This notice explains what personal information Eureka House Tutoring collects, why we collect it, how we protect it, and what rights you have over your data. It applies to parents, guardians, and pupils who enquire about, sign up to, or receive tutoring from us.
Eureka House Tutoring (“Eureka House”, “we”, “our”) is a UK-based tutoring service preparing pupils for the 11+ and 7+ school entrance examinations. We are the data controller for the personal information described in this notice — meaning we decide what data is collected and how it is used.
We keep the information we need to deliver tutoring well and no more. The table below shows the categories of personal data we typically hold.
| Category | Examples |
|---|---|
| Parent / guardian | Name, email address, phone number, billing address, how you heard about us. |
| Pupil | First name, school year, current school, target schools, learning style notes, pastoral notes (visible only to your tutor). |
| Educational | Session reports, homework scores, topic-level progress, exam targets, written feedback from your tutor. |
| Commercial | Sessions booked, invoicing status, payment records (we do not store card numbers). |
| Communications | Emails you send us, enquiry form entries, any messages exchanged with your tutor. |
| Technical | Your child's private dashboard access token, anonymised website analytics (via Google Analytics), technical logs generated by our hosting provider. |
We do not collect special category data (such as health or ethnicity information) unless you specifically share it with us — for example, a learning difference you'd like your tutor to accommodate. Where you do, we treat it with additional care and only use it for the purpose you provided it.
We only use your data for the purposes listed below.
We will never sell your data, and we will not share it with third parties for marketing purposes.
Under UK GDPR we must have a lawful basis for processing your data. Ours are:
This gives us a sensible window to help with follow-on enquiries (for example, questions about a child who returns to us for 13+ support a year later), to defend any claim that might arise, and to operate fairly as a small business — without keeping your child's information indefinitely.
If you contact us but don't go on to book sessions, we delete or anonymise your enquiry data within 12 months, unless you've asked us to stay in touch.
At any point — during tuition or after — you can ask us to erase your data. See Your rights below. The only exceptions are records we are legally obliged to retain.
We use a small number of trusted service providers to run our business. Each of these companies processes data only on our instructions, under written contracts, and with appropriate safeguards. Where a provider is based outside the UK, we rely on the International Data Transfer Agreement (IDTA) or UK-approved Standard Contractual Clauses (SCCs).
We review this list regularly and will update this notice if we add, change or remove a provider that handles your personal data.
Under UK GDPR you have the following rights in relation to your personal data. You can exercise any of them by emailing hello@eurekahouse.co.uk. We will respond within one month and never charge a fee for reasonable requests.
You also have the right to withdraw any consent you have given us (for example, to hold progress data or to send you emails) at any time, without affecting the lawfulness of processing done beforehand.
We take the security of your data seriously. Practical measures include:
Despite every reasonable safeguard, no system is perfectly secure. If we ever become aware of a breach likely to affect your rights, we will notify you and the Information Commissioner's Office (ICO) within 72 hours, as required by law.
Because we tutor children aged 6 to 11, much of the data we hold relates to minors. We follow the ICO's Age Appropriate Design Code and apply additional care to pupil data:
We review this notice once a year and whenever we make a material change to how we handle your data. The “Last updated” date at the top of this page always reflects the current version. If a change materially affects you — for example, a new processor or a different retention period — we will email you before it takes effect.
If you have any questions about this notice, would like to exercise one of your rights, or are concerned about how we've handled your data, please get in touch first — we'd like the chance to put things right.
If we're unable to resolve your concern, you have the right to complain to the Information Commissioner's Office (the UK data protection regulator):