Privacy & Cookies Policy
Last updated: 15 August 2026
NB Private Tuition Ltd respects your privacy and is committed to handling personal information responsibly.
This policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you.
It applies to personal information collected through nbtuition.co.uk and in connection with our tutoring and educational services.
1. Who we are
The controller responsible for the personal information described in this policy is:
NB Private Tuition Ltd
Company number: 16977031
Registered in England and Wales
Registered office:
147a High Street
Waltham Cross
Hertfordshire
EN8 7AP
Email: nick@nbtuition.co.uk
In this policy, “we”, “us” and “our” refer to NB Private Tuition Ltd.
2. Whose information we process
We may process information about:
prospective Clients;
current and former Clients;
parents and guardians;
current and prospective Students;
adult Students;
people who contact us with an enquiry;
people who subscribe to our mailing list;
website visitors; and
other people who communicate with us in connection with our Services.
Many of our Students are children. We therefore process children's personal information as a normal and necessary part of providing private tuition.
Where a Student is a child, we will normally communicate about contractual and administrative matters with their parent or guardian.
3. Personal information we may collect
The information we collect depends on how you interact with us.
Contact and identity information
This may include:
name;
email address;
telephone number;
parent or guardian details;
Student details; and
other contact information you provide.
Educational information
Where relevant to tuition, we may hold information including:
the Student's age or school year;
current or previous school;
subjects studied;
proposed entrance examinations or applications;
target schools or universities;
academic strengths and weaknesses;
assessment results;
practice-paper scores;
homework and written work;
tutor notes;
lesson history;
educational goals; and
feedback about progress.
Additional learning or accessibility information
A Client or Student may choose to tell us about educational, health, disability, SEN or accessibility information where this is relevant to the provision of tuition.
This might include information relating to dyslexia, dyscalculia, dyspraxia, autism, ADHD or other circumstances affecting learning.
Some of this information may constitute special category personal data under data protection law.
We do not require Clients to disclose information that is not reasonably relevant to the Services.
Where special category data is processed, we will ensure that an appropriate legal condition for doing so applies. Depending on the circumstances, this may include obtaining explicit consent from the person concerned or, where legally appropriate, their parent or guardian.
Booking and financial information
We may process:
lessons booked;
dates and times of tuition;
fees charged;
invoices;
payments received;
cancellations;
outstanding balances; and
information reasonably necessary for our accounting and tax records.
Where payment is processed through a third-party payment provider, that provider may process payment-card or banking information directly. We do not necessarily receive or retain full payment-card details.
Communications
We may retain relevant communications with Clients, prospective Clients and Students, including:
emails;
messages;
enquiry forms;
feedback;
complaints; and
other correspondence relating to our Services.
Website and technical information
When you use our website, certain technical information may be collected automatically, depending on your browser settings and cookie choices.
This may include:
IP address;
browser or device information;
pages visited;
referring pages;
approximate location derived from technical information;
dates and times of visits; and
information collected through cookies or similar technologies.
More information about cookies appears below.
4. How we obtain personal information
We obtain most personal information directly from you.
For example, you may provide information when you:
contact us;
complete a website form;
book tuition;
correspond by email or telephone;
send us Student work;
provide information about a Student's educational needs;
pay an invoice; or
join our mailing list.
Where the Client is a parent or guardian, they will often provide personal information about the Student.
Students themselves may also provide information during lessons or through work they submit.
We may occasionally receive relevant information from another source, for example:
a tutoring agency through which an arrangement has been made;
another person authorised by the Client;
a school or educational professional where appropriate permission or another lawful basis exists; or
a publicly available source where this is reasonably necessary and lawful.
5. Why we use personal information
We only use personal information where we have a lawful basis for doing so.
Our principal purposes and lawful bases are described below.
Responding to enquiries
We use contact and enquiry information to respond to prospective Clients and discuss possible tuition.
Our lawful basis will normally be taking steps at your request before entering into a contract or, where appropriate, our legitimate interests in responding to genuine enquiries about our Services.
Providing tuition and educational Services
We use information about Clients and Students to:
arrange lessons;
prepare appropriate teaching;
understand a Student's educational needs;
provide tuition;
mark work;
assess progress;
communicate feedback;
maintain lesson records; and
otherwise administer the tutoring relationship.
Where the information relates directly to the contracting Client, this processing will often be necessary for performance of our contract with them.
Where the information relates to a child or other Student who is not personally a party to the contract, we may rely on our legitimate interests in providing and administering the educational Services requested for that Student.
We consider the nature of children's data carefully when relying on legitimate interests and do not use it in ways that would unjustifiably override the child's rights and interests.
