Privacy Policy

1. Introduction

Tutor Campus ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the UK GDPR. By using our services, you consent to the data practices described in this policy.

2. Data Controller

Tutor Campus is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: info@tutorcampus.co.uk

3. Information We Collect

We collect the following types of personal information:

3.1 Information You Provide to Us

• Contact Information: Full name, email address, and phone number
• Trial Lesson Requests: Subject of interest, curriculum, education level, preferred day and time, and any additional notes
• Tutor Applications: Person type (student/teacher), education level, experience level, subjects you teach or wish to learn, weekly schedule availability, and any additional information you provide
• Call Requests: Name, phone number, and person type when you request a callback

3.2 Automatically Collected Information

• Security Verification: We use Cloudflare Turnstile to verify that form submissions are from real users and not automated bots. This may collect certain technical information such as IP address and browser characteristics.
• Technical Data: IP address, browser type and version, device information, and usage patterns when you visit our website

4. How We Use Your Information

We use your personal information for the following purposes:

• To process and respond to your trial lesson requests
• To process tutor applications and assess your suitability
• To contact you regarding your requests or applications
• To schedule lessons and coordinate with tutors
• To provide customer support and respond to your inquiries
• To improve our services and website functionality
• To prevent fraud and ensure security (via Cloudflare Turnstile)
• To comply with legal obligations

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you voluntarily provide information through our forms
• Contractual Necessity: To fulfill our obligations when you request a trial lesson or apply to become a tutor
• Legitimate Interests: To improve our services, prevent fraud, and ensure website security
• Legal Obligation: To comply with applicable laws and regulations

6. Data Storage and Security

Your personal data is stored securely in our database hosted by Supabase. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce our agreements

Trial lesson requests and tutor applications are typically retained for a period of 3 years after your last interaction with us, unless you request earlier deletion or we are required to retain it for legal purposes.

8. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., Supabase for data storage, Cloudflare for security verification)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of the transaction
• With Your Consent: When you have given explicit consent for us to share your information

9. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA) or the UK. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to processing of your data based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the contact information provided in Section 2. We will respond to your request within one month.

11. Cookies and Tracking Technologies

We use Cloudflare Turnstile for security verification, which may use cookies or similar technologies. We do not use cookies for advertising or tracking purposes beyond what is necessary for security and functionality.

12. Children's Privacy

Our services are intended for users of all ages, including children under 16. When we collect personal information from children, we do so with appropriate parental consent where required by law. Parents or guardians have the right to review, delete, or refuse further collection of their child's information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Complaints

If you believe that we have not addressed your concerns or that we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with a supervisory authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Your local data protection authority

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@tutorcampus.co.uk