Privacy Policy

1. Controller and contact

Trainer Space Ltd (Company Number: 16814946), trading as TutorFrog, is the data controller for personal data processed via the Platform (except where a Tutor or School independently processes data for its own purposes).

Contact: admin@tutorfrog.co.uk

2. Data we collect

• Account data: name, email, phone, account role (student, tutor or school), and profile information you choose to provide.
• Lesson data: lesson times, tutor or school details, lesson price and cancellation reasons (where provided).
• Payment data: payments are processed securely by our payment provider (for example Stripe). We store transaction references required to operate the service, including payment and refund identifiers.
• Communications: transactional emails relating to lessons, cancellations, refunds, account activity and support enquiries.
• Usage and device information used for security, fraud prevention, troubleshooting and service reliability.
• Content you upload, including profile information, tutor details, images and other content you choose to publish.

3. How we use your data

• To create and manage user accounts.
• To enable lesson bookings, tutor availability, cancellations and refunds.
• To send transactional emails relating to lessons and account activity.
• To protect the Platform from fraud and misuse and enforce our Terms of Service.
• To provide customer support.
• To improve and maintain the Platform.

4. Legal bases (UK GDPR)

• Contract: processing necessary to provide the Platform and facilitate lesson bookings.
• Legitimate interests: fraud prevention, security, service improvement and analytics (where appropriate).
• Legal obligation: accounting, taxation and regulatory compliance.
• Consent: optional marketing communications where enabled.

Transactional lesson emails are service communications required to operate the Platform and do not require separate marketing consent.

5. Sharing data

We share data only where necessary to operate the Platform, including:

• Students, Tutors and Schools where necessary to facilitate lesson bookings.
• Stripe (or equivalent providers) to process payments.
• Supabase for authentication, database and storage.
• Resend (or equivalent providers) to deliver transactional emails.
• Legal authorities where required by law or to protect the rights and safety of users.

6. International transfers

Some service providers may process personal data outside the United Kingdom. Where this occurs, we rely upon appropriate safeguards in accordance with UK GDPR.

7. Security

We use reasonable technical and organisational measures to protect personal data. However, no system can be guaranteed to be completely secure.

8. Data retention

We retain personal data only for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes and enforce our agreements. Lesson booking and payment records may be retained for longer where required for taxation or accounting.

9. Your rights

Under UK GDPR you may have rights to access, correct, delete, restrict or object to the processing of your personal data and to request data portability.

You also have the right to complain to the Information Commissioner's Office (ICO).

Contact us at admin@tutorfrog.co.uk if you wish to exercise your rights.

10. Cookies and analytics

The Platform uses essential cookies required for authentication and security. If optional analytics or marketing cookies are introduced in the future, appropriate consent controls will also be introduced.

If marketing emails are introduced, you will be able to opt in and unsubscribe at any time. Transactional lesson emails will continue to be sent where necessary to operate the Platform.

11. Changes

We may update this Privacy Policy from time to time. Where changes are significant, we will take reasonable steps to notify users.