← Back to the website

Privacy notice

Last updated: September 2026

This explains what Lillie's Tutoring collects about you and your child, why, how long it is kept, and how to have it removed. It is written to be read, not to be got past.

Who is responsible

Lillie's Tutoring is a sole trader providing one-to-one online tuition. For data protection law, Lillie is the data controller. You can reach her at lillie-wood@outlook.com.

What is collected, and why

When you enquire through the booking form: your name, email address, phone number if you give one, your child's first name, their year group, what they need help with, when you are free to talk, and anything you write in the notes box. This is used to reply to you and arrange an introductory call.

If your child becomes a student, the portal also holds: the sessions booked and taught, notes on what was covered and what to practise, weekly targets, messages between you and Lillie, what has been charged and paid, and the meeting link used for sessions. This is used to teach your child, to keep you informed, and to invoice you.

Anything you choose to tell her - an EHCP, a diagnosis, an exam access arrangement, how your child is finding school. You never have to. It is held only so that sessions can be adapted to your child, and only Lillie sees it.

The legal basis

• Answering an enquiry - because you asked her to, and because it is a step towards a possible agreement between us.
• Teaching, invoicing and record-keeping - to carry out the tutoring agreement, and because tax law requires business records to be kept.
• Information about a child's needs or health - only with your consent. You can withdraw that consent at any time and she will delete it.

Who else sees it

Nobody, other than the services that run the site. No data is sold, and none of it is used for advertising.

• Supabase stores the portal's data. The database is hosted in London.
• Netlify serves the website itself.
• Microsoft (Outlook) carries email between you and Lillie.
• Netlify also receives a copy of an enquiry if, for any reason, the portal cannot take it at the moment you send it - so that it reaches Lillie either way.
• Zoom or Microsoft Teams carries the sessions themselves. Sessions are not recorded unless you are asked first and agree.

Nothing on this site is loaded from anywhere else: the fonts, the scripts and the pages all come from the site itself, so no other company learns that you visited.

Each family's account can only reach its own records. That is enforced by the database itself, not only by the website.

How long it is kept

• Enquiries that do not become students - deleted within 12 months.
• Session notes, targets and messages - kept while your child is taught, and for 12 months afterwards, in case you come back.
• Invoices and payment records - kept for six years, because HMRC requires it.
• Anything you told her about your child's needs - deleted within a month of the tutoring ending, or sooner if you ask.

These are not intentions. The database deletes each of them on that schedule itself, every night, whether or not anyone remembers. A nightly copy of the whole database is kept for 30 days so that a mistake can be undone, which means anything deleted is fully gone a month after the date above.

What the portal notices

While you are signed in, the portal notes once a minute that you are there, so Lillie can see whether a message will reach you now or later, and can tell whether an invitation ever worked. It is the time of your last visit and nothing more - not what you looked at. You can see the same about her, unless she has chosen not to share it.

Your rights

You can ask to see everything held about you and your child, to have it corrected, to have it deleted, or to be given a copy to take elsewhere. Email lillie-wood@outlook.com and she will respond within one month. There is no charge.

If you are not happy with how she has handled it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Students are children. Accounts on the portal belong to the parent or carer, not the child. One parent with more than one child here has one login, and switches between them inside it; each child's records are kept separately. Accounts belong to the parent or carer, not the child, and it is the parent who signs in. Lillie does not contact a child directly without a parent knowing.

Cookies

The website sets no cookies and there is no analytics or tracking of any kind. Signing in to the portal keeps your login and a working copy of your own records in your browser so pages open instantly; both are removed when you sign out. The portal keeps two things in your browser: a sign-in token, so you are not asked for your password on every page, and a copy of your own records, so the pages are quick and still readable if your connection drops. Both are removed when you sign out, which is worth doing on a shared or borrowed computer.