Privacy Policy
Last Updated: 20th October 2025
Introduction
StudyVista Education Limited (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring your personal information is handled securely and lawfully. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, enquire about our services, or make a purchase.
We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy applies to all visitors, parents, and students who use our website or communicate with us electronically.
The Information We Collect
We collect and process the following types of personal information:
When you enquire or contact us:
-
Name, email address, and phone number
-
The subject or service you’re interested in
-
Any additional information you include in your message
When you register or make a purchase:
-
Account login details (if applicable)
-
Billing and payment details (processed securely through our payment provider)
-
Purchase history and digital downloads
When you sign up for newsletters:
-
Name and email address
When you complete academic consultations:
-
Student’s first name, subject(s) of interest, and areas for improvement
-
Parent/guardian name and contact details
We do not collect any personal data directly from minors under 18. All communications and registrations must be completed by an adult (parent or guardian).
How We Collect Your Data
We collect data through:
-
Contact forms on our website
-
Direct email correspondence
-
Account registration and payment forms
-
Newsletter sign-up forms
-
Academic consultation forms
We do not use automated analytics or third-party tracking tools such as Google Analytics or Meta Pixel.
How We Use Your Information
We use your personal information to:
-
Respond to enquiries and provide requested information
-
Deliver and manage tutoring services and digital content purchases
-
Maintain accurate records for operational, safeguarding, and financial purposes
-
Communicate service and product updates via newsletters (optional subscription)
-
Improve our services and website functionality
We do not sell or trade your personal data.
Legal Basis for Processing
We process personal data only where we have a lawful basis under UK GDPR:
-
Responding to enquiries and providing educational services - Contract
-
Processing payments and purchases - Contract
-
Safeguarding and child protection - Legal obligation & vital interests
-
Sending newsletters and updates - Consent
-
Improving website performance and operations - Legitimate interests
Data Sharing
We share personal data only when necessary for our operations and in accordance with data protection laws.
This may include:
-
Payment processors (e.g., Stripe, PayPal) for secure transactions
-
Email and cloud providers (for internal communication and storage)
-
Regulatory or safeguarding authorities (where legally required)
All third-party providers we use are bound by contractual agreements to ensure GDPR compliance and data security.
Data Storage and Security
We take appropriate technical and organisational measures to protect your data, including:
-
Encrypted cloud storage and password-protected systems
-
SSL-secured website for all online communications
-
Restricted access to authorised staff only
-
Regular backups and secure deletion protocols
All data is hosted within the United Kingdom and is not transferred outside the UK.
Data Retention
We retain personal data only as long as necessary for the purposes described in this policy and in accordance with our Record and Retention Policy:
-
Student and parent information - 3 years after last session or academic year end
-
Tutor records and contracts - 6 years after engagement ends
-
Safeguarding records - 25 years or until the child turns 30
-
Financial records - 6 years
-
Marketing preferences - Until consent is withdrawn
-
Website logs and enquiries - 1 year
After these periods, data is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the following rights:
-
Access – Request a copy of the data we hold about you.
-
Rectification – Correct inaccurate or incomplete information.
-
Erasure – Request deletion of your personal data (subject to legal obligations).
-
Restriction – Limit how we process your data.
-
Data portability – Receive your data in a structured format.
-
Object – Object to processing, including direct marketing.
-
Withdraw consent – Where processing is based on consent (e.g., newsletters).
Cookies
We use essential cookies to ensure our website functions properly.
Users may be asked to consent to cookies on their first visit.
For detailed information on how cookies are used and how to manage your preferences, please refer to our Cookies Policy.
Children’s Privacy
Our website is intended for parents and guardians.
We do not knowingly collect personal data directly from minors under 18.
Any student data (first name, subject, academic progress) is collected only with parental consent and handled in accordance with our Data Protection Policy.
Data Breach Procedure
In the unlikely event of a data breach, we will:
-
Notify the Information Commissioner’s Office (ICO) within 72 hours if required by law
-
Inform affected individuals if there is a high risk to their rights and freedoms
-
Take immediate steps to contain and investigate the breach
Policy Updates
StudyVista Education Limited reserves the right to update this policy at any time. Any amendments will be posted on our website and will take immediate effect upon publication.
Contact Us
f you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:
Data Protection Officer (DPO)
Name: Neal Connor
Email: info@studyvista.co.uk
Phone: +44 (0)330 133 1695
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.ukif you believe your data has been mishandled.
