Tuition4UQuiz Platform

Privacy Policy

Privacy Notice for Students, Parents and Educators

Last updated: January 2025

1. Who We Are and the Purpose of This Privacy Notice

We are Tuition4U ("we", "our", or "us"), operating the GCSE Mathematics revision platform at tuition4u.co.uk (the "Platform"). Tuition4U is operated by TRAVEL UNIQ LIMITED, a company registered in England & Wales (Company Number: 09636173) with its registered office at 83 Vicarage Lane, Stratford, London, England, E15 4HG.

This Privacy Notice is intended to provide information about how we collect, use, store and protect ("process") personal data about individuals including: current, past and prospective students; their parents, carers or guardians (referred to in this policy as "parents"); and educators using the Platform.

This Privacy Notice applies alongside any other information we may provide about a particular use of personal data. It also applies in addition to our other relevant terms and conditions and policies, including:

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As an educational platform serving learners of all ages, including children, we take extra care to protect the data of younger users. This Privacy Notice may be updated from time to time to ensure continued compliance with applicable laws and to reflect best practice.

2. What Information We Collect

The types of personal data we may process include:

2.1 Information You Provide

  • Name and contact information: email address, first name, last name
  • Student profile information: year group, guardian email (for students under 18)
  • Teacher/Educator profile: biographical information, subjects taught, qualifications
  • Account and subscription information including payment details (where applicable)

2.2 Information Generated Through Platform Use

  • Quiz responses and answers submitted during assessments
  • Academic performance data: scores, progress tracking, learning analytics
  • Class enrolment and attendance records for live quiz sessions
  • Correspondence with and concerning students and parents

2.3 Information Collected Automatically

  • Device information: browser type, operating system
  • Usage data: pages visited, time spent on platform, quiz completion times
  • Technical data: IP address, session tokens
  • Information from access to and use of the Platform, including real-time quiz sessions

2.4 Cookies

We use essential cookies to maintain your session and provide core functionality. For more details, please see our Cookie Policy.

Please note that we may routinely anonymise and/or aggregate personal data, such that it is no longer considered "personal data" under applicable data protection law. We use this anonymised data for evaluation, analytical purposes and to improve our services.

3. How We Collect Information

Generally, we receive personal data from the individual directly (including, in the case of students, from their parents or educators). The primary ways we collect personal data include:

  • Information provided during account registration and subscription
  • Information generated during the course of using the Platform (e.g., quiz results, progress data)
  • Information provided by teachers or administrators when creating student accounts
  • Information provided by schools or tuition centres using the Platform
  • Information from access to and use of the Platform website and services

4. Why We Need to Process Personal Data

The primary use of the personal data we collect is to support the learning and development of students using our Platform. We process personal data for the following purposes:

4.1 Performance of Contract

Some processing is necessary for the performance of a contract with our users, including:

  • Providing and maintaining the Platform and your account
  • Processing subscription payments and managing billing
  • Authenticating your identity through our passwordless login system
  • Delivering the educational services you have subscribed to

4.2 Legitimate Interests

Other uses are made in accordance with our legitimate interests, or the legitimate interests of others, provided these are not outweighed by the impact on individuals:

  • To provide GCSE Mathematics revision services and monitor student progress
  • To generate learning analytics and performance reports for students, parents and teachers
  • To enable teachers to create and manage quizzes and classes
  • To report to parents about their child's progress and development
  • To maintain and improve the academic and technical aspects of the Platform
  • To ensure the security and integrity of the Platform
  • For management planning, forecasting, and statistical analysis
  • To communicate important updates about our service

4.3 Legal Obligations

We may also process your personal data for compliance with our legal obligations:

  • To meet compliance and regulatory obligations
  • For the prevention, detection and investigation of unlawful activity
  • To assist with investigations carried out by competent authorities
  • To administer records as required by applicable laws

4.4 Additional Reasons

We may also process your personal data where:

  • It is necessary to protect the vital interests of the student or another person
  • It is necessary for the establishment, exercise or defence of legal claims
  • We have the consent of the data subject to do so

5. Who Personal Data May Be Shared With

5.1 Processing by Third Parties

For the most part, personal data collected by Tuition4U will remain within our systems and will be processed by appropriate individuals only in accordance with access protocols (i.e., on a 'need to know' basis). However, we use data processors who are third parties that assist us with some functions:

  • Database hosting: Secure cloud infrastructure for data storage
  • Email delivery (Resend): For sending authentication emails and notifications
  • Real-time features (Pusher): For live quiz session functionality
  • Payment processing: For subscription payments (where applicable)

This type of external data processing is subject to contractual assurances that personal data will be kept securely and used only in accordance with our specific directions.

