Privacy Policy

My Primary and Secondary Tutor is committed to safeguarding your privacy. We collect, use and are responsible for certain Personal Data about you. For the purposes of the Data Protection Legislation, the controller of your Personal Data is Karen Simpson, as trading My Primary and Secondary Tutor. Contact her at the below details. If you have any questions or problems regarding the use of your Personal Data and she will gladly assist you.

Name: Karen Simpson, trading as My Primary and Secondary Tutor

Address: 33 Slackbuie Way, Inverness, IV2 6AT

Phone number: 07919 532071


We ask that you read this privacy notice carefully as it contains important information on who we are, how and why we collect, store, use and share Personal Data, your rights in relation to your Personal Data and on how to contact us and supervisory authorities in the event you have a complaint.


  • Child – a person under 18 years of age.
  • Controller – the person, public authority, agency or other body that determines the purposes
  • and means for Processing Personal Data;
  • Data Protection Legislation – means the Data Protection Act 2018 and the UK GDP (as defined within the Data Protection Act 2018) and as amended and updated from time to time;
  • Data Subject – a natural person whose Personal Data is being processed;
  • Personal Data – any information relating to an identified or identifiable natural person; and
  • Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data;

Data protection principles

We adhere to the following data protection principles which require that Personal Data is:

  • Processed lawfully, fairly and transparently. This means that our processing activities have lawful grounds. We always consider your rights under the Data Protection Legislation before Processing your Personal Data;
  • collected for specified, explicit and legitimate purposes and is not further Processed in a manner that is incompatible with these purposes. Our processing activities fit the purpose for which Personal Data was gathered;
  • adequate, relevant and limited to what is necessary in relation to the purposes for which it was collected for. We only gather and Process the minimal amount of Personal Data required for the purpose it was collected for;
  • kept in a form which permits identification of Data Subjects for no longer than necessary. Processing is limited with a time period. We will not store your Personal Data for longer than needed; and
  • Processed in a manner that ensures appropriate security and confidentiality of the
  • Personal Data.

The UK GDPR also includes a principle of 'accountability', which requires My Primary and Secondary Tutor to take responsibility for its processing and to be able to demonstrate compliance with the UK GDPR.

Data Subject’s Rights

You can exercise any of the following rights by contacting us on

Under the Data Protection Legislation, you have the following rights:

  • 1. Right to information – meaning you have to right to know whether your Personal Data is being processed by us, what Personal Data is gathered, from where it is obtained and why and by whom it is Processed – as contained within My Primary and Secondary Tutor privacy notice;
  • 2. Right to access – meaning you have the right to access the Personal Data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered;
  • 3. Right to rectification – meaning you have the right to request rectification of your Personal Data that is inaccurate or incomplete;
  • 4. Right to erasure – meaning, in certain circumstances, you can request for your Personal Data to be erased from our records;
  • 5. Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the processing of your Personal Data;
  • 6. Right to object to processing – meaning in certain cases, you have the right to object to Processing of your Personal Data;
  • 7. Right to object to automated processing – meaning you have the right to object to automated processing, including profiling; and not to be subject to a decision based solely on automated processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you;
  • 8. Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another;
  • 9. Right to withdraw consent – you have the right to withdraw any given consent for Processing of your Personal Data;
  • 10. Right to lodge a complaint – in the event that we refuse your request under the applicable Data Protection Legislation, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us -

You are not required to pay any charge for exercising your rights. If you make a request, we
have one month to respond to you.

Data we gather

Information you have provided us with

This includes your, name, home address, e-mail address, telephone number, any special education needs information and emergency contact name and contact number. We also collect personal data from the children we provide our services to. This includes their name, age/DOB, class ,school, medical needs and their interests.

