This Privacy Notice (“Privacy Notice") sets out how Keystone Tutors Limited and its affiliates (“Keystone Tutors,” “we,” or “us”) collect, use, share, store, transfer, protect, and remove your personal information. We respect your right to data privacy and maintain a strict policy of client and tutor confidentiality. We are committed to protecting and safeguarding your personal information. As part of this commitment, this Privacy Notice aligns with the Data Protection Act 2018, the General Data Protection Regulation (“GDPR”), and other applicable data privacy laws (collectively, “Data Protection Laws”). This Privacy Notice relates to all personal information you provide to Keystone Tutors and all personal information that Keystone Tutors holds in relation to your use of our website (the “Website”) and our services. It supplements and is in addition to our Terms and Conditions and should be read in conjunction with them.
If you have any questions about this Privacy Notice, you can contact us at: enquiries@keystonetutors.com
Who we are and our group structure
Keystone Tutors Limited is a company registered in England and Wales and is the primary operator of this Website. Depending on your location and the services you receive, your personal information may also be processed by Keystone Tutors group entities, including subsidiaries located in Hong Kong and Singapore. Where a Keystone Tutors group entity provides services to you, that entity will also act as a controller of your personal information for those services.
Data Protection Officer / privacy contact
Keystone Tutors has appointed a Data Protection Officer or equivalent privacy lead responsible for overseeing data protection compliance across the Keystone Tutors group. You can contact our Data Protection Officer at enquiries@keystonetutors.com.
Please read this Privacy Notice carefully and ensure you understand it before using our Website and services.
How we collect and use your personal information
“Personal information” refers to any information that is recorded, electronically or otherwise, that can be used alone or in combination with other information to identify a natural person or reflect the activity of a natural person.
In line with applicable Data Protection Laws, we only collect and use personal information where a lawful basis applies. Depending on the circumstances, this may include processing that is necessary to perform a contract with you, to comply with legal or regulatory obligations (including safeguarding requirements), to pursue our legitimate interests in operating and protecting our business (where those interests are not overridden by your rights), or where you have provided consent.
We collect the following personal information from you for the following purposes:
- Registration and Student Details (for Clients): This includes your name, email address, address, telephone number, your child’s name, your child’s school year and your child’s educational background. We collect such information to maintain records within our systems, enable you to create, log into, and access your account, and to contact you. We may also share such information with tutors that you have chosen to engage to facilitate them arranging for tutoring sessions with your child.
- Payment Details (for Clients): As part of the sign-up process you may be required to provide your credit card / debit card details or direct debit details, for us to subsequently receive payment from you. To ensure these details are securely held, we work with industry leaders Stripe for processing of card payments and direct debit payments and GoCardless for the processing of direct debit payments.
- Details (for Tutors): This includes your name, telephone number, email address, details of relevant teaching / tutoring experience (such as the subjects that you teach, your teaching experience, personal biography, your personal teaching approach, and testimonials), qualifications check, identity and right to work check (e.g. passport), photograph, and Disclosure and Barring Service (DBS) and other criminal records related information. We collect this information from you to facilitate our operations, enable you to create, log into, and access your account, and create suitable matches between you and students. We may also store your bank details for the purpose of making payments to you for work done through Keystone Tutors.
- Special category personal information: In limited circumstances, Keystone Tutors may process special category personal information, such as information relating to a student’s special educational needs or health where relevant to delivering appropriate tutoring support, or criminal records information required for safeguarding and vetting tutors. We limit the collection of such information to what is necessary, restrict access to authorised personnel on a need-to-know basis, and apply additional safeguards. Where required by law, we rely on explicit consent or other lawful conditions to process this information.
- Usage Data: we may also collect data regarding your use of the Website, including geographical location, browser type and version, operating system, referral source, length of visit, page views and Website navigation paths, as well as information about the timing, frequency and pattern of your use. This data is obtained through Google Analytics. Such data may include online identifiers such as IP addresses and cookie identifiers and may constitute personal information under applicable data protection laws. Where required, we obtain consent for the use of analytics cookies and similar technologies. We process usage data for the sole purpose of improving our Website and services.
- We may also process limited contact information relating to third-party consultants, suppliers, professional advisers, referrers, and other business contacts where necessary to manage our professional and contractual relationships with them.
How we disclose your personal information
We disclose personal information only where necessary to provide our services, operate our business, comply with legal or regulatory obligations (including where disclosure is necessary for safeguarding children or vulnerable individuals), protect our rights, or where you have consented to such disclosure. In safeguarding situations, we may share information with relevant authorities where required or permitted by law.
- Personal Information of Clients: If you register as a Client with us:
- We will share the broad requirements of your assignment on an anonymous basis with our tutor pool so that relevant tutors can apply for the job.
- If a tutor applies for a job, Keystone Tutors may send a link to that tutor’s profile to you. If you choose to proceed with a tutor, we will pass on your specific Registration and Student Details (as set out above) to the tutor so that the tutor knows where the tutoring will happen, so that the tutor can prepare for the assignment and the tutor can contact you to arrange lessons.
