1. Introduction
This Privacy Policy explains how Georgina [Last Name], trading as GeorgieMTutoring (“I”, “me”, or “my”), collects, uses, stores, and protects the personal information of clients, students, and website visitors.
GeorgieMTutoring is a sole trader providing individual A-Level Psychology and GCSE Maths tuition, masterclasses, and related educational services, operating via www.georgiemtutoring.co.uk.
I am registered with the Information Commissioner’s Office (ICO) and am committed to handling your personal data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how your data is used, please contact me at georgie@georgiemtutoring.co.uk.
2. Who This Policy Applies To
This policy applies to:
Parents, guardians, and clients who engage GeorgieMTutoring for tuition services
Students receiving tuition or attending masterclasses
Visitors to www.georgiemtutoring.co.uk
Individuals who subscribe to the GeorgieMTutoring newsletter or enquire about services
Where a student is under the age of 18, their parent or guardian is responsible for engaging with these services. I do not knowingly accept direct registration or data submission from minors without parental consent.
3. Legal Basis for Processing Personal Data
Under UK GDPR, I process personal data on one or more of the following lawful bases:
Contractual necessity — to provide tuition services and fulfil obligations agreed at the point of booking.
Legitimate interests — to operate, manage, and improve my services in a responsible and secure way.
Legal obligation — to comply with safeguarding, financial, or other statutory requirements.
Consent — where you have actively opted in, for example to receive the newsletter or marketing communications.
Where I rely on consent as my lawful basis, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
4. What Personal Data I Collect
I collect and process the following categories of personal data:
Client and Parent/Guardian Information
Full name
Email address
Phone number
Billing address
Payment information (processed securely via Stripe — I do not store card details directly)
Student Information
Full name
Year group and school (where provided)
Exam board and subject
Academic performance data, mock results, and progress notes
Lesson records and tutor feedback
Special Educational Needs (SEN) or additional needs information, where shared by the parent/guardian to support effective tuition
Website Visitor Information
IP address and device identifiers
Browser type and version
Pages visited and time spent on site
Cookie data and analytics information (see Section 9)
Newsletter and Enquiry Data
Name and email address of subscribers and enquirers
Preferences and engagement data (e.g. email open rates via Brevo)
Special Category Data
Where a parent or guardian shares information about a student’s SEN, learning difficulties, mental health, or medical needs, this constitutes special category data under UK GDPR. I process this data solely to provide appropriate and effective educational support. It is held securely and not shared with any third party without explicit consent, except where required by law or safeguarding obligations.
5. How I Collect Your Data
I collect personal data in the following ways:
Directly from you when you register, complete a booking, submit an enquiry, or contact me by email
Through the TutorBird management platform when you create an account or book sessions
Via Stripe when payment is processed
Via Brevo when you subscribe to the newsletter or receive email communications
Automatically through cookies and analytics tools when you visit www.georgiemtutoring.co.uk
During tuition sessions, including session recordings made for safeguarding purposes
6. How I Use Your Personal Data
I use the personal data I collect to:
Provide, manage, and deliver tuition services and masterclasses
Process bookings, invoices, and payments
Communicate with you regarding lessons, cancellations, and session notes
Provide written feedback and progress updates
Meet my safeguarding and child protection obligations
Comply with legal, regulatory, and financial record-keeping requirements
Send the GeorgieMTutoring newsletter and service updates to subscribers (with consent)
Improve and evaluate my services using anonymised analytics data
I do not sell, rent, or trade your personal data to any third party for commercial purposes.
7. Third-Party Platforms and Data Processors
In order to deliver my services, I use the following trusted third-party platforms. Each acts as a data processor on my behalf and is contractually required to handle your data in compliance with UK GDPR:
TutorBird — lesson scheduling, invoicing, student portal, and account management. Privacy Policy: tutorbird.com
Stripe — secure payment processing. Card details are handled directly by Stripe and are not stored by me. Privacy Policy: stripe.com/gb/privacy
Google Workspace (Drive and Meet) — secure storage of session notes, recordings, and student data; delivery of online lessons. Privacy Policy: policies.google.com
Brevo — email newsletter and communications platform. Privacy Policy: brevo.com/legal/privacypolicy
I do not share your personal data with any other third party without your explicit consent, unless required to do so by law or for safeguarding purposes.
8. Session Recordings
All individual tuition sessions are recorded via Google Meet for safeguarding purposes. Masterclasses may also be recorded; this will be clearly stated on the individual booking page.
