This is used to arrange and prepare the assessment, and to reply to you. It is not sold, rented or shared for marketing.
Sign in uses a one time code sent to your email address. The code is stored only as a keyed hash, expires after ten minutes and can be used once. The signed in state is carried in a cryptographically signed cookie which is HttpOnly and same site. The store that holds this data sits outside the public web root and is not reachable from the internet.
Card details are never received, stored or transmitted by this site. Payment is completed inside the hosted fields of the payment providers, PayPal and Razorpay, and the card data stays within their systems. Insight Bay sees the amount, the reference and the confirmation.
Two things measure traffic on this site.
AW-18345602796, which loads
from Google and is subject to Google's own privacy terms.This site sets a cookie to keep you signed in to the Practice Engine, and stores your light or dark mode preference in your browser. The Google Ads tag may set its own cookies. No advertising profile is built by Insight Bay.
Students here are minors. Accounts and correspondence are held with the parent or guardian, and the data recorded about a child is limited to what teaching requires: first name, year group, curriculum, topics covered and progress. No child is asked to supply personal data directly. Recorded classes are covered on the safeguarding page.
Enquiries that do not become engagements are deleted within twelve months. Teaching records for current families are kept for the duration of the engagement and for as long afterwards as is needed to answer questions about the work. Payment records are kept for the period the relevant tax authority requires.
You can ask what is held about you or your child, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Write to me through the contact page and I will answer personally. There is no ticketing system and no third party processor to route you through.