- From time to time, we may also share your Registration and Student Details, with your consent, with third parties, such as schools.
- We may share your Payment Details (as set out above) with our trusted payment partners as detailed above.
- Sanctions and compliance screening: To help us comply with legal obligations (such as checking against sanctions lists), we may share limited personal information — such as your name, date of birth, and contact details — with trusted third-party compliance screening service providers. We use this information only to perform sanctions and risk screening on our behalf, and the processor processes it in accordance with our instructions and applicable data protection laws. Personal data shared for this purpose is held only as long as needed to provide the service. Our provider hosts data within the EU/UK and otherwise maintains appropriate safeguards, and processes your information securely on our behalf as our data processor.
- Other than sharing information as outlined in this Privacy Notice, we will keep your personal information confidential within our group of companies and will not disclose it to any third parties, except as described in this Privacy Notice or where we are required to do so by law.
- Personal Information of Tutors: If you register as a Tutor with us:
- The Details (as set out above) that you provide to Keystone Tutors forms the basis of a tutor profile.
- Your profile will be published on our Website only if you have ticked the “I would like my profile published on the Keystone Tutors website” box. You can untick this at any time to remove your profile from our Website.
- Your profile contains your first name but not your surname.
- Your profile may appear in search engine results even if you have not ticked “I would like my profile published on the Keystone Tutors website”. If you would like to remove your profile from search engine results then please email enquiries@keystonetutors.com.
- Keystone Tutors may share your profile with prospective Clients. We will pass on your contact details to Clients for jobs that you have applied for, or for jobs that you have expressed an interest in. Where clients and tutors are based in different countries, including outside the United Kingdom or European Union, limited tutor information — such as tutor profile details and contact information — may be shared internationally as part of introducing tutors to clients and delivering tutoring services. Such sharing is limited to what is necessary for these purposes and is subject to the safeguards described in this Privacy Notice.
- Other than sharing information with our Clients on the basis outlined above, we will keep your personal information confidential within our group of companies and will not disclose it to any third parties, except as described in this Privacy Notice or where we are required to do so by law.
- International transfers: Keystone Tutors operates internationally and works with clients, tutors, service providers and group entities that may be located outside the United Kingdom or EU. Your personal information may therefore be accessed from, transferred to, or stored in other jurisdictions, including Hong Kong, Singapore and other locations where our group companies or service providers operate. Where we transfer personal information internationally, we implement appropriate safeguards, such as contractual protections and security measures, to ensure an appropriate level of protection.
- Third party service providers:
We use a range of trusted third-party service providers to help us operate our business and deliver our services. These include providers of:
- customer relationship management and case management systems;
- cloud productivity, email, document storage and collaboration tools;
- accounting, payment processing and payroll services;
- scheduling, booking and integration tools;
- compliance, sanctions and regulatory screening services;
- online learning, classroom and whiteboard platforms; and
- IT security, backup and technical support services.
These service providers process personal information on our behalf only to the extent necessary to provide their services to us, in accordance with our instructions and applicable data protection laws. Where required, we enter into appropriate contractual arrangements, including data processing agreements, and implement safeguards to protect personal information.
- Marketing communications and newsletters
We may occasionally send marketing communications and newsletters to existing clients about free parent advice events, educational content, and updates from the Keystone team that we think may be of interest. Where required by applicable law, we will do so on the basis of consent or where a soft opt-in applies for existing clients. We may use limited analytics within these communications to understand whether emails are opened and which links are engaged with, in order to assess the effectiveness of our communications and improve their relevance. You can opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
How we protect your personal information
We will take appropriate administrative, physical, and technical measures to safeguard your personal information from unauthorised access, collection, use, public disclosure, copying, modification, disposal or similar risks, and the loss of any storage medium or device on which personal information is stored. Your personal information will only be kept for as long as necessary for the purposes described in this Privacy Notice, including where necessary to meet legal, safeguarding, accounting or regulatory obligations. We will then delete, anonymise or securely dispose of it. In addition, we limit access to your personal information to those of staff and tutors who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your personal information, and are constantly reviewing and enhancing our security measures.
In the event your personal information is subject to any unauthorised disclosure or access or any data breach incidents ("Data Breach Incident”), we will, in a timely manner and in accordance with laws and regulations, inform you of the basic conditions and possible impacts of the Data Breach Incident, response measures that are already taken or to be taken by us, suggestions for you regarding self-prevention and risk mitigation, our recommended remedial measures for you, and other relevant information. We will inform you of such information by email or telephone. Where it is difficult or not practical for us to notify each data subject individually, we will properly and effectively issue a public notice. We will also report the handling of such Data Breach Incident to the relevant authorities in accordance with regulatory requirements.
How we use cookies
A cookie is a piece of information that web servers send to your browser file when you access a website, then when you come back to a Website again, that website will detect whether you have cookies on your browser file. We occasionally issue session cookies when strictly necessary for the operation of the website (e.g., logging into our member account area). These cookies do not hold any personal information.
