Legal
Privacy Policy
Last updated 10 September 2026
Who is responsible for your information
Hearts and Heads is responsible for the personal information collected through this website. TODO: complete this with the business's confirmed details before launch. Add the legal name of the business or sole trader, a correspondence address and a privacy contact email.
Information we collect
When a parent or guardian makes an enquiry, we collect the contact details they provide and the information needed to understand the student's tuition needs: name, year group, current and target grades, exam board, learning strengths, areas where support is wanted, preferred lesson format, and any message they choose to add.
We also receive limited technical information when the website is used, such as page views and device or browser information, through Vercel Analytics. We do not send enquiry form content, names, email addresses or phone numbers to analytics, and we do not use advertising trackers.
Why we use it and our lawful basis
We use enquiry information to reply to a parent or guardian, discuss suitable tuition, arrange a lesson and prepare for it. This is necessary to take steps requested before entering into a tuition agreement and, where lessons are booked, to provide that agreement.
We may keep limited records to run the service safely and effectively, respond to questions, and protect our business. We do this for our legitimate interests, provided those interests do not override your rights and interests.
We do not sell personal information or use it for targeted advertising. We do not make automated decisions about students.
Children's information
This service is arranged through a parent or guardian. We treat parent or guardian contact details as the primary contact for students under 18 and collect only the information needed to discuss and provide tuition.
Please do not submit health information or other sensitive personal information through the website form. If information of that kind is needed to support a student appropriately, we will discuss a suitable and secure way to provide it after making contact.
Student testimonials, results or photographs are published only with appropriate permission and are anonymised where appropriate.
Who we share information with
We use service providers to host this website and, once configured, may use a booking provider and email or form-delivery provider to arrange lessons and respond to enquiries. These providers process information only as needed to provide their service to us.
TODO: complete this with the business's confirmed details before launch. List each provider in use (including website hosting, booking, email and form delivery), link to its privacy information, and state whether any transfers outside the UK are involved.
How long we keep it
TODO: complete this with the business's confirmed details before launch. Set and state a retention period for unsuccessful enquiries, active student records and financial records. Keep information only for as long as needed for the purpose collected or to meet a legal obligation.
Your rights and how to complain
You can ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, or a copy of information you provided. You may also object to processing based on legitimate interests. Contact us using the privacy contact details above and we will respond in line with applicable data-protection law.
You can complain to the Information Commissioner's Office (ICO) if you are unhappy with how your information has been handled. Visit ico.org.uk or call 0303 123 1113.
