Skip to main content

Privacy policy

How we handle your information, in plain English.

Last updated: September 2026. This policy explains what we collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Hampstead Tuition Centre (78 Hampstead High St, London NW3 1RE) is the data controller for the information you give us. If you have any question about your data, contact us at info@hampsteadtuition.com.

What we collect

  • When you send an enquiry or enrol, we collect your name, email, phone, and what you tell us about your child (year group, subjects, and anything you choose to share).
  • If you buy from the shop, your delivery address so we can post your workbooks.
  • Payment details are handled entirely by Stripe, our payment provider. We never see or store your full card number.

Why we use it, and our lawful basis

We use your information to reply to you, arrange a free assessment, take payment, post your order, and keep you updated about your child's place. Our lawful basis is either your consent (when you contact us) or performing the contract once you enrol. We do not sell your data, and we do not use it for advertising.

Children's information

We only hold information about a child that a parent or guardian gives us, and only what we need to teach them well. A parent or guardian gives consent on the child’s behalf, by ticking the confirmation box on our booking and enquiry forms.

When you book a place, the child’s name, year group, school and anything you tell us about their learning needs are stored against your subscription with Stripe, our payment processor, and are deleted when that subscription ends. If what you tell us concerns a child’s health or a diagnosed condition, that is special category data and we rely on your explicit consent to hold it — you are welcome to leave it out and tell us in person instead.

We do not show personalised advertising to anyone, and we flag our revision pages to Google as directed to children. You can ask to see, correct or delete a child’s information at any time.

Who we share it with

Only the services that make the centre run. Each one processes data on our behalf under contract and may not use it for anything else. We do not sell your details or share them with anyone outside this list:

  • Stripe — takes payments and stores your booking details against the subscription.
  • Resend — delivers the emails we send you, and the enquiry notifications we send ourselves.
  • Vercel — hosts this website and processes the request logs that come with serving a page.
  • Cloudflare R2 / Amazon S3 — stores the workbook PDFs that paying customers download.
  • Google — serves the advertising on our free revision pages, but only if you accept advertising cookies.

Where your data goes

Some of the companies above are based outside the UK, mainly in the United States, so your information may be transferred there. Where that happens it is protected by the UK International Data Transfer Agreement or an adequacy decision, which are the safeguards UK data protection law requires. You can ask us for a copy of those safeguards.

How long we keep it

  • Enquiries that do not lead to a place: deleted within 12 months of our last contact.
  • Records of enrolled families: kept while your child attends, then for 6 years after they leave, because HMRC requires us to keep accounting records for that long.
  • Booking details held in Stripe: kept for as long as the subscription exists, then deleted with it. This includes the year group, school and any learning needs you told us about.
  • Reviews: kept until you ask us to remove them.

You can ask us to delete your information sooner, and we will unless the law requires us to keep it.

Your rights

Under UK GDPR you have the right to:

  • Access — ask for a copy of everything we hold about you.
  • Rectification — have anything inaccurate corrected.
  • Erasure — ask us to delete it (the right to be forgotten).
  • Restriction — ask us to pause using it while a concern is sorted out.
  • Object — object to us using it where our basis is legitimate interest.
  • Portability — receive the details you gave us in a portable electronic format.
  • Withdraw consent — where consent is our basis, withdraw it at any time. This does not affect anything done before you withdrew it.

Email info@hampsteadtuition.com and we will respond within one month, free of charge. If you are not happy with our response you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

Cookies

We store a small amount of information on your device to remember your basket, your sound preference and your cookie choice. Most of this is browser local storage rather than cookies, and none of it tracks you between websites. Our free revision pages also carry advertising, which sets cookies only if you accept them — and we force non-personalised ads so you are never profiled. We do not use Google Analytics or any other visitor tracking. Our cookie policy lists every item by name, and you can change your choice at any time through the Cookie preferences link in the footer.