Recordings are:
Stored securely on Google Drive, accessible only to me
Retained for a period of three months from the date of the session
Deleted securely after the retention period has expired
Not shared with any third party, except where required by safeguarding or legal obligations
By engaging with my tuition services or attending a masterclass, you consent to sessions being recorded on this basis. This is communicated in my Terms and Conditions at the point of booking.
9. Cookies and Analytics
My website (www.georgiemtutoring.co.uk) uses cookies and analytics tools to understand how visitors use the site and to improve its functionality.
Cookies I use may include:
Essential cookies — required for the website to function correctly
Analytics cookies — to track visitor behaviour and usage patterns (e.g. via Google Analytics)
Preference cookies — to remember your settings and improve your experience
When you first visit my website, you will be asked to consent to non-essential cookies. You can withdraw or update your cookie preferences at any time via the cookie settings on the website. You may also disable cookies through your browser settings, though this may affect some website functionality.
For more information on how Google Analytics handles data, please visit: policies.google.com/privacy.
10. Data Retention
I retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. My retention periods are as follows:
Client and student records — retained for the duration of tuition and for up to 3 years thereafter, in line with financial and contractual record-keeping requirements
Payment records — retained for 7 years in accordance with HMRC requirements
Session recordings — retained for 3 months from the date of the session, then securely deleted
Newsletter subscriber data — retained until you unsubscribe or withdraw consent
Enquiry data — retained for up to 12 months if no tutoring relationship is established
I regularly review the data I hold and securely delete or anonymise information that is no longer required.
11. Your Data Protection Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access — to request a copy of the personal data I hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data, subject to legal obligations
Right to restrict processing — to ask me to limit how I use your data in certain circumstances
Right to object — to object to processing based on legitimate interests, including direct marketing
Right to data portability — to receive your data in a structured, commonly used format
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact me at georgie@georgiemtutoring.co.uk. I will respond within one calendar month of receiving your request.
12. Data Security
I take the security of your personal data seriously and implement the following measures:
All student and client data is stored on a secure, password-protected section of Google Drive accessible only to me
All communications containing personal data are sent via encrypted channels
Payment data is handled exclusively by Stripe, which is PCI-DSS compliant
Third-party platforms used (TutorBird, Brevo, Google Workspace) are required to maintain appropriate security standards
Session recordings are stored securely and deleted after the 3-month retention period
While I take all reasonable precautions, no data transmission or storage system is entirely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, I will notify you and the ICO in accordance with my legal obligations.
13. Children’s Data
Where a student is under the age of 18, all data is collected with the knowledge and consent of their parent or guardian. I do not knowingly accept personal data directly from minors without parental involvement.
Special category data relating to a student’s SEN, additional needs, or medical conditions is collected only where shared voluntarily by the parent or guardian to support effective tuition, and is processed with particular care and confidentiality.
14. Safeguarding and Mandatory Disclosure
GeorgieMTutoring operates in accordance with its Safeguarding Policy. Where I have a legal or professional obligation to share information with relevant authorities (for example, in relation to a safeguarding concern), I may do so without your consent. This overrides the usual confidentiality provisions in this policy.
This duty will always take precedence over data protection considerations where the welfare or safety of a child or vulnerable person is at risk.
15. Newsletter and Marketing Communications
I send a regular newsletter via Brevo to current students and prospective clients who have opted in to receive communications from GeorgieMTutoring.
You will only receive marketing or newsletter communications from me if:
You have actively subscribed or opted in, or
You are a current or recent client and have not opted out
You may unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting me directly at georgie@georgiemtutoring.co.uk. Unsubscribing will not affect the delivery of service-related communications (e.g. lesson confirmations or invoices).
16. Third-Party Links
My website and resources may contain links to external websites, platforms, or tools (for example, Simply Psychology or YouTube). This Privacy Policy does not apply to those third-party sites. I recommend reviewing their privacy policies separately before providing any personal information.
17. Changes to This Privacy Policy
I review this Privacy Policy annually and whenever there are significant changes to how I operate or to applicable law. Any material changes will be communicated to existing clients via email. The most up-to-date version will always be available at www.georgiemtutoring.co.uk.
Last updated: June 2026 | Next review due: June 2027
18. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or the way I handle your personal data, please contact me:
Website: www.georgiemtutoring.co.uk
