Legal
Privacy Policy
At a glance
- We only collect what we need to answer your enquiry and provide tuition.
- We never sell your data, and we don't share it except as set out below.
- Information about a child is given by, and used with, the parent or guardian.
- You can ask to see, correct or delete your data at any time.
- Concerns? Use our Complaints process, or contact the Information Commissioner's Office (ICO).
This policy explains how ThatTutor (“we”, “us”, “our”) — the tutoring practice of Cathleen Sagisi — collects and uses personal data, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the “controller” of the personal data described here.
1. Who we are
ThatTutor provides one-to-one private tuition online across the UK and in person near Upminster. You can contact us about privacy at help@thattutor.uk.
We are registered with the Information Commissioner's Office (ICO).
2. The information we collect
| Type | Examples |
|---|---|
| About you (the parent/guardian or adult student) | Name, phone number, email address, and anything you write in your message. |
| About the student | First name, year group, the subject or support sought, any access or additional-needs information you share, and progress notes once tuition begins. |
| Lesson and account records | Bookings, attendance, invoices and payment status, and recordings of online lessons. Card and bank details are handled by our payment provider, not stored by us. |
| Technical | Basic, non-identifying information needed to load the website (for example fonts and scripts). The site does not use advertising or tracking cookies. |
3. How and why we use it, and our lawful basis
- To respond to your enquiry — so we can reply and arrange a consultation. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding.
- To provide tuition — scheduling lessons, teaching, keeping progress notes and invoicing. Lawful basis: performance of our contract with you.
- Safeguarding — acting on a genuine concern for a child's welfare. Lawful basis: legal obligation and protecting someone's vital interests.
- Accounts and tax — keeping financial records. Lawful basis: legal obligation.
- Service messages — practical messages about your lessons. We only send marketing if you have asked us to, and you can opt out at any time.
- Recovering unpaid fees — pursuing payment you owe us, including through a debt-collection agency or the courts. Lawful basis: our legitimate interests in recovering money owed.
4. Children's information
Information about a child is provided by their parent or guardian, who accepts our terms on their behalf. We collect the minimum needed to teach and support the child, treat it with particular care, and keep communication about a child with the parent or guardian. Online lessons are recorded by default to safeguard the child and tutor; you may opt out in writing. Recordings are stored securely and deleted on request — see our Safeguarding Policy and Terms & Conditions.
5. Who we share it with
We do not sell your information. We share it only where it is needed to run the service or to protect our legitimate interests:
- Service providers — for example email, scheduling, lesson-delivery and secure payment providers, who act on our instructions and only as needed.
- Debt recovery — if an account is left unpaid after we have asked you to settle it, we may pass the details reasonably needed to recover the debt to a debt-collection agency, our legal advisers and the courts. This is a disclosure to recover money you owe us, on the basis of our legitimate interests; it is not a sale of your data.
- Legal and safeguarding — where the law requires it, or to protect a child's safety.
We only ever share the minimum necessary. We do not routinely transfer your data outside the UK; where a provider does, we rely on appropriate safeguards. Your information is never sold for anyone else's marketing or commercial use.
6. How long we keep it
- Enquiries that don't lead to lessons: kept for up to 12 months, then deleted.
- Client and lesson records: kept while you are a client and afterwards as needed.
- Lesson recordings: kept only for a reasonable period and deleted on request (see Terms & Conditions).
- Financial records: kept for up to 6 years to meet tax and accounting rules.
7. How we protect it
We use sensible security measures — access controls, reputable providers and limiting who can see your data — to keep information safe. No system is perfectly secure, but we take reasonable steps to protect it and to act quickly if anything goes wrong.
8. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data, or restrict or object to how we use it; and
- provide your data in a portable format, where that right applies.
To exercise any of these, email help@thattutor.uk. We'll respond within one month. There's usually no charge.
9. Complaints
Please raise any concern with us first — our Complaints Policy explains how. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The version and date at the top show the current edition.
See also our Terms & Conditions, Complaints Policy and Safeguarding Policy.