Privacy Policy

This site is run by Jason Di (翟家辉), a sole trader based in mainland China, trading as TutorMax. I am the data controller for everything described below. The fastest way to reach me about anything on this page is 3kyouthree@gmail.com.

This site sets no cookies

No cookies, no analytics, no tracking pixel, no advertising tag, no session storage, no fingerprinting. Nothing here follows you to another website and nothing here knows you have been here before. There is no account to create and no login.

If you click through to Calendly, Zoom, PayPal or Buttondown, those are separate services on their own domains and they set their own cookies under their own policies — but only once you are there.

The one third-party request a page makes on its own

Every page loads two typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser fetches those font files directly from Google, which means Google receives your IP address and the ordinary request information that comes with it. No cookie is set by that request, Google is not told by me which page you were reading, and nothing comes back to me from it. It is the only third-party request a page makes before you click anything.

What I collect, and when

• When you send the contact form: your name, your email address, a phone number if you choose to give one (it is optional), a short line about what your message is about, and the details you type.
• When you subscribe to the newsletter: your email address, and nothing else.
• When you book a strategy call: Calendly asks for your name, email and timezone and creates the Zoom link. I see what you enter there; I don't collect it myself.
• When you buy coaching: PayPal takes the payment. I never see or hold your card, bank or PayPal login details — PayPal tells me your name, your email address and the transaction reference so I know who paid.
• During coaching: Zoom processes your name, email and IP address for the duration of each session, plus whatever you choose to tell me. I keep working notes about your business so our sessions build on each other. Sessions are not recorded.
• Just by visiting: the site is hosted on Vercel, whose servers keep short-lived request logs — your IP address, the page requested, your browser's user-agent. That is ordinary web-server logging and I don't use it to build any profile.

Why I use it

The contact form, so I can answer you. The newsletter, on your consent, which you can withdraw in one click from any email. Booking, coaching and payment data, to deliver the coaching you bought. Hosting logs, to keep the site up and secure.

I never sell your data, never rent it, never share it for advertising, and never use it to train anything.

Who else processes it

• Formspree — delivers contact-form submissions to my inbox and keeps a copy in its dashboard.
• Buttondown — holds the newsletter list and sends the confirmation email.
• Google Mail — my inbox, which is where every contact-form email actually lands.
• Calendly — schedules the strategy call and coaching sessions.
• Zoom — hosts the sessions themselves.
• PayPal — takes the payment. PayPal is a controller in its own right for its part of the transaction.
• Vercel — hosts the site and keeps the request logs.
• Google Fonts — serves the typefaces, and therefore receives your IP address.

Each publishes its own privacy policy. Other than PayPal, each acts on my instructions.

Where it goes

I am in mainland China and most of these services are in the United States, so if you are in the UK or the EU your data will leave the UK or EU when you contact me or buy coaching. Where that happens it is because it is necessary to perform the contract you entered into, or because you consented — in the newsletter's case. I only use it for the purpose you gave it for.

How long I keep it

• Contact-form messages: in my inbox while we are talking and for up to 24 months after your last message, then deleted, including the copy held by Formspree.
• Newsletter: until you unsubscribe.
• Client records, coaching notes and payment records: for the length of your program and 5 years after, or longer where accounting or tax law requires it.
• Hosting logs: whatever Vercel's own retention is — I don't extend it.

Your rights

Wherever you are, you can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Email 3kyouthree@gmail.com and I will do it.

If you are in the UK or the EU you also have the right to restrict or object to processing, the right to portability, and the right to withdraw consent at any time. I will reply within one month. If you think I have handled your data badly you can complain to your data-protection authority — the ICO in the UK, or your national authority in the EU.

Security

I keep the number of places your data lives as small as I can, every service above is reached over HTTPS with two-factor authentication where it is offered, and no payment details ever touch this site. Nobody can promise perfect security and I won't.

Under 18s

TutorMax is sold to working adults. I don't knowingly collect anything from anyone under 18.

Changes

If this policy changes I will update the date at the top of this page.