Privacy Policy

Last updated: 26 August 2026

This policy is issued by Hill One Elite Learning Centre (registration no. 598666, “we”), operator of the mathstogo platform, and explains how we collects, uses, retains and protects personal data in providing online mathematics tutoring. We handle all personal data in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

• Student data — name, year level, school, login ID, lesson and attendance records
• Parent/guardian data — name, WhatsApp phone number, email address (if provided)
• Learning records — classwork answers, images of handwritten work, marking results, scores, teacher comments
• Account data — login ID, hashed password, sign-in times
• Communication records — messages sent and received via WhatsApp, with timestamps
• Payment records — tuition payment history. We do not store card or bank account numbers.

2. How we use it

To schedule lessons, record attendance and prepare materials; to mark work and give feedback; to send parents lesson comments, reminders, payment notices and schedule changes; to answer enquiries and arrange trial lessons; and to keep accounts secure. We do not sell, rent or transfer personal data to third parties for marketing.

3. WhatsApp messaging

We contact parents through the WhatsApp Business Platform provided by Meta, for lesson comments, reminders, payment notices and replies to enquiries.

• Messages pass through Meta’s servers and are subject to the WhatsApp Privacy Policy.
• We message only parents who have given us their number and consented to receive notifications.
• Parents may opt out at any time by replying STOP, or by telling us directly. Opting out does not affect a student’s lessons.
• We retain message records to follow up on learning progress and to resolve disputes.

4. Automated marking and AI

To speed up marking, images of students’ handwritten answers may be processed by an artificial-intelligence service that reads the answer and produces a preliminary marking suggestion.

A teacher remains responsible. AI output is a suggestion only; scores and comments are reviewed and decided by a teacher, and every comment sent to parents is approved by a person before it is sent. Content sent to the AI service is limited to the answer image and the question. We do not separately submit a student’s name, phone number or other identifying data; however, because what is submitted is the answer image itself, a name the student has written on their own worksheet will appear in that image.

5. Third parties

• Meta (WhatsApp Business Platform) — sending and receiving messages; phone numbers and message content
• AI marking service — preliminary marking; answer images and questions, without identifying data
• Server hosting provider — running the system and storing data; system data, transmitted encrypted

Otherwise we disclose personal data only where required by law or to protect someone’s safety.

6. Retention

Learning and communication records are kept while the student is enrolled and for up to 24 months afterwards, so parents can still review them. Payment records are kept for 7 years as required by tax and accounting rules. Data past these periods is deleted or anonymised.

7. Your rights · how to request deletion

You may ask for access to the personal data we hold about you or your child, ask us to correct inaccurate data, ask us to delete data that is no longer needed, and withdraw consent to WhatsApp notifications at any time.

8. Children

Our service is for primary and secondary school students. For students under 18, personal data is provided and consented to by a parent or guardian, who may also exercise all of the rights above on the student’s behalf.

9. Security

The site is served over HTTPS. Passwords are stored one-way hashed and cannot be recovered by anyone, including us. Files holding personal data cannot be reached directly by URL and are served only through authenticated accounts. Students see only their own records; teachers see only the students they teach. Cookies and local storage are used only to keep you signed in and to remember your language preference — never for advertising tracking.

10. Contact us

11. Changes to this policy

If we revise this policy we will update the “Last updated” date at the top of this page. For significant changes we will also notify parents by WhatsApp or email.