PRIVACY POLICY

Data Controller
David Hutton

Collected Personal Data
Depending on how you interact with this website, Protute may collect:

Contact details — name, email address, and phone number (yours, or your child's if you're booking on their behalf).
Booking and session information — preferred session times, exam board, year group, subjects/topics discussed.
Payment information — handled directly by our payment processor, e.g. Stripe/PayPal/GoCardless — Protute does not store full card details.
Session recordings — with permission, 1:1 and group sessions conducted via Google Meet may be recorded and shared with the relevant student afterwards.
Newsletter sign-up details — if you subscribe, your email address is stored by Brevo.
Website usage data — via cookies and/or analytics tools (see Cookies section below)

Where this information comes from

Directly from you (or a parent/guardian booking on a student's behalf), via booking forms, Calendly, the contact form, email, or newsletter sign-up.

Purpose of collecting data

To arrange and deliver tutoring sessions (lawful basis: contract)
To respond to enquiries before a booking is made (lawful basis: legitimate interests)
To send the newsletter, only where you've actively subscribed (lawful basis: consent — you can withdraw this at any time)
To record sessions for the student's own revision use, only with permission (lawful basis: consent)
To meet legal and accounting obligations, e.g. keeping payment records (lawful basis: legal obligation)

Children's information

Because this service is aimed at GCSE age students, some personal information relates to under-18s. Bookings and payments are made by a parent or guardian, who consents to this policy on the student's behalf. Session content is focused solely on tutoring, and no information about students is used for any purpose beyond delivering and improving that tutoring.

Who Protute shares information with

Protute does not sell personal information to anyone. Information is shared only with the specific third-party services used to run the business, each acting as a data processor behalf of Protute:

Google Meet / Google Workspace — for video sessions and recordings
Calendly — for scheduling
Stripe/PayPal — for processing payments
Brevo — for the newsletter, if subscribed
IONOS — as the website hosting provider

Some of these providers may process data outside the UK/EEA; where they do, they provide appropriate safeguards (such as Standard Contractual Clauses) as required under UK GDPR.

How long Protute keeps information

Booking and session records are kept for 5 years for accounting purposes, in line with HMRC requirements. Session recordings are kept for 12 months before being deleted. Newsletter details are kept until you unsubscribe.

Your rights

Under UK GDPR, you have the right to:

Access the personal information Protute holds about you
Have inaccurate information corrected
Request deletion of your information, in certain circumstances
Restrict or object to how your information is used
Request a copy of your information in a portable format
Withdraw consent at any time, where consent is the basis for processing (e.g. the newsletter)

To exercise any of these rights, contact Protute at info@protute.com.

How to complain

If you're unhappy with how your information has been handled, please contact Protute directly first so Protute can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.

Changes to this policy

This policy may be updated from time to time; the "last updated" date at the top will always reflect the most recent version.