Privacy Policy – Ashton Private Tutoring
1. Introduction
Ashton Private Tutoring is the Data Controller for the personal information you provide. This policy explains what data we collect, why we collect it, how it is used, how long it is kept, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We only collect information that is necessary to deliver our tutoring services safely and effectively.
2. Personal data we collect
We collect only basic personal information required to provide tutoring services. This may include:
• Name
• Address
• Email address
• Telephone number
• Emergency contact details
• Child’s name and age
• Any relevant health or learning information voluntarily provided by the parent/guardian (e.g., allergies, learning needs)
We do not collect special category data unless you choose to provide it for safeguarding or health and safety purposes.
3. Lawful basis for processing
We process your personal data under the following lawful bases:
• Contract – to deliver tutoring services you have requested.
• Legitimate interests – to communicate essential updates, scheduling information, or service-related notices.
• Legal obligation – to meet UK tax and accounting requirements.
• Vital interests – where health or safety information is required to protect a child in our care.
• Consent – for optional communications such as non-essential updates. You may withdraw consent at any time.
4. Why we need your data
We collect and use your data to:
• Provide tutoring services to you or your child
• Communicate lesson updates, scheduling changes, and service information
• Ensure the health, safety, and welfare of your child during lessons
• Maintain accurate financial and administrative records
• Comply with legal and tax obligations
We do not collect any information that is not necessary for these purposes.
5. How your data is stored and protected
All personal data is processed by Ashton Private Tutoring and stored securely using password‑protected systems and encrypted devices. Access is restricted to authorised personnel only.
No third parties have access to your data unless required by law (e.g., HMRC, safeguarding authorities).
We do not sell, share, or transfer your data to any external organisations for marketing or commercial purposes.
6. How long we keep your data
• Financial and contact information required for tax and accounting purposes is retained for 6 years, as required by UK law.
• General details and lesson information are retained for 1 year after your last lesson, in case you wish to resume services.
• Safeguarding or health and safety information may be retained longer where legally required.
After these periods, your data is securely deleted or destroyed.
7. Your rights
Under UK GDPR, you have the right to:
• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (where legally permissible)
• Request restriction of processing
• Object to certain types of processing
• Request data portability
• Withdraw consent at any time (for consent‑based processing)
To exercise any of these rights, contact:
rachel@ashtonprivatetutoring.co.uk
8. Complaints
If you have concerns about how your data has been handled, please contact us first so we can investigate.
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO):
9. Updates to this policy
This policy may be updated periodically to reflect changes in legislation or service practices. The most recent version will always be available upon request.