Privacy Notice

Last updated: 14 August 2026

Who is responsible for your information?

Candid Tutors, operated by Hassan Abbas, is the data controller for the personal information described in this notice. Questions or data protection requests can be sent to habbastutors@gmail.com.

Information we collect

We may collect the parent, guardian or student’s name, email address, telephone number, school year or current level, exam tier, learning needs, booking notes, appointment details, communications and service history. Payment card details are processed securely by Stripe and are not stored by Candid Tutors.

Because tutoring often involves children, a parent or guardian should normally make the booking and provide only information that is relevant to the tutoring service. Please avoid including medical or other sensitive information unless it is necessary for safe and appropriate tuition.

Why we use it

We use personal information to respond to enquiries, assess suitability and availability, arrange and deliver lessons, take payment, create calendar appointments, send confirmations and meeting details, keep service and accounting records, prevent fraud or misuse, and meet legal or safeguarding obligations.

Our lawful bases are taking steps at your request before entering a contract, performing our contract with you, complying with legal obligations and our legitimate interests in running, securing and improving the tutoring service. Where consent is legally required, you may withdraw it at any time.

Who receives the information?

Information is shared only where needed with providers that support the service, including website hosting and database providers, Stripe for payments, Google services for email and calendar administration, the agreed video-meeting platform, and Skool if you separately join the Foundation course. These providers process information under their own terms and privacy arrangements. We may also disclose information where required by law or to protect a person from harm.

Some providers may process information outside the UK. Where this happens, we rely on the safeguards used by those providers under applicable data protection law.

How long we keep it

Unsuccessful or inactive enquiry records are normally deleted within 12 months. Booking, payment and business records may be kept for up to six years for tax, accounting and legal purposes. Teaching notes and routine communications are kept only while they remain reasonably useful for delivering the service or handling a concern. Information may be kept longer where safeguarding or legal obligations require it.

Your rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, objection or transfer. You may also withdraw consent where processing relies on consent. Contact us using the email address above. We may need to verify your identity before responding.

If you are unhappy with how your information is handled, please contact Candid Tutors first so the concern can be investigated. You also have the right to complain to the Information Commissioner’s Office (ICO).

Security and updates

We use reasonable technical and organisational measures to protect personal information, but no online service can guarantee absolute security. This notice may be updated when the service or legal requirements change; the latest version will remain on this page.