5.2 Data Sharing

We do not sell your personal information. We may share data with:

  • Teachers: Student progress and quiz results within their enrolled classes
  • Parents/Guardians: Performance data for students under 18 (where guardian email is provided)
  • Schools/Tuition Centres: Where students are enrolled through an institution
  • Professional advisers: Lawyers, accountants (where necessary)
  • Legal authorities: When required by law or to protect rights and safety

5.3 International Data Transfers

Your data is primarily processed within the UK and European Economic Area. Where we use service providers outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

6. How Long We Keep Personal Data

We retain personal data securely and only in line with how long it is necessary to keep for a legitimate and lawful reason, including to meet regulatory and legal requirements:

  • Account data: For as long as your account is active, plus 2 years after deletion to handle any disputes
  • Quiz results and academic data: For 3 years to support learning progression tracking
  • Authentication tokens: Automatically deleted after expiration (10 minutes for login tokens)
  • Session data: 7 days from last activity
  • Payment records: As required by tax and accounting regulations (typically 6 years)

We may retain certain academic data for longer periods for archiving, research and statistical purposes. Where we do so, we put in place suitable data minimisation procedures, including removing data from day-to-day processing and applying access restrictions. You may request deletion of your data at any time by contacting us.

7. Your Personal Data Rights

Under UK GDPR, you have a number of rights in relation to your personal data:

  • The right of access: You may request a copy of the personal data that we hold about you.
  • The right to rectification: You may ask us to correct any information we hold about you if it is incorrect.
  • The right to erasure: You may ask us (in certain circumstances) to delete information that we hold about you.
  • The right to restrict processing: You may ask us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of processing based on consent before its withdrawal).
  • The right to data portability: You may ask us (in certain circumstances) to transfer your personal data to another data controller in a commonly used, machine-readable format.
  • The right to object: You may object, on grounds relating to your particular situation, to any of our processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. We will endeavour to respond to any such requests as soon as reasonably practicable and in any event within one month.

To exercise any of these rights, or if you have any data protection related concerns, please contact us at privacy@tuition4u.co.uk

8. Children's Privacy

Our Platform is designed for learners of all ages, including children under 18. We take special precautions to protect younger users:

  • We collect only the minimum data necessary for the educational service
  • Students under 18 may provide a guardian email for parental oversight
  • We do not display advertising or engage in behavioural targeting
  • Teachers and administrators manage class enrolments, not students directly
  • Users under 13 must have parental or guardian consent to use the Platform
  • We do not use personal data to build marketing profiles of young users

Access to the Platform by minors will be understood to be expressly authorised by their parents, guardians or their legal representatives, who are deemed responsible for the acts that minors carry out as users of the Platform in accordance with applicable regulations.

9. Data Security

We are responsible for implementing appropriate technical, organisational and security measures in relation to personal data, and we guarantee the confidentiality, integrity and availability of the information contained therein in accordance with legal provisions:

  • Passwordless authentication using secure, time-limited tokens
  • All authentication tokens are hashed using SHA-256 before storage
  • HTTPS encryption for all data in transit
  • Secure database hosting with encryption at rest
  • Role-based access controls (Admin, Teacher, Student)
  • Regular security reviews and updates

However, you must be aware that security measures of computer systems on the Internet are not entirely infallible and that, therefore, we cannot guarantee the absolute security of the Internet network and therefore the complete protection of data against fraudulent access by third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time to ensure continued compliance with applicable laws and to reflect best practice. We will notify you of significant changes by email or through a notice on the Platform. The "Last updated" date at the top of this policy indicates when it was last revised. Please check this policy regularly for updates.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have any data protection related concerns, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached. The ICO can be contacted at ico.org.uk

Related Policies