Privacy Policy

UpMyGrade Tutoring, a trading name of Up My Grade Limited

Last updated: September 2026

1. Who We Are

UpMyGrade ("we", "us", "our") is an online tutoring platform providing GCSE and A-Level tuition to students across the UK, operated by Up My Grade Limited.

Data Controller:

Up My Grade Limited

Company number: 16920127

Registered office: 3 Bath Mews, Bath Parade, Cheltenham, England, GL53 7HL

Email: info@upmygrade.co.uk

Phone: 07469185568

Website: www.upmygrade.co.uk

This policy explains how we collect, use and protect your personal information when you use our website or services.

2. What Information We Collect

We may collect the following information from parents, students and tutors:

From parents and students (via our free trial form and booking process):

Parent name, email address and phone number
Student name, school year and academic level
Subject, exam board, current grade and target grade
Preferred days and times for lessons
Any additional information you choose to share (e.g. learning needs, tutor preference)
How you heard about us

From tutors (via our tutor application form):

Name, email address and phone number
Academic qualifications and grades
Subject specialisms and availability
DBS certificate details

From website visitors:

Basic usage data via cookies (see Section 8)
Any information submitted through contact forms

3. How We Use Your Information

We use your information to:

Match students with the right tutor for their subject and level
Arrange and confirm free trial sessions and ongoing lessons
Communicate with you about your bookings and progress
Process tutor applications and onboard new tutors
Respond to enquiries submitted through our website
Send service-related updates (lesson reminders, scheduling changes)
Improve our platform and services
Meet our legal and safeguarding obligations

We will not use your information for unrelated marketing without your explicit consent.

Where a tutor's profile information, photograph, qualifications or a testimonial about them is used in our marketing or on our website, this is done under the terms of the tutor engagement agreement each tutor agrees to when joining the platform, which sets out how that material may be used and how a tutor can ask for it to be removed.

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

Contract performance: To deliver the tutoring services you have requested
Legitimate interests: To manage our business operations, communicate with you and improve our services
Legal obligation: To comply with safeguarding duties and applicable law
Consent: Where you have provided explicit consent, for example to receive marketing communications

5. How Long We Keep Your Information

We retain personal data only for as long as necessary:

Active student and parent data: For the duration of the tutoring relationship plus 12 months
Tutor data: For the duration of employment or engagement plus 12 months
Enquiry and contact form data: Up to 6 months if no service is taken up
Financial and invoicing records: 7 years in line with HMRC requirements
Safeguarding records: As required by law — some records may be retained indefinitely

When data is no longer needed, it is securely deleted.

6. Who We Share Your Information With

We do not sell your personal data. We may share it in the following limited circumstances:

Between students and tutors: We share relevant information (student name, subject, year group, any disclosed learning needs) with the tutor assigned to that student, to enable effective tutoring
Service providers: We use third-party platforms to deliver our services, including Daily.co (which powers our in-platform video classroom for lesson delivery) and our revision portal at upmygrade.org. These providers process data on our behalf and are subject to appropriate data agreements
Legal or regulatory requirements: We may disclose information where required by law, including to safeguarding authorities

We also use the following service providers ("sub-processors") to run our website, student portal and booking system. Each is contractually required to protect your data and only process it on our instructions:

Supabase — database hosting and account authentication
Vercel — website and application hosting
Daily.co — the private video classroom each lesson takes place in
Resend — sending transactional emails (booking confirmations, password resets)
Stripe — payment processing (where used for paid lessons and packages)
Sentry — error monitoring, so we can find and fix technical problems. For a small sample of sessions this includes a masked recording of on-screen activity (see Section 8, Cookies) to help us diagnose an error; this only runs with your consent

Some of these providers may process or store data outside the UK/EEA (for example, in the United States). Where this happens, we rely on appropriate safeguards recognised under UK GDPR, such as Standard Contractual Clauses or the provider's own UK/EU data protection addendum, to ensure your data continues to receive an equivalent level of protection.

7. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Erase your data in certain circumstances ("right to be forgotten")
Restrict how we use your data
Object to processing based on legitimate interests
Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at: info@upmygrade.co.uk

We will respond within 30 days. There is no charge for making a request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk | Phone: 0303 123 1113

8. Cookies

Our website uses cookies and similar technologies — small pieces of data stored on your device — for two different purposes:

Essential: Required for the website to work at all — keeping you signed in (Supabase) and, on the payment step, fraud-prevention cookies set by our payment processor (Stripe). These are always on, as permitted under the Privacy and Electronic Communications Regulations (PECR), and do not require consent.
Error monitoring (not essential): We use Sentry to detect and diagnose technical faults. For a small sample of visits, this can include a masked recording of on-screen activity — never anything you type into a password field. This only runs if you accept it in the cookie banner shown on your first visit.

You can accept, reject, or change your choice at any time using the "Cookie settings" link in the website footer, which lets you withdraw consent as easily as it was given. Rejecting or withdrawing consent does not affect essential functionality.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss or misuse. Our platform is hosted via Vercel and Supabase, both of which maintain industry-standard security practices, with payment data handled directly by Stripe rather than passing through our own systems.

Please be aware that no method of transmission over the internet is completely secure. If you have concerns about data security, contact us at info@upmygrade.co.uk.

10. Children's Data

Our tutoring services are designed for students aged 11–18. We collect minimal personal data about students and treat it with particular care. We rely on parents or guardians to provide consent for students under the age of 13 in line with UK GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available at www.upmygrade.co.uk/privacypolicy. We will notify you of significant changes by email where appropriate.

12. Contact Us

If you have any questions about this policy or how we handle your data:

Email: info@upmygrade.co.uk

Phone: 07469185568

Address: Up My Grade Limited, 3 Bath Mews, Bath Parade, Cheltenham, England, GL53 7HL