Tutoroad Privacy Policy

(Trading name of Sunshine Learning (UK)Ltd · Company No. 07869825)
Last updated: 10 October 2025

1. Who We Are

Tutoroad is operated by SunshineLearning (UK) Ltd, a company registered in England and Wales (No.07869825).
We provide a digital platform that connects parents, students, and independenttutors for secure online learning and communication.

📧 Contact: info@tutoroad.com
📬Sunshine Learning (UK) Ltd, London, United Kingdom

2. Information We Collect

We only collect information necessary forsafe and effective platform use.

From Parents & Students

• Name, contact details, address , email address and learning preferences.
• Student year group age range and subject interests.
• Lesson bookings, messages, feedback, and payments (via Stripe Connect).
• Session recordings (for safeguarding, training, and complaint resolution).

From Tutors

• Name, contact details, qualifications, experience and photos, videos.
• DBS and right-to-work details.
• Payment details (processed securely via Stripe Connect).
• Availability of time slots, teaching styles.
• Lesson summaries and communication logs.

⚠️ Optional: Consider adding “IPaddress and browser type” if analytics or login tracking cookies are used for fraudprevention.

3. How We Use Your Data

We use your personal data to:

• Create and manage accounts for parents, students, and tutors.
• Deliver online lessons and enable platform communication.
• Process payments securely via Stripe Connect.
• Record lessons where required for students learning ,safety and training.
• Handle feedback, complaints, and safeguarding matters.
• Comply with legal and tax requirements.

We never sell or rent user data.

4. Session Recordings

• Some lessons may be automatically recorded for safeguarding and quality assurance.
• Recordings are kept securely for up to 30 days and deleted automatically afterward.
• If a complaint or legal issue arises, that recording may be retained until resolved.
• Recordings are accessed only by authorised Tutoroad staff and may be shared with the tutor, parent, or student involved in a formal review.
• Independent screenshots, photos, or recordings by users are not permitted.

5. Legal Basis for Processing

Tutoroad processes data under the followinglegal bases under the UK GDPR:

• Contract: to deliver tutoring services and payments.
• Legal obligation: for safeguarding, tax, and regulatory compliance.
• Legitimate interests: to maintain safety, service quality, and operational efficiency.
• Consent: for marketing or optional communication (withdrawable at any time).

6. Data Retention

After expiry, data are securely deleted or anonymised.

7. Data Security

• Encrypted data storage (HTTPS, SSL, and restricted admin access).
• Stripe Connect handles all payment data (PCI-DSS and FCA-compliant).
• Regular reviews of security and data-handling procedures.
• Multi-factor authentication and role-based permissions for staff.

⚠️ Optional:Add “data breach notification process” for full ICO compliance — short notelike “In the event of a data breach, affected users and the ICO will benotified where legally required.”

8. Sharing Your Information

Tutoroad shares only the data necessary toprovide its services safely and effectively.

a. Platform Users

• Tutors receive limited student details (e.g., year level, subject, and learning goals) to prepare lessons.
• Parents and students see tutor profiles, reviews, qualifications, and verified status.
• Personal contact information (email, phone, address) is never shared directly between users.

b. Third-Party Service Providers
We use secure service partners to host, deliver, and support our services, including:

• Stripe Payments UK Ltd (for payments).
• Cloud and education technology providers, which may include secure third-party lesson platforms based outside the UK.
  These providers are contractually required to comply with UK GDPR standards and process data only under Tutoroad’s instructions.

c. Legal and Safeguarding Authorities
Information may be disclosed to law enforcement, child protection agencies, orregulators if required by law or in the best interests of child safety.

9. International Data Transfers

When services are delivered usingtechnology partners based outside the UK or European Economic Area (EEA):

• Data transfers are governed by Standard Contractual Clauses (SCCs) or the UK’s International Data Transfer Agreement (IDTA).
• All such partners must maintain GDPR-equivalent security and confidentiality.

10. Your Rights (UK GDPR)

You have the right to:

• Access a copy of your data.
• Request correction of inaccuracies.
• Request deletion (“right to be forgotten”) where lawful.
• Object to or restrict processing.
• Withdraw consent for optional uses (like marketing).

Contact: 📧 info@tutoroad.com
We respond to all valid requests within 30 days.

11. Cookies

Tutoroad uses cookies to:

• Keep you logged in securely.
• Remember preferences.
• Analyse website usage anonymously.

You can manage or disable cookies throughyour browser.
A detailed Cookie Policy will be published separately.

12. Children’s Privacy

Tutoroad is designed for learners aged6–18.
Parents or guardians must create or supervise accounts for minors.
We do not knowingly collect personal data from children without parentalinvolvement.

13. Updates to This Policy

This Privacy Policy may be updated toreflect changes in law or our operations.
The latest version will always be available on the Tutoroad website.
By continuing to use Tutoroad, you agree to the most recent version.

Sunshine Learning (UK) Ltd
📧 info@tutoroad.com
📬London, United Kingdom