1. Important Information and Who We Are

This Privacy Policy explains how DO Tuition (“we”, “us”, “our”) collects, uses and protects your personal data when you:

• visit our website at www.dotuition.co.uk (“Our Site”);
• create an account as a Student, Sponsor or Tutor; and
• use our online booking and tutoring services (“Services”).

We are the “data controller” for personal data processed in connection with operating Our Site and providing the DO Tuition platform.

Legal entity: DO Tuition, 25 Summer Ln, Birmingham, B76 9AU.

If you have questions about this Privacy Policy, please contact us at:
Email: support@dotuition.co.uk
Website: www.dotuition.co.uk

You should read this Privacy Policy with our Terms & Conditions.

2. The Data We Collect About You

The personal data we collect depends on your role on the platform.

2.1 Identity & Contact Data

• Name (Student, Sponsor, Tutor)
• Email address
• Contact phone number (if provided)
• Tutor profile information (subjects taught, biography, etc.)

2.2 Account & Booking Data

• Login email and hashed password
• Role (Student, Sponsor, Tutor)
• Lesson bookings, timings, changes and status
• Lesson pack usage and lesson credits
• Lesson links provided by tutors (whiteboard or video)

2.3 Payment & Transaction Data

We do not store full card numbers or CVV codes.

• Payment method type
• Transaction IDs, authorisation references
• Captured/authorised amounts and timestamps
• Lesson credits issued and applied

2.4 Communication Data

• Emails, support messages or complaints
• System notifications (reminders, confirmations, updates)

2.5 Technical & Usage Data

• IP address, browser type, device type
• Pages visited and interaction information
• Error logs and security diagnostics

2.6 Optional Special Category Data

You may choose to provide information about learning needs or relevant educational health considerations. Where provided, we will rely on explicit consent.

3. How We Collect Your Data

• Directly from you (accounts, bookings, messages)
• Automatically (cookies, logs, analytics)
• From Tutors or Sponsors (lesson details, updates)
• From third parties (payment providers, email tools)

4. How We Use Your Data & Legal Bases

We will only use your personal data where the law allows.

4.1 Providing and Managing Lessons

Legal basis: Performance of contract / Legitimate interests

• Creating and managing accounts
• Enabling bookings, cancellations and rescheduling
• Sharing lesson information between Students/Sponsors and Tutors

4.2 Payments & Lesson Credits

Legal basis: Performance of contract / Legitimate interests

4.3 Communications

Legal basis: Contract / Legitimate interests / Consent (for marketing)

4.4 Safeguarding, Fraud & Abuse Prevention

Legal basis: Legal obligation / Legitimate interests

• Verifying the identity and suitability of Tutors (including DBS status checks) to maintain a safe learning environment.
• Monitoring platform activity to detect, prevent, and respond to fraud, abuse, or breaches of our Terms & Conditions.
• Investigating and recording safeguarding concerns or complaints raised by users.

4.5 Improving Our Platform

Legal basis: Legitimate interests

• Analysing how users interact with Our Site to troubleshoot bugs, enhance security, and improve website functionality.
• Using aggregated or anonymised data for statistical analysis and system testing.
• Gathering user feedback to develop and refine our tutoring services.

4.6 Special Category Data

Legal basis: Explicit consent

5. Sharing Your Personal Data & Third-Party Integrations

We do not sell personal data. We only share data with the following categories of third parties when necessary:

• Tutors and Students/Sponsors (as needed for lessons)
• Stripe and PayPal payment services
• Hosting, email and IT service providers
• Legal advisors and authorities (where required)

Google Calendar API Integration: DO Tuition uses the Google Calendar API strictly to generate Google Meet video links for scheduled tutoring sessions. No data obtained from this API is shared with, sold to, or repurposed for any third parties.

6. International Transfers

Some service providers may process data outside the UK/EEA. Where this occurs, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

7. Data Security

• Secure hosting and HTTPS encryption
• Hashed passwords
• Restricted data access
• Monitoring for suspicious activity

You are responsible for keeping your login details confidential.

8. Data Retention and Your Right to Erasure

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for.

Under the UK GDPR, you have the right to request the deletion of your personal data (often referred to as the "Right to be Forgotten"). You can initiate this process by closing your account in your Account Settings or by contacting us directly. Upon closing your account, you will be removed from all marketing communications and your active profile will be deactivated.

However, please note that this right is not absolute. As an educational service provider, DO Tuition is subject to stringent legal, regulatory, and safeguarding obligations. Therefore, we must retain certain administrative, transactional, and attendance records even after an account closure request. This retained data is strictly limited to what is necessary for:

• Safeguarding and Child Protection: Maintaining a secure and historical ledger of event attendance and tutoring sessions.
• Legal and Financial Compliance: Fulfilling our statutory reporting and accounting obligations to HMRC (which mandates the retention of financial and transactional records for a period of up to 6 years).
• Dispute Resolution: Establishing, exercising, or defending against legal claims (typically retained for up to 6 years).

Any data retained for these statutory purposes is held securely, is not used for marketing, and is completely restricted from active processing.

9. Your Legal Rights

You have rights under UK data protection law, including:

• Access, correction, deletion
• Restriction, portability, objection
• Withdrawal of consent

Contact: support@dotuition.co.uk
You may also contact the ICO: ico.org.uk

10. Cookies & Similar Technologies

Our Site may use cookies to function correctly, remember preferences and improve performance. Where required, we will request consent.

11. Children & Under-18 Students

Sponsors must create and manage accounts for students under 18 and are responsible for their use of the platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy. Updates will appear on this page, and significant changes may be notified via email or Our Site.

13. Contact

For questions or data requests:
Email: support@dotuition.co.uk
Website: www.dotuition.co.uk