Last Updated: 4 August 2025
This privacy policy complies with UK GDPR, Data Protection Act 2018, and international privacy regulations.
1. About This Policy
My Private Tutor Online Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we look after your personal data when you visit our website and tells you about your privacy rights.
Important Notice
Given our prestigious clientele, including members of distinguished families and high-profile individuals, we maintain the highest standards of confidentiality and data protection. All staff sign comprehensive non-disclosure agreements and undergo enhanced security vetting.
2. Who We Are
My Private Tutor Online Limited is the data controller and is responsible for your personal data. We have been providing premium tutoring services since 2010 and are based in the United Kingdom.
Contact Details:
- Company: My Private Tutor Online Limited
- Registration: Companies House [Registration Number]
- ICO Registration: [ICO Registration Number]
- Data Protection Officer: privacy@myprivatetutoronline.co.uk
- Address: [Registered Office Address]
3. What Personal Data We Collect
3.1 Student and Parent Information
- Identity Data: Full name, date of birth, gender, nationality
- Contact Data: Address, email, telephone numbers
- Educational Data: Current school, academic level, subjects studied, exam boards
- Assessment Data: Academic assessments, progress reports, learning needs
- Special Category Data: Learning difficulties, disabilities (with explicit consent)
- Financial Data: Payment method details, billing addresses
3.2 Technical Data
- IP address, browser type and version
- Device information and screen resolution
- Website usage data and analytics
- Cookie data and preferences
3.3 Sensitive Personal Data
We may process special category personal data including:
- Information about learning difficulties or disabilities
- Medical information relevant to learning
- Dietary requirements for face-to-face sessions
We will only process this data with your explicit consent or where legally required.
4. How We Collect Your Data
4.1 Direct Interactions
- Completing enquiry forms on our website
- Booking consultations or tutoring sessions
- Telephoning or emailing us
- Subscribing to our newsletter
- Providing feedback or testimonials
4.2 Automated Technologies
- Website analytics and cookies
- Video calling platform data during online sessions
- Email marketing platform interactions
4.3 Third Parties
- Schools and educational institutions (with permission)
- Previous tutoring providers (with consent)
- Payment processors and fraud prevention services
5. How We Use Your Personal Data
Lawful Basis for Processing
We will only use your personal data when the law allows us to. Most commonly under:
- Contract: To perform our tutoring services
- Legitimate interests: For business administration and marketing
- Consent: For special category data and marketing communications
- Legal obligation: For safeguarding and compliance requirements
5.1 Service Delivery
- Matching students with appropriate tutors
- Scheduling and conducting tutoring sessions
- Tracking academic progress and outcomes
- Processing payments and managing accounts
- Providing customer support
5.2 Business Operations
- Quality assurance and service improvement
- Staff training and development
- Business reporting and analytics
- Legal compliance and risk management
5.3 Marketing and Communications
- Sending service updates and educational content
- Newsletter and promotional communications (with consent)
- Market research and customer feedback
- Website personalisation and improvement
6. Sharing Your Personal Data
6.1 Our Tutors
We share relevant student information with matched tutors to enable effective teaching. All tutors sign comprehensive confidentiality agreements and undergo enhanced background checks.
6.2 Service Providers
- Video Conferencing: Zoom, Microsoft Teams (for online sessions)
- Payment Processing: Stripe, PayPal (for secure payments)
- Email Services: Mailchimp, SendGrid (for communications)
- Analytics: Google Analytics, Hotjar (for website improvement)
- Customer Support: Zendesk, Intercom (for support services)
6.3 Legal Requirements
We may share your data where required by law, including:
- Safeguarding concerns (child protection authorities)
- Legal proceedings and court orders
- Regulatory investigations
- Prevention of fraud or criminal activity
7. International Transfers
Cross-Border Data Protection
We serve clients internationally and may transfer data outside the UK/EEA. All transfers are protected by appropriate safeguards including adequacy decisions or standard contractual clauses.
When we transfer your data outside the UK/EEA, we ensure appropriate safeguards including:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules for multinational organisations
- Certification schemes and codes of conduct
8. Data Security
8.1 Technical Measures
- End-to-end encryption for video sessions
- SSL/TLS encryption for all data transmission
- Regular security penetration testing
- Multi-factor authentication for staff access
- Regular software updates and patches
8.2 Organisational Measures
- Comprehensive staff training on data protection
- Enhanced background checks for all tutors
- Strict access controls and need-to-know basis
- Regular data protection impact assessments
- Incident response and breach notification procedures
9. Data Retention
Retention Periods:
- Student Records: 7 years after last session (educational and legal requirements)
- Safeguarding Records: Until 25th birthday or 7 years, whichever is longer
- Financial Records: 6 years (HMRC requirements)
- Marketing Data: Until consent withdrawn or 3 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- CCTV Footage: 30 days (office premises only)
10. Your Legal Rights
Under UK GDPR, you have the following rights:
10.1 Access Rights
- Right of Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Transfer your data to another provider
- Right to Object: Stop processing for marketing or legitimate interests
10.2 Exercising Your Rights
To exercise any of these rights, please contact us at:privacy@myprivatetutoronline.co.uk
We will respond within one month and may request identification to verify your identity.
11. Cookies and Website Analytics
Our website uses cookies to improve your experience. Please see our separateCookie Policyfor detailed information.
11.1 Essential Cookies
- Session management and security
- Load balancing and performance
- Cookie consent preferences
11.2 Analytics Cookies
- Google Analytics (anonymised)
- Website performance monitoring
- User experience improvements
12. Children's Privacy
Special Protection for Children
As an educational service provider, we take special care with children's data. We require parental consent for students under 13 and maintain enhanced safeguarding procedures.
We take children's privacy seriously and comply with additional regulations:
- Parental consent required for children under 13
- Enhanced safeguarding procedures and training
- Careful monitoring of online interactions
- Strict data minimisation for young learners
- Regular safeguarding reviews and updates
13. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Email notification to registered users
- Prominent notice on our website
- Updated last modified date
14. Complaints and Regulatory Contact
If you have concerns about our data handling practices, please contact us first. If you remain unsatisfied, you can lodge a complaint with:
Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
15. Contact Us
For any privacy-related questions or to exercise your rights, please contact:
Data Protection Team:
- Email: privacy@myprivatetutoronline.co.uk
- Phone: [Phone Number]
- Post: Data Protection Officer, My Private Tutor Online Limited, [Address]
- Response Time: We aim to respond within 48 hours
This is a template for informational purposes. Consult with a qualified attorney for legal advice specific to your situation.