Privacy Notice

Last updated: 14 July 2026

This notice applies to people who enquire about tuition, tutees, and their parents or legal guardians.

1. Who I am

I am Andrew Garratt, a sole-trader private tutor and the controller of the personal information described in this notice.

Email: andrewcwgarratt@gmail.com
Correspondence address: 78 Worsley Road, Newport, PO30 5JD

2. Information I use and where it comes from

I may use:

names, email addresses and telephone numbers;
a tutee’s home address and lesson-scheduling information;
the subjects, level and areas in which tuition is required;
lesson, attendance and cancellation records;
limited progress, target and attainment records;
correspondence about tuition;
assignments provided for agreed tuition support;
invoices, payments and other financial records; and
basic technical and security information recorded by my website or enquiry-form providers, such as an IP address and submission time.

I normally receive this information from the enquirer, the tutee, or the tutee’s parent or legal guardian.

Please do not provide unnecessary medical or other sensitive information. Where limited information about health, disability or access requirements is needed to provide suitable tuition or adjustments, I will record only what is reasonably necessary.

3. Why I use information and my lawful bases

I use personal information for the following purposes:

Purpose	Lawful basis
Responding to an adult’s enquiry and arranging and providing tuition for that adult	Taking requested steps before entering into, and performing, a tuition agreement
Communicating with and administering payments from a parent or guardian who arranges tuition for a child	Taking requested steps before entering into, and performing, a tuition agreement with that adult
Using a child tutee’s information to plan, provide and administer their tuition	Legitimate interests
Maintaining a requested waiting list	Legitimate interests
Maintaining proportionate lesson, progress, assignment, security and business-administration records	Legitimate interests
Keeping tax and accounting records	Legal obligation
Handling complaints, disputes and legal claims	Legitimate interests, legal obligation or the legal-claims condition, as applicable
Protecting someone’s life in an emergency	Vital interests
Safeguarding a child from neglect or physical, mental or emotional harm	Recognised legitimate interests and, where sensitive information is involved, the applicable safeguarding condition under UK data-protection law

A tuition agreement may be oral or arise from the agreed provision of tuition in return for payment; it does not need to be signed.

My legitimate interests are providing and administering an effective tuition service, maintaining a requested waiting list, protecting my systems and business, and handling complaints or legal claims. When using a child’s information, I give particular weight to the child’s rights and interests.

Where I record health, disability or other special-category information for ordinary tuition adjustments, I normally rely on explicit consent in addition to the relevant lawful basis. Consent may be withdrawn by contacting me, although this may affect the adjustments or support I can provide. In exceptional cases, other legal conditions may apply, including safeguarding, protection of life or legal claims.

4. Who receives information

Where necessary, information may be processed by:

Google, which provides my email service;
Microsoft, which provides Excel and OneDrive;
my website-hosting and enquiry-form providers;
my bank or payment provider;
an accountant, legal adviser or other professional adviser;
HM Revenue and Customs or another public authority where required by law;
an educational, assessment or awarding body where you ask me to provide agreed assistance; and
the police, a local authority or another appropriate body where necessary for safeguarding, an emergency or a legal claim.

I do not otherwise disclose personal information unless requested by the person concerned or required or permitted by law.

Some service providers may process information outside the United Kingdom. Where this involves a restricted international transfer, I rely on UK adequacy regulations or approved contractual safeguards. You may contact me for further information or a copy of the relevant safeguards.

5. How long I keep information

Enquiries that do not lead to tuition: normally three months after the last communication.
Waiting-list information: until you ask to leave, or until you fail to respond within 30 days to an annual request to confirm that you wish to remain.
General tuition records: normally 12 months after tuition ends.
Assignments: until the agreed support has ended or the relevant course has been completed, after which my copies are deleted.
Tax and financial records: for at least five years after the 31 January tax-return submission deadline for the relevant tax year, or longer where legally required.
Complaints and legal claims: for as long as reasonably necessary to deal with the matter, normally no longer than six years after tuition ends unless proceedings require longer retention.

Information may remain temporarily in secure provider-managed backups until those backups are overwritten.

6. Your rights

Depending on the circumstances, you may have the right to:

receive a copy of your personal information;
have inaccurate or incomplete information corrected;
have information deleted;
restrict how information is used;
receive certain information in a portable electronic format; and
withdraw consent where processing is based on consent.

These rights belong to the person whom the information concerns, including a child tutee. A parent or legal guardian may make a request on a child’s behalf where appropriate.

To exercise a right, contact me using the details in section 1. I may need to confirm your identity.

Your right to object

Where I rely on legitimate interests or recognised legitimate interests, you have the right to object to my use of your information. I will stop using it unless I have compelling legitimate grounds to continue or need it for legal claims.

7. Complaints

You may make a data-protection complaint by emailing andrewcwgarratt@gmail.com.

I will acknowledge the complaint within 30 days, investigate it appropriately, keep you informed where necessary and communicate the outcome without undue delay.

You may also complain to:

Information Commissioner’s Office
Telephone: 0303 123 1113
Website: www.ico.org.uk

8. Information needed to provide tuition

You are not legally required to make an enquiry or join the waiting list. However, I may be unable to respond or offer tuition without the necessary contact and tuition-requirement information.

The contact, scheduling and payment information needed to administer tuition must be provided if tuition is arranged. A home address is necessary because tuition is provided in the tutee’s home.

I may update this notice where my practices or legal obligations change and will bring any material new use of personal information to the attention of affected people.