Privacy Policy

Version 0.1 · August 2026

1. Who we are

Haidar Web Services Ltd, trading as Level Up Tuition Centre, is the data controller for the personal data described here. We are registered in England and Wales under company number 17327578, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office under reference ZC209253.

For anything about your data, contact hello@leveluptuition.uk.

2. The short version

We collect information in two stages. At enquiry we ask only for the parent's name, email and mobile, the child's year group and subjects, and optionally the child's first name and school. At enrolment, once a place is confirmed, we ask for what we genuinely need to teach and look after your child — including medical information such as allergies, asthma or epilepsy.

We keep those stages apart on purpose. Health information about a child should not travel through a website contact form, and most enquiries never become enrolments — so we do not gather it until we need it. We do not sell data and we do not share it for advertising.

3. What we collect and why

Stage one — when you enquire.

DataWhyLawful basis
Parent/carer name, email, mobile To reply to your enquiry, confirm a place, and contact you about sessions Legitimate interests (responding to an enquiry you made); once enrolled, performance of a contract
Child's year group and subjects To place your child in the right class and check we have capacity Legitimate interests, then contract
Child's first name and school (optional) So we can talk about your child by name, and so we can see what they are covering in class and line our teaching up with it Legitimate interests — both fields are optional and you can leave them blank
Anything you type in the free-text box To answer what you asked Legitimate interests
Marketing preference To send revision tips and centre news, only if you tick the box Consent — withdrawable at any time
Payment records To take fees and keep lawful accounting records Contract, and legal obligation
Attendance records (enrolled pupils) To run sessions and tell you how your child is getting on Contract

Stage two — when your child enrols. None of this is collected through the website. We ask for it on an enrolment form once a place is confirmed.

DataWhyLawful basis
Child's full name and date of birth To register your child, take a register, and know who is on site Contract
Emergency contact names and numbers So we can reach someone quickly if your child is unwell or hurt Contract; vital interests in an emergency
Medical information — allergies, asthma, epilepsy, medication, and any condition we need to know about To keep your child safe, respond correctly in an emergency, and brief the teacher who is with them Special category data. We rely on your explicit consent (Article 9(2)(a)), and on vital interests (Article 9(2)(c)) if we ever have to act in an emergency and cannot ask you first
Additional needs / SEND information you choose to share So teaching can be adapted for your child Explicit consent — you decide how much to tell us
Collection arrangements — who may collect your child Safeguarding: we do not release a child to someone not on the list Contract; legal obligation

Where we rely on legitimate interests, our interest is running a tuition centre and responding to people who contact us. We have considered your rights and we think you would reasonably expect us to use your details this way. You can object at any time — see section 8.

Where we rely on explicit consent for health or additional-needs information, you can withdraw it at any time. If you do, we may have to tell you that we can no longer safely teach your child without it — we would rather have that conversation than teach a child whose epilepsy we do not know about.

4. Children's data

The website enquiry form is for parents and carers, not children, and it deliberately asks for very little about the child — year group and subjects, with first name and school optional.

Why medical information is not on the website form. Health data about a child is "special category" data and carries extra protection in law. Most enquiries never become enrolments, so collecting it here would mean holding children's medical records for families who never joined. We ask for it once, at enrolment, on a form you complete with us — and it is kept on paper in a locked cabinet at the centre rather than in anybody's email inbox. Only the staff teaching your child, and anyone responding to an emergency, ever see it.

We do need that information. A teacher who does not know a child carries an inhaler, or has a nut allergy, or may have a seizure, cannot keep them safe. Please tell us everything relevant on the enrolment form.

Medical and additional-needs information is shared only with the staff teaching your child and anyone responding to an emergency. It is not used for any other purpose.

5. Who we share it with

We use a small number of service providers who process data on our behalf under contract. They may only use it to provide their service to us.

We will also disclose information where we are legally required to, or where we have a safeguarding duty to share a concern with the police, children's social care or a school.

We do not sell your data, and we do not share it with advertisers or data brokers.

6. How long we keep it

7. Where your data is held

Our providers may store data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the International Data Transfer Agreement / Addendum. We will tell you more on request.

8. Your rights

You have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time — every marketing email has an unsubscribe link.

Ask us at hello@leveluptuition.uk. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

9. Cookies and tracking

This website sets no cookies of its own, uses no analytics, and does not track you across other sites. If that changes we will update this policy and ask for your consent where the law requires it.

If you click through to pay, Stripe will set its own cookies on its own pages. That is covered by Stripe's privacy policy.

10. Security

Access to enquiry and pupil data is limited to staff who need it. Online accounts are protected by multi-factor authentication. Payment card data never reaches our systems.

Enrolment records — including medical information — are held on paper in a locked cabinet at the centre. They are not emailed, not stored on a laptop, and not taken off site except in a register folder that goes to the session so that the teacher with your child knows what they need to know.

11. Changes to this policy

If we change this policy we will update the version and date at the top. Where a change materially affects how we use your data, we will tell you directly.