Privacy Policy | Entrance Exam Tutors

1. Who we are

Entrance Exam Tutors is a UK-based private tutoring service specialising in 7+, 11+, 13+, and 16+ entrance exam preparation for independent schools. We are the data controller for the personal information described in this policy. You can contact us at entranceexamtutors@gmail.com.

2. What data we collect

We collect the following categories of personal data:

Parent/guardian information: name, email address, phone number.
Child information: first name, current school year, target school(s), subject areas, and exam timeline.
Account data: email address and Google OAuth identity used to sign in to our member portal.
Service data: assessment scores, tutor notes, session attendance, and package type recorded in our portal.
Communications: content of emails or enquiries you send to us.

3. How we use your data

To deliver tutoring services and manage your child's programme.
To provide you with access to our member portal and your child's progress reports.
To communicate with you about sessions, assessments, and your child's progress.
To send service-related updates (not marketing without your consent).
To comply with our legal and safeguarding obligations.

4. Legal basis for processing

We process your data on the basis of contract (to deliver the services you have engaged us to provide), legitimate interests (to manage our business and communicate with you), and legal obligation (safeguarding and compliance). Where we rely on consent, you may withdraw it at any time.

5. How we store your data

Personal data is stored securely using Supabase, a cloud database provider with data centres in the European Economic Area. Access is restricted to authorised staff only. We use row-level security to ensure parents can only access their own child's data.

6. Data retention

We retain personal data for as long as we have an active relationship with you, and for a reasonable period thereafter to comply with any legal obligations. You may request deletion of your data at any time (see Your Rights below).

7. Third parties

We do not sell your personal data. We share data only with service providers who help us operate (Supabase for data storage; Google for authentication). All third-party providers are contractually required to handle your data securely and in accordance with GDPR.

8. Your rights (GDPR)

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Correct any inaccurate data.
Delete your data (the “right to be forgotten”).
Restrict or object to certain types of processing.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at entranceexamtutors@gmail.com. We will respond within 30 days.

9. Complaints

If you have concerns about how we handle your data, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to active clients. The current version is always available on this page.