Skip to content
tutornetwork.

Privacy Notice

Last updated 5 July 2026

1. Who we are (Controller)

Tutor Network Limited ("we", "us") trading as "TutorNetwork" is the controller for personal data collected via this site.

Company number: 16713011 • Registered office: Celtic House 11 – 12 Neptune Court, Vanguard Way, Cardiff, Wales, CF24 5PJ
Contact: privacy@tutornetwork.co.uk (privacy) • contact@tutornetwork.co.uk (general)
ICO registration number: ZB991621. You can complain to the ICO at ico.org.uk.

2. What we do

When you submit an enquiry, you ask us to assess your request and introduce you to a suitable UK tutoring company or agency (an incorporated entity). As part of that service, you instruct us to share your enquiry and contact details with one matched provider from our named partner list so they can respond about this enquiry.

3. Personal data we collect

  • Information you provide: your name, email address and phone number, the level and subject(s) you're looking for, and any notes you choose to add about what you need. Please avoid including health or other special-category information. If you choose to include such information, we will only use it if strictly necessary to handle your enquiry and otherwise delete or minimise it; where needed we may request your explicit consent.
  • Technical data: submission timestamp, IP and device information for security, fraud-prevention and audit, and how you found us — the page you arrived on and any campaign or advertising click identifiers in its address — so we can measure which of our marketing works.
  • Cookies & analytics: we use privacy-friendly, cookieless first-party analytics that measures aggregated page views, traffic sources and on-page interactions. It sets no cookies, stores no information on your device, and records nothing that identifies you (your IP is used only transiently on our server for bot-filtering and is not stored in our analytics). To tell repeat visits apart from new ones over a single day, we derive a temporary visit identifier from connection information (such as IP address and browser type) combined with a secret key that changes every day and is permanently destroyed the following night — once that key is destroyed, the identifier cannot be recreated by us or anyone else, and it cannot be used to identify an individual. Because it is cookieless and anonymous, it runs for all visitors. With your consent (via our cookie banner) we additionally use cookie-based analytics and advertising tools — Google Analytics 4 and Google Ads (Google LLC) and Microsoft Clarity (Microsoft Corporation), which records anonymised session interactions ("session replay") to help us improve the site. If you accept, we also set a first-party cookie (tn_vid) containing a random identifier so we can recognise a returning visitor across separate visits and measure how effective our marketing is; it lasts up to 13 months. These load only if you accept; if you decline, or later withdraw consent, they are not loaded, the tn_vid cookie is deleted immediately, and only the cookieless measurement above runs. You can change your choice at any time via the "Cookie choices" link in the footer. See section 6 for these providers.

4. Purposes and lawful bases (UK GDPR)

  • Match & introduction (including contacting you with the match): to assess your brief, propose a match and introduce you. Lawful basis: Contract (Art. 6(1)(b)) — necessary to perform our Introduction Service contract with you, including steps at your request to assess your brief and share your details with one matched provider so they can respond about this enquiry. This is not for any contract between you and a provider.
  • Sharing with one matched provider: to enable that provider to respond about this enquiry by email, phone call or text message. Lawful basis: Contract (Art. 6(1)(b)). We rely on Article 6(1)(b) UK GDPR because sharing your enquiry and contact details with one matched provider is necessary to perform our Introduction Service contract with you (so they can respond about this enquiry). This is not carried out for any contract between you and the Provider. The Provider is an independent controller and uses their own lawful basis for their communications and any marketing.
  • Opt-out management, security, fraud/safeguarding checks and audit logs: maintaining suppression lists and safeguarding the service. Lawful basis: Legitimate interests (Art. 6(1)(f)). You may object at any time.
  • Marketing: we only send our own marketing where you give consent (Art. 6(1)(a)), which you can withdraw at any time. Any provider's ongoing marketing is their responsibility and requires their own lawful basis (usually consent).

