This policy is a working draft
It describes, as accurately as we can, what our systems actually collect and do with your information today. It has not yet been reviewed by a solicitor. If you have any concerns about how your data (or your child's data) is handled, please contact us directly using the details below — we take this seriously and will respond.
Who we are
Minds in Tutoring provides online 1-to-1 academic tutoring. For the purposes of UK data protection law, we are the data controller for the personal information described on this page.
Information we collect
When you book a trial or enquire about our services
Student name, parent/guardian name (where provided), email address, phone number, subject, year group and study level, and how you heard about us. This is submitted directly by you through our booking and enquiry forms.
When you make a payment
Payment card details are collected and processed entirely by Stripe, our payment processor — we never see or store your full card number. We retain only the outcome (amount, date, status) needed for our own records and your receipts.
When you use your student or tutor portal
Session bookings, messages between students and tutors, homework and progress notes, uploaded files, and recordings of lessons (where applicable), so that tutoring can actually take place and be reviewed later.
When you browse our public website
Pages viewed, approximate location (from your IP address), device/browser type and how you arrived at the site, collected via PostHog analytics — on our public marketing pages only. Our student, tutor and admin portals do not use this analytics tool at all.
Cookies and similar technology
We don't yet show a cookie consent banner
Our analytics tool sets cookies and similar storage in your browser as soon as you visit our public pages, before asking for consent. We're aware this isn't best practice and are working to add a proper consent choice. In the meantime, you can block or clear these in your browser's privacy settings at any time, and it won't affect your ability to use the site or book a session.
What they're used for
Understanding which pages are useful, where visitors come from, and whether our booking process is working — never to identify an individual student by name unless they've already told us who they are (for example, by submitting a form).
Children's and students' data
Many of our students are under 18
Where a student is a minor, a parent or guardian is involved in the booking process and is the point of contact for billing and account matters. Our student/tutor/admin portals — where lesson content, messages and progress notes live — are kept entirely separate from our public-site analytics, precisely so that no student's personal activity in the portal is ever tracked by third-party analytics tools.
Who we share information with
Stripe
Processes all payments and holds your payment details — we never see your full card number.
Supabase
Hosts our database and the files you or your tutor upload (notes, recordings, resources).
Resend
Sends the transactional emails you receive from us (booking confirmations, reminders, receipts).
Powers calendar invites and Google Meet links for scheduled sessions, where you or your tutor connect a Google account.
PostHog
Provides analytics on our public marketing pages only, as described above.
Sentry
Alerts us automatically when something breaks on the site, so we can fix it — this can include technical details about what you were doing at the time, but not your messages or file contents.
We do not sell your personal information to anyone, for any reason.
How long we keep your information
Active students and leads
For as long as you're enrolled or in contact with us, and for a reasonable period afterwards in case you return or for our own record-keeping and legal obligations (for example, financial records).
You can ask us to delete your data
Contact us and we'll delete or anonymise your personal information, except where we're required to keep it (for example, completed payment records for tax purposes).
Your rights
Under UK data protection law, you have the right to:
Access
Ask us what personal information we hold about you.
Correction
Ask us to correct information that's inaccurate or incomplete.
Deletion
Ask us to delete your personal information, subject to the exceptions above.
Object or restrict
Object to or ask us to limit certain uses of your data, including analytics.
To exercise any of these rights, contact us using the details below. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Contact us
If you have any questions about this policy or how we handle your information, please get in touch.