Privacy policy

GradeSmart Tuition (“we”, “us”) is the data controller for the personal information described below. We are registered with the UK Information Commissioner’s Office (ICO).

What we collect

• Contact details (parent name, email, phone)
• Student details (name, year group, attendance, progress notes)
• Billing and payment metadata (never card numbers — Stripe holds those)
• Safeguarding logs where required by our duty of care
• Cookies that are strictly necessary for signing you in

How we use it

To deliver tuition, invoice for it, communicate with parents and tutors, and meet our safeguarding obligations.

How long we keep it

Academic records for 7 years after a student leaves. Financial records for 6 years (HMRC requirement). Safeguarding logs are kept under our safeguarding policy.

Your rights

You may request a copy of your data, ask us to correct it, or ask us to delete it where we are not required to keep it. Email privacy@gradesmart.uk. You can also download your data yourself from the account menu once signed in.

Processors we use

• Supabase (EU-West) — database & auth
• Vercel (EU) — hosting
• Stripe UK — card payments
• Zoho Mail — transactional email

Complaints

You have the right to complain to the ICO at ico.org.uk. We would always prefer to fix the issue first — please contact us.