Information we gather from providing our services to you

We gather information from the services we provide including information about your child's level from the initial assessment which we share with you verbally during the assessment and share between our lead tutor and your tutor. We gather information about your child's progress through providing our services which are shared between tutor and lead tutor through our monthly progress reports. We gather information about your child's progress and share this with you through our weekly feedback messages. We use third party providers to share and store this information including Air Table, Free Agent, G-mail, Mailer Lite, One Drive, Class Dojo, Meta, Google Shared Drive and Sync.

Publicly available information

We might gather Personal Data about you that is publicly available.

Why we need your Personal Data

We need to collect your Personal Data so that we can:

  • provide our service to you. This includes, for example, registering your account; providing you with other products and services that you have requested; providing you with promotional items at your request and communicating with you in relation to those products and services; communicating and interacting with you; and notifying you of changes to any services;
  • enhance your customer experience;
  • fulfil an obligation under law or contract;
  • to track the progress of children enrolled in our services
  • to communicate with you either about the services we provide to you, for sales or for invoicing purposes;
  • to send you personalised offers (from us and/or our carefully selected partners);
  • to administer and analyse our client base (purchasing behaviour and history) in order to improve the quality, variety, and availability of products/ services offered/provided;
  • to conduct questionnaires concerning client satisfaction; and to send you newsletters and campaign offers (from us and/or our carefully selected partners).

When we use your Personal Data we are required to have a lawful basis for doing so. There are various different lawful bases upon which we may rely, depending on what Personal Data we process and why. We may process your Personal Data where it is necessary for our legitimate interests or your legitimate interests. We may also process your Personal Data with your consent, on the grounds of entering into a contract with us, fulfilling contractual obligations or fulfilling our legal obligations.

Where we process your Personal Data for marketing purposes, you have the right to object to us using your Personal Data. If you wish to object to any of the above processing, please contact us at

We might process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered. To do this, we will ensure that:

  • the link between purposes, context and nature of Personal Data is suitable for further processing;
  • the further processing would not harm your interests; and
  • there would be appropriate safeguarding for processing.

Throughout our website ( we may link to other websites. These other third party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third party websites, please consult their privacy policies as appropriate.

Who else can access your Personal Data

Personal Data about you is in some cases provided to our trusted partners in order to either
make providing the service to you possible or to enhance your customer experience.

We share your Personal Data with:

  • Wix/Concrete CMS
  • Airtable
  • Free Agent
  • Class Dojo
  • G-Suite (google)
  • One Drive/Outlook
  • Meta
  • Mailer Lite
  • Sync

We only work with processing partners who are able to ensure adequate levels of protection to your Personal Data and when it is required for specific purposes.

We may also disclose your Personal Data to third parties or public officials when we are legally obliged to do so. This may include sharing children's Personal Data with the consultants we engage with for the purposes of providing our services. We might disclose your Personal Data to third parties if you have consented to the disclosure.

How we secure your data

We do our best to keep your Personal Data safe. We use safe protocols for communication and transferring your Personal Data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and< attacks.

Even though we try our best we cannot guarantee the security of information. We will notify you if there is a high risk to your rights and freedoms as a result of the data breach. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.

If you have an account with us, note that you have to keep your username and password secret.

Google Analytics

We use Google Analytics to measure traffic on our website. Google has their own Privacy Policy which you can review here. If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page.

How long we keep your Personal Data

We will retain your Personal Data for as long as necessary for the purposes we have set out above. At your request or if you do not engage with us for a period of 3 years, we will review and may delete any information that we no longer have a legitimate reason to retain. Your Personal Data may be retained longer by the third parties listed above in accordance with their privacy policies.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at the contact details contained within this Privacy Policy.

You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Helpline number: 0303 123 1113

ICO website:

Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy From time to time and will

Last reviewed: November 2023


You can have another section underneath

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Give this section a heading

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sign up for regular news

Want to hear our news regularly? Sign up here for our monthly newsletter, full of tips, tricks and up-to-date information!

You can unsubscribe anytime. For more details, review our Privacy Policy.