Privacy Policy

Tutorvine Ltd ("Tutorvine", "we", "us") operates the platform at tutorvine.co.uk. We are the data controller for personal data collected through this platform. We are registered in England and Wales and registered with the ICO under UK GDPR.

If you have questions about how we handle your data, email us at privacy@tutorvine.co.uk.

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), profile photo, phone number
• Tutor profile data: biography, subjects, qualifications, DBS status, hourly rate
• Booking data: lesson dates, times, durations, subjects, and associated communication
• Payment data: payment method tokens handled by Stripe (we never store raw card details)
• Usage data: pages visited, features used, login timestamps
• Communications: messages sent through the platform, lesson notes
• Reviews: ratings and written reviews submitted after lessons

We use your personal data to:

• Provide and operate the Tutorvine platform
• Process bookings and payments
• Send booking confirmations, reminders, and lesson notes
• Respond to enquiries and support requests
• Detect and prevent fraud or misuse of the platform
• Comply with our legal obligations
• Improve our services (using anonymised analytics)

We process your data on the following legal bases under UK GDPR:

• Contract: to perform the agreement between you and Tutorvine (e.g. to process your booking)
• Legitimate interests: to operate and improve our platform, prevent fraud, and send transactional communications
• Legal obligation: where required by law
• Consent: for optional marketing communications (you can withdraw at any time)

We share data only where necessary, with:

• Stripe: payment processing (their privacy policy applies to payment data)
• Supabase: database and authentication hosting (data stored in EU)
• Resend: transactional email delivery
• Daily.co: online classroom video infrastructure
• Anthropic: AI-powered features such as lesson summaries and tutor matching (lesson content only, not your personal data)

We do not sell your data to third parties.

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your data within 30 days, except where we are required to retain it for legal or tax purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Request a portable copy of your data
• Withdraw consent at any time (where we rely on consent)

To exercise any of these rights, email privacy@tutorvine.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

We use cookies to keep you logged in and to understand how the platform is used. See our Cookie Policy for full details.

We may update this policy from time to time. Material changes will be notified by email or a notice on the platform. The date at the top of this page reflects the most recent update.