We use cookies to identify which pages on our Website are being used. This helps us analyse data about web page traffic and improve our Website to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better service, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies upon each visit to our Website. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
You can find out more about what cookies are, how to control them and delete them here. Google Analytics and third-party services such as Google Maps, Twitter and Facebook may issue cookies. Further information on Google Analytics and Privacy can be found here.
Your rights in relation to your personal information
Your data protection rights depend on your location
Your rights in relation to personal information vary depending on where you are located and which data protection laws apply (for example in the UK, Hong Kong or Singapore). Keystone Tutors will respond to rights requests in accordance with applicable law.
At any point while we are in possession of or processing your personal information, you, as the data subject, have the following rights:
- Right of access - You have the right to request a copy of the personal information that we hold about you.
- Right of rectification - You have a right to correct personal information that we hold about you that is inaccurate or incomplete.
- Right to request deletion - You have the right to request for your personal information to be deleted in the following circumstances:
- If the purpose for such processing has already been achieved, is no longer achievable, or if the personal information is no longer necessary for such purpose.
- If you no longer use our products or services or if we no longer provide you with our products or services.
- If the purpose for processing has already been achieved, is no longer achievable, or if the personal information is no longer necessary for that purpose.
- Where we rely on consent as our lawful basis and you withdraw that consent.
- Any other circumstances prescribed by applicable laws.
- Right to object - You have the right to object to certain types of processing such as direct marketing and marketing communications.
- Right to data portability – You have the right to move, copy or transfer your personal information for your own purposes across different services (e.g., from us to a different service provider).
- Right to withdraw consent – Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
Please contact enquiries@keystonetutors.com if you would like to exercise any of these rights For security, you may be required to submit written requests or prove your identity by other means. We may ask you to verify your identity before handling your request.
We will generally reply to you within thirty (30) days upon verification of your identity, and will inform you if we require additional time to process your request.
We may refuse or limit a request where permitted by applicable law, for example where compliance would adversely affect the rights of others, conflict with legal obligations, or where an applicable exemption applies. If we do so, we will explain the reason, to the extent permitted by applicable law.
Third party sites
The Website may from time to time, contain links to other websites, such as our affiliates, advertisers, or other third parties. Certain functions and features on our website (such as the payment function) and services may be provided by third parties (such as payment service providers). When you access or use such third-party services, or when you click on the link to third-party websites, your personal information may be collected directly by such third-party service providers.
As these third-party websites and third-party services are not owned or operated by us, we do not assume any responsibility or liability for such third-party service providers, or the collection of your personal information by such third-party service providers. Your access to such third-party websites and third-party services, and provision of personal information to these third-party service providers are entirely at your own risk. Please check the privacy policies that apply to such third-party websites and third-party services carefully before you provide any personal information to such third-party service providers.
By accessing or using third-party websites and/or third-party services, or providing your personal information to third-party service providers, you acknowledge and agree that:
- You have read and understood such third-party service providers’ privacy policies, and acknowledge that your personal information may be collected, used, disclosed and/or processed by such third-party service providers in accordance with their privacy policies and your settings and choices.
- We do not control such third-party service providers, and the manner in which and purposes for which your personal information may be collected, used, disclosed and/or processed is determined solely by such third-party service providers as data controllers (as defined under applicable data protection laws); and
To the maximum extent permissible by law, we shall not be liable for any liabilities, losses or damages that may be incurred by you as a result of your use of any third-party websites and/or third-party services, or the collection, use, disclosure and/or processing of your personal information by any third-party service providers.
How we process the personal information of minors
A child is any person below the age of 18 or as prescribed under the applicable laws.
We will only collect and use the personal information of children where permitted by applicable law, which may include obtaining consent from a parent or guardian where required. If you are the parent / guardian of a child, by providing the personal information of such child to us, you confirm that you have the authority to do so and, where required by law, you consent to our processing of such personal information.
If we discover a child’s personal information has been collected without the required parent’s / guardian’s authorisation or consent (as applicable), we will delete the relevant personal information as soon as possible.
Changes to this Privacy Notice
The terms of this Privacy Notice may be revised from time to time and we will use commercially reasonable methods to notify you of such revisions, such as by posting a revised version of this Privacy Notice on our Website or by notifying you of the revision via email if you have provided your email address to us. This Privacy Notice was last updated on the date set out above.
Contact
If you have any questions in relation to our use of your personal information or this Privacy Notice, please contact us at: enquiries@keystonetutors.com.
Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the issue. You may also have the right to complain to your local data protection authority, such as the UK Information Commissioner’s Office (ICO), the Hong Kong Privacy Commissioner for Personal Data (PCPD), or the Singapore Personal Data Protection Commission (PDPC).
In order to verify your identity, we may require you to provide proof of your identity, as well as your contact details. We will generally reply to you within thirty (30) days upon verification of your identity, and will inform you if we require additional time to process your request.
This Privacy Notice was last updated on: 16th April 2026