Legal
Privacy Policy
How tutreo collects, uses and protects your personal information. Last updated 19 September 2026.
Who we are
tutreo provides private tuition in Aylesbury, Buckinghamshire and online. For the purposes of UK data protection law, tutreo is the data controller for the personal information described in this policy. You can contact us at tutreo.info@gmail.com or on .
What we collect
When you submit the enquiry form we collect your name, email address, an optional telephone number, the student’s year group, the subjects you are interested in, your preferred lesson format, the message you write and your confirmation that you consent to being contacted.
We also record the date and time of the submission and a one-way cryptographic hash of your IP address. We do not store your IP address itself. The hash exists only so that automated abuse of the form can be rate-limited and investigated; it cannot be reversed to recover the original address.
If you go on to book tuition, we will hold the information needed to deliver and invoice for it, which may include the student’s name, school, exam board, target grades and records of progress.
Why we use it, and on what legal basis
- To reply to your enquiry. Our lawful basis is your consent, given by ticking the consent box on the form. You may withdraw it at any time.
- To deliver tuition you have booked. Our lawful basis is performance of a contract with you.
- To keep financial records. Our lawful basis is compliance with a legal obligation.
- To protect the website from spam and abuse. Our lawful basis is our legitimate interest in keeping the service available and usable.
We do not use your information for marketing, we do not build advertising profiles, and we never sell personal information to anyone.
Children’s information
Most students taught here are under 18. Enquiries about a student under 18 must be made by a parent or carer, and all correspondence, scheduling and invoicing goes through that adult. We do not knowingly collect information directly from a child through this website.
Who we share it with
We share personal information only with the service providers that make the website and our correspondence work. Each acts as a processor on our instructions:
- Vercel — hosts the website and runs the code that handles form submissions.
- Supabase — provides the Postgres database in which enquiries are stored.
- Resend — delivers the email notification telling us that an enquiry has arrived.
We will also disclose information where we are legally required to, or where there is a safeguarding concern that obliges us to share it with a school, the local authority or the police.
Where your information is held
Our database and hosting are configured to use data centres in the United Kingdom or the European Economic Area wherever possible. Where a provider transfers information outside the UK, that transfer is covered by the provider’s standard contractual clauses or an equivalent safeguard.
How long we keep it
- Enquiries that do not lead to tuition are deleted within 12 months of the last contact.
- Records relating to tuition delivered are kept for 6 years after the final session, to meet accounting and tax requirements.
- Rate-limiting records are automatically discarded within 24 hours.
Your rights
Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have inaccurate information corrected, to ask for information to be deleted, to object to or restrict how we use it, and to receive it in a portable format. Where we rely on your consent, you may withdraw it at any time.
To exercise any of these rights, email tutreo.info@gmail.com. We will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would rather you raised it with us first, so we have a chance to put it right.
Cookies
This website sets no analytics or advertising cookies. See our Cookie Notice for the full detail.
Changes to this policy
If this policy changes materially, the date at the top of the page will be updated and, where the change affects you directly, we will tell you by email.