Privacy Policy

Last updated: July 2026

⚠️ Draft for review. This policy should be reviewed by a data protection professional before launch, especially given that we process children's data. Register with the ICO before going live.

1. Who we are

Seeds Tuition is the data controller for the personal data we collect. We are committed to protecting your privacy and complying with UK GDPR and the Data Protection Act 2018.

2. What we collect

Student details: name, year group, subjects, target grades, progress records.
Parent/guardian details: name, email, phone number.
Booking & lesson data: lesson times, tutor notes, homework, attendance.
Payment data: handled by Stripe; we store only a payment reference, never full card numbers.
Technical data: basic login and usage information.

3. How we use it

To deliver and schedule tuition.
To process payments.
To communicate with you about lessons, progress, and your account.
To improve our services and for safeguarding purposes.

Our lawful bases are performance of a contract, legitimate interests, and consent where required.

4. Children's data

We process the personal data of students who may be under 18. We collect only what is necessary to provide tuition. A parent or guardian sets up and controls the account for students under 16. We do not use children's data for marketing.

5. Who we share it with

We share data only with the tutor delivering your lessons and with trusted service providers who help us operate: Stripe (payments), Supabase (secure database hosting), Resend (email delivery), and Google Meet (video lessons). We never sell your data. Some providers may process data outside the UK under appropriate safeguards.

6. How long we keep it

We keep your data for as long as your account is active and for a reasonable period afterwards to meet legal and accounting obligations. You can request deletion at any time (see below).

7. Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict the use of your data, and to data portability. To exercise any of these rights, email privacy@seedsinstitute.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO).

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), role-based access controls, and reputable infrastructure providers. No system is completely secure, but we take reasonable steps to protect your data.

9. Cookies

We use only essential cookies required to keep you logged in and operate the platform. We do not use advertising or third-party tracking cookies.

10. Contact

Questions about your data? Email privacy@seedsinstitute.co.uk.