Privacy Policy - Bloom Tuition

Privacy Policy

Privacy Policy

Last updated: 28 March 2026

Bloom Tuition London Ltd (Company No. 16809011), trading as Bloom Tuition (“we”, “us”, “our”), is committed to protecting the privacy of our students, their parents/guardians, and visitors to our website. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our registered address is: The Heights, Northolt, UB5 4BP. Our website address is: https://bloomtuition.co.uk.

1. Data Controller

Bloom Tuition London Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: hi@bloomtuition.co.uk
Phone: 07857 758280
Website: https://bloomtuition.co.uk/contact

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

From parents/guardians: First name, last name, email address, mobile phone number, and any information you provide in your enquiry message.

From or about students: School year group, academic needs, and progress information shared during tutoring sessions.

Website visitors: IP address, browser type, pages visited, and other technical data collected automatically through cookies and analytics tools (see Section 7 below).

3. How We Collect Your Data

We collect personal data when you complete our website contact or consultation form, communicate with us via email, phone, or WhatsApp, enrol your child in our tutoring services, or browse our website (via cookies and analytics — see Section 7).

4. Why We Process Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

Consent (Article 6(1)(a)): When you submit our contact form, you consent to us using your data to respond to your enquiry. Where you opt in, we may also send you occasional marketing updates about our services. You can withdraw consent at any time by contacting us.

Performance of a contract (Article 6(1)(b)): When you enrol your child for tutoring, we process your data to deliver our services, schedule sessions, and manage billing.

Legitimate interests (Article 6(1)(f)): We may process data for the purposes of improving our services, maintaining website security, and understanding how visitors use our site, provided this does not override your rights.

5. Children’s Data

As a tutoring service for children aged 5–18, we recognise the importance of protecting children’s personal data. We only collect children’s data (such as school year and academic needs) with the knowledge and consent of their parent or guardian. We do not collect personal data directly from children under the age of 13 without parental consent. All children’s data is stored securely and used solely for the purpose of delivering our tutoring services.

6. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following types of service providers who assist us in running our business:

Our CRM and student management system: To manage student records, session scheduling, and invoicing. Your data is stored securely within this system.

Website analytics (Google Analytics): We use Google Analytics via Google Site Kit to understand how visitors use our website. This data is anonymised where possible. Google’s privacy policy is available at https://policies.google.com/privacy.

Our tutors: Relevant student information is shared with assigned tutors to deliver effective tutoring sessions.

All third-party service providers are required to process your data securely and in accordance with applicable data protection laws.

7. Cookies

Our website uses cookies — small text files stored on your device — to help us improve your experience and understand how our site is used. Specifically, we use:

Essential cookies: Required for the website to function properly, including WordPress session cookies and security cookies.

Analytics cookies: Google Analytics cookies (e.g. _ga, _gid) help us understand how visitors interact with our website. These cookies collect anonymised information about page visits and traffic sources.

Performance cookies: LiteSpeed Cache cookies to serve cached pages and improve site loading speed.

You can control or delete cookies through your browser settings. Disabling cookies may affect the functionality of our website.

8. How Long We Keep Your Data

Enquiry data: If you contact us but do not become a customer, we retain your data for up to 12 months, after which it is securely deleted.

Customer and student data: We retain records for up to 3 years after your child’s last session with us, or longer if required for legal or accounting purposes.

Website analytics data: Analytics data is retained in accordance with Google Analytics’ data retention settings (typically 14 months).

9. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include secure hosting with SSL encryption, access controls limiting who can view personal data, and regular reviews of our data handling practices.

10. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing: You can ask us to temporarily stop processing your data in certain circumstances.
Right to data portability: You can request that we transfer your data to another organisation in a structured, commonly used format.
Right to object: You can object to the processing of your data where we are relying on legitimate interests.
Right to withdraw consent: Where we process data based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at fabiovirgi@gmail.com. We will respond within one month.

11. Marketing Communications

Where you have opted in via our contact form, we may send you occasional updates about our services, offers, and educational content. You can unsubscribe at any time by contacting us at fabiovirgi@gmail.com or by clicking the unsubscribe link in any marketing email.

12. Complaints

If you are unhappy with how we have handled your personal data, we would encourage you to contact us first so that we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk
Phone: 0303 123 1113

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.