1. Who We Are
Tutor e all is the Data Controller of your personal data.
2. What Data We Collect
We collect the following types of personal data:
For Students/Parents
- Name, contact details, and billing information.
- Lesson booking history, quiz responses, and platform messages.
- Lesson recordings (for safeguarding purposes).
For Tutors
- Name and contact details.
- Professional qualifications and DBS Enhanced certificate.
- Payment/bank details (processed via Stripe).
- Lesson scheduling and performance analytics.
Automatically Collected Data
- Device and browser information.
- Cookies and analytics data (see Section 10).
3. Legal Basis for Processing Data
We process personal data under the following lawful bases:
- Contractual necessity – to provide tuition services.
- Legal obligation – safeguarding and child protection.
- Legitimate interest – to improve our platform and ensure safety.
- Consent – for marketing emails and communications.
4. How We Use Your Data
We use your data to:
- Provide online lessons and manage accounts.
- Process payments securely through Stripe.
- Safeguard students (including reviewing recorded lessons where necessary).
- Verify tutors’ eligibility (DBS and qualifications).
- Improve platform performance and develop resources.
- Communicate with you regarding sessions, complaints, or support requests.
5. Children’s Data
- Students under 18 may only use the platform with parent/guardian consent.
- We only collect the minimum data required to provide lessons.
- Parents/guardians remain responsible for overseeing their child’s participation.
6. Data Sharing & Third-Party Services
We do not sell or trade personal data. However, we share data with trusted third parties for essential services:
- Stripe – payment processing.
- Zoom/Google Meet – video lessons and recordings.
- Website hosting providers – platform operation and security.
- Webchat hosts – To help respond to customer queries
Where data is transferred outside the UK/EU, we ensure adequate safeguards (UK GDPR adequacy regulations or Standard Contractual Clauses).
7. Data Retention
- Lesson recordings: kept for safeguarding purposes, deleted after [30–60 days] unless required for an investigation.
- Tutor documents (DBS/qualifications): retained only while the tutor is active.
- Payment records: retained as required by financial regulations (usually 6 years).
- Account information: deleted upon request or after inactivity.
8. Your Rights
Under UK GDPR, you have the right to:
- Access your data.
- Correct inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Restrict or object to processing.
- Request data portability.
- Withdraw consent (where consent is the lawful basis).
- Lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
To exercise these rights, contact us at: help@tutoreall.com
9. Data Security
We take appropriate measures to protect your data, including:
- Secure storage and encryption.
- Limited access by authorised staff only.
- Regular reviews of data handling procedures.
10. Cookies & Tracking
Our website uses cookies to:
- Enable essential platform functionality.
- Analyse usage via analytics tools.
- Provide an improved user experience.
You can manage or disable cookies through your browser settings.
11. Data Breach Procedure
In the unlikely event of a data breach:
- We will notify affected users without undue delay.
- If legally required, we will also notify the ICO within 72 hours.
12. Updates to this Policy
We may update this Privacy Policy from time to time.
Users will be notified via an announcement/email. If a student/tutor continues to use the platform, this will mean that they confirm with the new proceedings.