UK GDPR & Data Protection Act 2018 Compliant
Enhanced Minor Safeguarding

Privacy & Data Protection Policy

We are committed to safeguarding the personal data of our students, parents, and tutors. This policy outlines how your information is gathered, encrypted, processed, and protected in full accordance with UK privacy legislation.

Last Updated: August 30, 2026•Version 2.4 (UK Registered)
Contact DPO
Zero Data Selling

Your learning data is never sold, traded, or rented to advertisers.

DBS-Checked Tutors

All 1-to-1 tutors pass identity verification and safeguarding checks.

TLS 1.3 Encryption

All traffic, quizzes, and tokens are protected with end-to-end encryption.

30-Day GDPR Access

Full rights to access, rectify, or erase your profile upon request.

1

Who We Are & Scope of Policy

Data Controller: MyTutorMate UK Education

MyTutorMate (“we”, “our”, or “us”) provides high-quality 1-to-1 tutoring, topical revision books, GCSE/A-Level exam papers, and interactive practice tools.

We operate in strict accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). We act as the Data Controller in respect of personal data processed through our website (https://mytutormate.co.uk).

2

Information We Collect

Direct and Automated Data Collection

We only collect information necessary to deliver educational services:

Identity & Account Data

Student name, age/year group, target exam board, parent/guardian email and phone numbers for students under 18.

Academic & Learning Records

Diagnostic quiz scores, practice test history, topical book downloads, and tutor lesson feedback notes.

Booking & Billing Data

Lesson schedules, payment receipts, and billing postcode. (We never store full card numbers on our servers).

Technical & Session Data

IP address, device type, browser version, and page load timestamps for security monitoring.

3

How We Use Your Information

Legitimate Educational Purposes

  • Lesson Coordination: Matching students with verified subject tutors and facilitating 1-to-1 interactive tutoring.
  • E-Book & Topical Resource Delivery: Providing fast, reliable access to revision books and official past paper packs.
  • Student Progress Tracking: Storing quiz results and diagnostic weaknesses to guide personalized lesson planning.
  • Security & Abuse Prevention: Guarding platform infrastructure against malicious bots, automated scraping, and unauthorized access.
5

Cookies & Local Storage Policy

Functional, Essential & Performance

  • • Strictly Essential Cookies: Authentication tokens (`session_id`), CSRF verification, and admin session security.
  • • Functional Storage: Calculator history, dark/light theme preference, and topical filter states.
  • • Performance & Speed: Anonymous telemetry to optimize resource delivery and file download speed.
6

Data Sharing & Third-Party Processors

Strict Data Processing Agreements

  • • Cloud Infrastructure: Vercel and Google Cloud / Drive API (for fast topical book access).
  • • Database Systems: Encrypted PostgreSQL instances with automated encrypted backups.
  • • Payment Gateways: Stripe / UK banking partners ensuring Level 1 PCI-DSS compliance.
7

Children's Privacy & Safeguarding

Enhanced Protection for Minors

Enhanced Safeguarding Commitment

All active 1-to-1 tutors on MyTutorMate undergo identity verification, Enhanced DBS background checks, and professional academic vetting before conducting lessons. Parental accounts have direct visibility over all lesson schedules, tutor communications, and feedback reports.

8

Data Security & Storage

Encryption & Protection Standards

All data in transit is encrypted using TLS 1.3 encryption, and sensitive authentication credentials are encrypted using industry-standard hashing algorithms.

We retain personal data only for as long as necessary to fulfill the educational purposes outlined in this policy or to satisfy statutory accounting obligations (typically 6 years for financial transaction records under UK law).

9

Your Rights Under UK GDPR

Full Transparency & Control

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate records.
• Right to Erasure: Request permanent deletion of your account.
• Right to Portability: Receive learning data in machine-readable format.

To exercise any rights, email privacy@mytutormate.co.uk. We respond to all requests within 30 days free of charge.

10

Contact Us & Supervisory Authority

Data Protection Officer

Platform: MyTutorMate UK Education

Email: privacy@mytutormate.co.uk / support@mytutormate.co.uk

Support Page: https://mytutormate.co.uk/contact

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.