Tutorium Education Logo

Privacy Policy

Last updated: 26 May 2026

Tutorium Education (“we”, “us”, or “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or submitting any form on tutoriumeducation.co.uk, you agree to the terms set out in this policy.

1. Who we are

Data Controller: Tutorium Education

Contact: contact@tutoriumeducation.co.uk

If you have any questions about how we handle your data, please contact us at the email address above.

2. What data we collect

We may collect the following categories of personal data:

  • Contact information — name, email address, phone number
  • Student information — student name, year group, school (where provided)
  • Financial circumstances — benefit type, approximate monthly income (for Access Fund applications only)
  • Communication data — messages, enquiries, or anything you voluntarily share with us through forms or email
  • Technical data — IP address, browser type, pages visited (collected automatically via our website)

We do not collect sensitive personal data beyond what is strictly necessary for the purpose described in this policy. For Access Fund applications, income and benefit information is collected solely to assess eligibility.

3. How we collect your data

  • Application forms — when you apply to Tutorium Education or the Access Fund
  • Referral forms — when a school, organisation, or individual refers a student
  • Partner enquiry forms — when an organisation expresses interest in partnering with us
  • Email correspondence — when you contact us directly
  • Website analytics — automatically when you browse our website

4. Why we use your data (legal basis)

We process personal data only where we have a lawful basis to do so. The following table explains our purposes:

PurposeLegal basis
To respond to enquiries and applicationsLegitimate interests / Contract
To assess Access Fund eligibilityConsent (explicit at point of submission)
To arrange and deliver tutoring servicesContract
To send updates about your application or sessionsContract / Legitimate interests
To publish anonymised impact reports (Access Fund)Legitimate interests
To improve our website and servicesLegitimate interests

5. How long we keep your data

  • Application data — retained for up to 2 years after an application is closed or a tutoring relationship ends
  • Access Fund application data (including income evidence) — retained for up to 3 years for audit and transparency reporting purposes, then securely deleted
  • Marketing or enquiry data — retained until you ask us to remove it or for up to 2 years of inactivity
  • Technical/analytics data — retained for up to 26 months

6. Who we share your data with

We do not sell your personal data. We may share it with:

  • Web3Forms — our form submission processor, used solely to deliver form responses to our inbox
  • Email service providers — to send you correspondence related to your application or services
  • Tutors — student name, year group, and subject information shared only with the specific tutor assigned to a student
  • Legal or regulatory authorities — if required by law

All third-party processors we use are UK/EEA-based or operate under equivalent data protection standards.

7. Cookies

Our website may use essential cookies to function correctly and analytics cookies to help us understand how visitors use the site. No advertising or tracking cookies are used. You can disable cookies in your browser settings at any time.

8. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate or incomplete data
  • Erasure — ask us to delete your data ('right to be forgotten'), subject to any legal obligations
  • Restriction — ask us to limit how we use your data
  • Portability — request your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at contact@tutoriumeducation.co.uk. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All form submissions are transmitted over HTTPS. Income evidence (such as UC screenshots) submitted by email is stored securely and accessible only to the Access Fund review committee.

10. Children's data

We may hold limited data about students (name, year group, school) where provided by a parent, guardian, or authorised referrer. We do not knowingly collect data directly from children under the age of 13 without parental consent. All student data is treated with additional care and is never used for any commercial purpose.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this page periodically.