Privacy notice

Who is responsible for your information?

Luminary Tutoring operates protutor.ing and is the data controller: the business responsible for deciding how your personal information is used. For privacy questions or requests, email hello@protutor.ing or call 07540 195 785.

What information we collect

• Enquiries: your name, email address, phone number, chosen subject and any details you provide about tuition needs, such as year group, exam board or target grades.
• Accounts and tuition: contact and sign-in details, student details supplied by you or a parent or guardian, lesson arrangements, homework, progress and messages.
• Payments: subscription and payment records. Stripe processes card details; our website does not store your full card number.
• Lesson recordings: the audio, video, chat and work shared during a recorded Microsoft Teams lesson.
• Website use: technical information such as IP address and browser details for security, and enquiry source information such as the entry and enquiry pages, referring website, campaign tags and Google Ads click identifiers when you allow measurement. You can also optionally tell us how you heard about us.
• Testimonials: the review and display details you provide, plus contact details used to request or manage it. Your email address is not shown in the public testimonial.

We collect information directly from you, from a parent or guardian arranging tuition, and from the services listed below when they handle payments, sign-in or communications for us.

Why we use it

• To respond to enquiries and arrange or deliver tuition. Where you are entering into a tuition agreement, this is to take steps at your request before a contract or to perform that contract.
• To support a student whose parent or guardian has arranged tuition, communicate about progress and provide recordings for revision and parent review. Our legitimate interest is providing and managing effective tuition for that student.
• To administer accounts, messages and payments, prevent abuse and resolve queries. We rely on the tuition contract where applicable, and our legitimate interests in running a secure, reliable tutoring service.
• To understand how families find us and improve our marketing. We rely on your consent for optional website measurement and the source information it adds to your enquiry. Our legitimate interest applies to any source information you choose to tell us directly. Submitting an enquiry does not sign you up to a marketing mailing list.
• To keep financial records and meet tax or other legal requirements. This is based on our legal obligations.
• To publish a testimonial with your permission. You can withdraw that permission by contacting us.

Contact details are needed to answer your enquiry; account and payment details are needed to manage paid tuition. Optional form fields can be left blank. We do not make decisions about students using automated profiling.

Live lessons and recordings

Tuition is live and one-to-one. Lessons take place on Microsoft Teams and are recorded, then shared with the student who attended so they can revisit explanations and revise. Parents can also review the lesson. Recordings are not public blog or marketing content.

Recordings are kept for 180 days from the lesson. If you have a question about recording or access, contact us before your lesson.

Who receives information

Tutors and authorised administrators use the information needed to provide and manage your tuition. The services supporting our business also process information:

• Microsoft Teams for live lessons, recordings and messages.
• Resend for service emails and delivery records.
• Stripe for payment processing and subscriptions.
• Google if you choose to sign in with a Google account.
• Cloudflare Turnstile for protecting forms against spam.
• Hosting, database, storage and backup providers for running and maintaining the website.

We may also share information with professional advisers or public authorities where necessary to meet legal obligations or deal with a legal claim. We do not sell your personal information.

Processing outside the UK

Some providers process information outside the UK, including in the United States. Their data protection terms provide for recognised safeguards, such as standard contractual clauses with the UK Addendum where required. For example, see Resend’s data processing terms, Stripe’s data processing terms and Cloudflare’s data processing terms. Contact us for details of the safeguards applying to your information or to request a copy.

How long we keep information

• Enquiries that do not become clients are kept for 90 days.
• Lesson recordings are kept for 180 days from the lesson.
• Account, tuition and correspondence records are kept for the time needed to provide tuition and deal with payments, queries or disputes. Financial records may need to be kept longer to meet tax and accounting obligations.
• Security and delivery records, including email logs, are kept for the time needed to investigate abuse or delivery problems. Backup copies are retained as needed for recovery.
• Published testimonials remain until withdrawn or removed. You can ask us to remove yours at any time.

Cookies and enquiry source information

We use cookies needed for account sign-in and session security. Cloudflare Turnstile processes technical information to check that form submissions are genuine. See Cloudflare’s privacy policy for its handling of this information.

Optional website measurement uses session storage in your browser tab only after you select “Allow measurement”. It remembers the page where measurement starts, the referring website’s hostname, campaign tags and any Google Ads click identifiers in that page’s address. It keeps this information through navigation and reloads in the same tab and adds it to your enquiry if you submit the form. It does not store unrelated address parameters or full referring addresses. We do not record page-by-page browsing history.

You can decline measurement and still enquire. Use “Privacy choices” in the footer to change your decision. Declining removes the source information stored for this visit; it does not remove information already sent with an enquiry. Contact us if you want to make a request about an existing enquiry. Your choice is remembered for the current tab session, which may be restored if your browser restores that session. If you allow measurement after browsing, earlier pages and campaign information are not recovered. This website currently has no Google Analytics or advertising pixels.

Your rights and how to contact us

Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use or receive a portable copy. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier use.

You have the right to object to processing based on legitimate interests, including our use of enquiry source information, for reasons relating to your situation.

To make a request for yourself or discuss a request concerning your child, email hello@protutor.ing. We may need to check your identity and authority to act for someone else. We normally respond within one month; some requests may take longer where the law allows.

You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.