5. PECR (email/SMS)

The first email or text message from the matched provider is sent to respond to this enquiry following your instruction above (they may also call you about it). Under PECR, that message is a solicited communication. We require providers to identify themselves and include an easy opt-out (e.g., unsubscribe link / "Reply STOP"). Any broader/ongoing marketing requires separate permission gathered by the provider. Providers must not rely on the 'soft opt-in'. For any marketing beyond responding to this enquiry, Providers need their own lawful basis (usually consent).

6. Who we share with

  • Exactly one matched tutoring company or agency (an incorporated entity such as a limited company or LLP) from our named partner list (we do not share with individual tutors or sole traders). Each Provider acts as an independent controller and will give you their own privacy information. The Provider may pass your details to its personnel/contractors (including an assigned tutor) to respond to this enquiry, and is responsible for that processing.
  • Processors who help us run the service under written data-processing terms: Cloudflare, Inc. (site hosting and processing of enquiry submissions) and Resend, Inc. (email delivery).
  • Analytics & advertising providers. Our cookieless first-party measurement and site hosting use Cloudflare, Inc. Where you consent, we also use Google LLC (Google Analytics 4 and Google Ads) and Microsoft Corporation (Clarity, including anonymised session replay). These providers process technical and usage data under their own terms and privacy policies. We do not enable the consent-based tools unless you accept them via the cookie banner.

We do not sell your personal data. We may receive fees/commissions from providers for introductions.

For clarity: we share your details with exactly one matched Provider solely to respond to your Enquiry. That Provider acts as an independent controller and is responsible for any Tutoring Contract you may enter into with them.

7. International transfers

We aim to store submissions in the UK/EU. Some of our providers (for example Resend, Google and Microsoft) may process data in the United States or other countries. Where data is transferred to a country without UK adequacy regulations, we rely on appropriate safeguards: the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it, or otherwise the ICO's International Data Transfer Agreement or Addendum (with EU SCCs), plus further measures as needed.

8. How long we keep your data

We keep enquiry records for 12 months to manage your enquiry, opt-outs and fraud-prevention, then delete or anonymise unless required longer for a dispute or legal obligation. If lessons proceed, limited records may be kept for accounting and complaints for up to 6 years. We maintain email/SMS suppression (opt-out) records for as long as needed to honour your opt-out.

9. Your rights

You have rights to access, rectification, erasure, restriction, data portability and objection (particularly to processing based on legitimate interests). Where we rely on consent (marketing, and the optional cookies described in section 3), you can withdraw it at any time — withdrawing does not affect processing that happened before you withdrew. To exercise any right, email privacy@tutornetwork.co.uk; we will respond within one calendar month. We do not make solely automated decisions about you that have legal or similarly significant effects — a person reviews every enquiry and match. You can complain to the ICO at any time (ico.org.uk), though we'd appreciate the chance to help first.

10. Is provision of data required?

Providing your name, email address and phone number is contractually necessary for us to deliver the match and introduction: the matched provider needs a reliable way to respond to your enquiry, and a second channel if the first is undeliverable. The matched provider also needs your name to accept and act on the referral. If you do not provide them, we cannot provide the service. The notes field is optional; everything else on the form is required.

11. Security

We apply appropriate technical and organisational measures (encryption in transit, access controls, least-privilege). No method is 100% secure.

12. Children

This service is for adults/parents/guardians. Please don't provide a child's direct contact details. If a child under 18 has submitted data, contact us so we can delete it.

Your enquiry will usually include some information about your child — for example their school level, subjects or what they need help with. We treat that information with particular care: we use it only to assess the enquiry and make the match, we share it only with the one matched provider, and it is covered by the same lawful bases, retention periods and rights set out in this notice (which you can exercise on your child's behalf).

13. Named partner list

We maintain a finite, named list of UK tutoring providers we may match you with. The list is available on our website and marked with "Last updated". We record the version of the list shown at the time of your submission.

14. Changes

We may update this notice. We'll post the new version here with a new "Last updated" date.