Administration, invoices and accounts
We use Client and transaction information to issue invoices, record payments, maintain accounting records and manage our business.
Depending on the information concerned, our lawful basis may be performance of a contract, compliance with a legal obligation or our legitimate interests in properly administering our business.
Protecting Students and others
We may use or disclose information where reasonably necessary to respond to a safeguarding concern, serious risk of harm, suspected criminal conduct or another significant safety issue.
The lawful basis will depend on the circumstances and may include legal obligation, legitimate interests, vital interests or another basis permitted by law.
Establishing and protecting legal rights
We may retain or use relevant information where reasonably necessary to:
deal with complaints;
resolve disputes;
recover sums owed;
establish or defend legal claims;
prevent fraud or misuse of our Services; or
obtain professional advice.
We generally rely on our legitimate interests or legal obligations for these purposes.
Mailing list and marketing
If you subscribe to our mailing list, we may use your email address to send educational resources, exercises, news and information about our Services.
Where required by law, we rely on your consent to send these messages.
In circumstances where the law permits us to contact an existing customer about similar Services without obtaining fresh consent, we may rely on the applicable electronic-marketing rules.
Every marketing email will provide a way to opt out.
You can also ask us to stop marketing to you at any time by contacting nick@nbtuition.co.uk.
Website operation and analytics
We use information necessary to operate, secure and maintain the website.
Where non-essential cookies or similar technologies require consent, we will use them only in accordance with the choices made through our cookie-consent mechanism.
6. Children's personal information
Children's personal information requires particular care.
We collect Student information because it is necessary to provide appropriate educational Services, not for unrelated profiling or advertising.
Where possible, contractual and payment information concerning a child will be obtained from and managed through a parent or guardian.
We may nevertheless communicate directly with Students where appropriate for tuition, for example during lessons or when receiving and returning schoolwork.
We do not intentionally use children's personal information for behavioural advertising.
We do not ask children to subscribe independently to direct marketing.
A child's data-protection rights belong to the child. Where a parent or guardian makes a request concerning a child's information, we will consider the child's age, understanding, interests and applicable law when responding.
7. Special category information
Information concerning health, disability or certain educational needs can amount to special category personal data.
We aim to collect such information only where it is genuinely useful for providing the requested Services or making appropriate adjustments.
Access to this information is limited to those who reasonably need it.
Where explicit consent is the legal condition on which we rely, that consent may be withdrawn.
Withdrawal of consent will not make previous lawful processing unlawful, although it may affect our ability to provide a particular adjustment or aspect of the Services where the information is genuinely necessary.
8. Who we share information with
We do not sell personal information to advertisers.
We may share limited personal information with trusted organisations that help us operate the business or provide the Services.
These may include:
Website and technology providers
Our website is hosted using Squarespace.
Technology providers may process information relating to website hosting, forms, security, communications and other website functions on our behalf.
Video-conferencing providers
Online tuition may be provided using services such as Zoom.
Where these services are used, relevant technical and account information may be processed by the platform provider.
Email, calendar, storage and communications providers
We may use reputable third-party services to manage business email, scheduling, file storage, backups and communications.
Payment and banking providers
Banks, payment processors or accounting systems may process information required to receive and reconcile payments.
Professional advisers
Where reasonably necessary, information may be shared with accountants, insurers, legal advisers or other professional advisers.
Tutoring agencies or educational organisations
Where the Client has approached us through an agency or where another organisation is legitimately involved in the tutoring arrangement, relevant information may be shared with that organisation where necessary and lawful.
Authorities and safeguarding bodies
We may disclose information where required by law or where reasonably necessary in connection with a safeguarding concern, legal proceedings, crime prevention or another serious risk.
We require organisations processing personal information on our behalf to handle it appropriately and in accordance with applicable data-protection requirements.
9. International transfers
Some technology providers used in connection with our website, online tuition, communications or cloud services may process personal information outside the United Kingdom or allow it to be accessed from another country.
Where the UK GDPR rules on restricted international transfers apply, we take steps to ensure that an appropriate transfer mechanism is available.
Depending on the destination and provider, this may include:
UK adequacy regulations;
an approved contractual safeguard;
the UK International Data Transfer Agreement;
an appropriate UK addendum to recognised contractual clauses; or
another transfer mechanism permitted by law.
You may contact us if you would like further information about safeguards applying to a particular transfer.
10. How long we keep personal information
We do not intend to keep personal information indefinitely.
Different types of information need to be retained for different periods.
As a general guide:
Unsuccessful or discontinued enquiries
Routine enquiries that do not lead to tuition will normally be deleted or anonymised when they are no longer reasonably required, generally within 12 months, unless there is a reason to keep them longer.
