THRIVE MATHS

PRIVACY POLICY

Last updated: July 2026

Thrive Maths ("we", "us", "our") provides online GCSE and school-level maths tuition. This policy explains how we collect, use, store and protect personal data belonging to our students, parents/guardians, and website visitors, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Because many of our students are under 18, we take particular care over how we collect and use children's personal data, and we deal primarily with a parent or guardian for account, billing and consent purposes.

1. WHO WE ARE

Business name: Thrive Maths

Contact email: [email protected]

ICO registration: CSN8185745

If you have any questions about this policy or how we handle personal data, please contact us using the details above.

2. WHAT PERSONAL DATA WE COLLECT

We collect the following categories of personal data:

From parents/guardians (account holder):

a. Full name, email address, phone number

b. Payment details and billing history (processed by our payment provider - we do not store full card numbers)

c. Communications with us, including emails, messages and enquiry form submissions

From and about students:

a. Full name, date of birth and year group/exam board (e.g. Edexcel 1MA1)

b. School attended, current attainment level, target grades and exam dates

c. Tutoring session records, including attendance, topics covered, homework, progress notes and assessment results

d. Special educational needs or learning support requirements, where shared with us by a parent/guardian, to help us tailor tuition

e. Video, audio and chat content generated during online tutoring sessions, where sessions are recorded

Automatically collected data:

a. IP address, browser type, device information and usage data when you visit our website

b. Cookies and similar technologies (see Section 8)

3. HOW WE USE YOUR DATA AND OUR LEGAL BASIS

We only use personal data where we have a valid legal basis to do so under UK GDPR:

Purpose: Deliver tuition services
Examples: Scheduling and running lessons, tracking progress, setting homework
Legal basis: Performance of a contract

Purpose: Manage accounts and billing
Examples: Invoicing, processing payments, resolving billing queries
Legal basis: Performance of a contract / Legal obligation

Purpose: Communicate with families
Examples: Session reminders, progress updates, general correspondence
Legal basis: Performance of a contract / Legitimate interests

Purpose: Improve our service
Examples: Reviewing session notes, gathering feedback, service analytics
Legal basis: Legitimate interests

Purpose: Marketing
Examples: Newsletters, offers, promotional updates (opt-in only)
Legal basis: Consent

Purpose: Legal and safeguarding
Examples: Meeting legal obligations, responding to safeguarding concerns
Legal basis: Legal obligation / Vital interests

Where we rely on consent (for example, for marketing emails or session recordings), you can withdraw that consent at any time by contacting us.

4. STUDENT'S DATA

Thrive Maths tutors school-age students. We collect student data from, and communicate primarily with, a parent or guardian, who provides consent to tuition on the student's behalf and manages the account.

a. We collect only the data needed to deliver effective tuition and track exam progress.

b. We do not use student's data for marketing purposes.

c. Tutors who access student data are subject to confidentiality obligations and, where required, appropriate safeguarding checks.

d. Parents/guardians can request access to, or deletion of, their child's data at any time (see Section 7).

5. SESSION RECORDINGS

Some online tutoring sessions may be recorded for safeguarding, quality assurance and revision purposes. Where a session is recorded, we will tell the parent/guardian in advance and obtain consent. Recordings are stored securely, access is limited to authorised staff, and recordings are deleted in line with our retention schedule (Section 6) or earlier on request.

Where a recording is shared with a student and/or parent for revision purposes, it remains the property of Thrive Maths and may only be viewed for the student's own personal benefit; it must not be copied, downloaded, shared, or used for any other purpose. Full terms governing use of shared recordings are set out in our Terms and Conditions.

6. HOW LONG WE KEEP DATA

Data type: Active tuition and account records
Retention period: Duration of tuition relationship
Reason: To deliver the service

Data type: Financial records (invoices, payments)
Retention period: 6 years after the tax year they relate to
Reason: HMRC/legal requirement

Data type: Session recordings
Retention period: Up to 1 month, unless required for a safeguarding matter
Reason: Quality assurance / safeguarding

Data type: Enquiry data (no booking made)
Retention period: Up to 12 months
Reason: Responding to and following up enquiries

After the relevant retention period, personal data is securely deleted or anonymised.

7. YOUR RIGHTS

Under UK GDPR, you (or, in respect of a child's data, their parent/guardian) have the right to:

a. Access the personal data we hold about you

b. Have inaccurate data corrected

c. Request erasure of your data, in certain circumstances

d. Restrict or object to certain processing

e. Request a portable copy of your data

f. Withdraw consent at any time, where processing is based on consent

g. Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled

ICO contact: ico.org.uk or telephone 0303 123 1113.

To exercise any of these rights, contact us using the details in Section 1. We will respond within one month, as required by law.

8. COOKIES

Our website may use cookies and similar technologies to operate correctly, remember preferences and understand how visitors use the site. You can control cookies through your browser settings. Where required, we will ask for your consent to non-essential cookies via a cookie banner when you first visit our site.

9. SHARING YOUR DATA

We do not sell personal data. We may share data with trusted third parties who help us run Thrive Maths, always under appropriate contracts that protect your data:

a. Payment processors, to handle billing securely

b. Video-conferencing and scheduling platforms, to deliver online lessons

c. Email and CRM providers, to manage communications and bookings

d. Cloud storage and IT providers, to store records securely

e. Professional advisers (e.g. accountants) and regulators or authorities, where legally required

We do not share student data with third parties for their own marketing purposes.

10. INTERNATIONAL TRANSFERS

Where any of our service providers store or process data outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement, an adequacy decision, or equivalent standard contractual clauses.

11. DATA SECURITY

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, and staff training. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. CHANGES TO THIS POLICY

We may update this policy from time to time, for example to reflect changes in our services or the law. We will post the updated version on our website with a revised "Last updated" date, and will notify parents/guardians directly of any significant changes.

13. CONTACT US

If you have questions, concerns, or would like to exercise any of your data protection rights, please contact:

Thrive Maths - Leah McCarthy

Email: [email protected]