Skip to content
RGTUTORS

Privacy

How personal information should be handled.

This is a plain-English launch draft based on the current tutoring and practice flows. It must be completed with RGTutors' genuine legal identity, lawful bases, processors and retention schedule before production use.

The data-controller identity, postal address and public privacy contact have not yet been supplied. These are launch blockers for the final notice.

Information the service may use

  • Parent or carer contact details and consultation enquiries.
  • Student name, year group, learning needs and account details.
  • Tutor profile, contact and assignment information.
  • Lesson arrangements, relevant notes and operational communications.
  • Practice answers, flags, topic access and progress records.
  • Technical and security information needed to keep accounts working safely.

Why information may be used

Information should be limited to arranging and delivering tutoring, supporting learning, communicating with families, administering accounts, protecting users and meeting applicable legal obligations.

The final notice must identify the specific lawful basis for each purpose. This draft does not invent consent, contract or legitimate-interest wording without that review.

Children’s information

Student information deserves particular care. RGTutors should collect only what is relevant to tutoring, explain the use in age-appropriate language and keep parents or carers appropriately informed.

Sharing and service providers

Personal information should be shared only with people and suppliers who need it to deliver or operate the service. The final notice must name or categorise the real hosting, email, payment, lesson-platform and analytics providers once those choices are confirmed.

Retention and security

RGTutors needs a documented retention schedule covering enquiries, accounts, lesson records, safeguarding material and financial records. Data should not be kept indefinitely merely because the software can store it.

Your rights and questions

The final notice should explain applicable UK data-protection rights and how to exercise them, including how to make a complaint. A verified privacy contact and controller address must be added before launch.