Active Clients and Students
Information necessary to provide tuition will normally be retained for the duration of the tutoring relationship.
Educational records after tuition ends
Routine lesson notes, Student work and detailed educational information that is no longer required will normally be reviewed and deleted or anonymised within three years after the tutoring relationship ends, unless there is a reason to retain particular information for longer.
We may retain a smaller record of the tutoring relationship for longer where reasonably necessary for business administration, complaints or legal claims.
Financial and transaction records
Invoices, payment records and other accounting information will be retained for the period required by applicable company, accounting and tax law, which may require records to be kept for several years after the relevant transaction or financial period.
Complaints, disputes and safeguarding matters
Information relevant to a serious complaint, safeguarding concern, dispute or potential legal claim may be retained for longer where this is necessary and proportionate.
The appropriate retention period will depend on the nature of the matter and any applicable legal or safeguarding requirements.
Marketing information
Marketing contact details are retained while you remain subscribed or while another lawful marketing basis applies.
If you unsubscribe, we may retain limited information on a suppression list so that we can respect your request not to receive further marketing.
We may delete or anonymise information sooner where it is no longer needed.
11. Security
We take reasonable organisational and technical measures to protect personal information against accidental loss, unauthorised access, disclosure, alteration or misuse.
Measures may include password-protected systems, restricted access, reputable technology providers and appropriate account security.
No internet or electronic-storage system can be guaranteed to be completely secure, but we seek to use measures appropriate to the nature of the information we hold.
12. Your rights
Depending on the circumstances, data-protection law may give you rights including the right to:
request access to personal information held about you;
ask for inaccurate information to be corrected;
ask for personal information to be erased in certain circumstances;
ask us to restrict processing in certain circumstances;
object to certain processing;
receive certain information in a portable format;
withdraw consent where processing is based on consent; and
complain about the way your information is being used.
These rights are not absolute and the precise rights available depend on the purpose and lawful basis for the processing.
To exercise a right, contact:
We may need to verify your identity before responding to a request.
Your right to object
You have the right to object to our use of your personal information where we rely on legitimate interests, although in some circumstances we may have compelling lawful grounds to continue processing it.
You have an absolute right to object to your personal information being used for direct marketing. If you ask us to stop using your information for direct marketing, we will do so.
13. Complaints about personal information
If you have a concern about how we use personal information, please contact us first at:
We will consider the concern and make reasonable efforts to resolve it.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data-protection regulator.
14. Cookies and similar technologies
Cookies are small files or pieces of information stored or accessed on a user's device.
Our website may use cookies and similar technologies to operate properly and, subject to your choices, to understand how visitors use the website.
Strictly necessary cookies
Some cookies are necessary for functions such as:
website security;
maintaining essential website functions;
remembering privacy or cookie preferences; and
delivering a service specifically requested by the user.
Where a cookie is legally exempt from the consent requirement because it is strictly necessary, it may be used without prior consent.
Analytics and performance cookies
Analytics technologies can help us understand matters such as which pages are visited, how visitors navigate the website and how the site performs.
Where consent is required, analytics or performance cookies will not be activated until the user has consented through the cookie controls.
Functional or embedded-content technologies
Certain website features or embedded third-party services may use cookies or similar technologies.
Where consent is legally required for those technologies, they will be subject to the user's cookie choices.
15. Cookie consent
Where consent is required for a cookie or similar technology, we do not treat simply visiting or continuing to use the website as consent.
Visitors should be given a genuine choice through the website's cookie controls.
You may withdraw or alter your consent to non-essential cookies using the available cookie settings.
Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Blocking certain optional technologies may affect some non-essential website functionality.
16. Mailing-list sign-up
Signing up to our mailing list is voluntary.
Joining the mailing list is not a condition of receiving tuition.
Where we rely on consent, subscribing to the mailing list constitutes consent only to the marketing described when you subscribe; it does not constitute general consent to unrelated uses of personal information.
You can unsubscribe at any time using the unsubscribe facility in a marketing email or by contacting us.
17. Third-party links
Our website may contain links to websites or services operated by third parties.
Those organisations are responsible for their own processing of personal information.
We recommend reviewing their privacy information before providing personal information to them.
18. Changes to this policy
We may update this policy where our Services, technology or legal obligations change.
The latest version will be published on our website and the date at the top of the policy will be updated.
Where a change materially affects the way we use existing personal information, we will take additional steps to inform affected people where appropriate.
19. Contact us
Questions, requests or concerns about this policy should be sent to:
NB Private Tuition Ltd
Company number 16977031
147a High Street
Waltham Cross
Hertfordshire
EN8 7AP
Email: nick@nbtuition.co.uk