Last updated: 26 October 2026
This privacy policy explains how Tutwoo UK Limited (“Tutwoo”, “we”, “us”) collects and uses personal information when you use tutwoo.com and tutwoo.dotcom.group (the “website”), create an account, take courses and mock exams, or join live tutoring sessions.
1. Who we are
Tutwoo UK Limited is the controller of your personal information.
Address: 167–169 Great Portland Street, Westminster, London, W1W 5PF
Email: [email protected]
If you have any questions about this policy or your information, please email us.
2. Information we collect
Information you give us
- Account details – your name, username, email address and password (stored in encrypted form) when you register.
- Profile information – anything you choose to add to your profile.
- Orders – if you buy a course or product, your billing name, address, email and order details. Card payments are handled by our payment provider; we do not see or store your full card details.
- Messages – what you send us by email, contact forms, course Q&A or reviews.
Information created when you learn with us
- Courses you enrol in, lessons completed, progress, quiz and mock exam answers and scores, and certificates issued (including your name as printed on the certificate and the certificate verification ID).
- Live tutoring bookings and attendance.
Information collected automatically
- Technical information such as your IP address, browser and device type, and pages visited, recorded in server and security logs.
- Cookies and similar technologies – see section 7.
3. How we use your information and our lawful bases
- To provide your account, courses, tests, progress tracking and certificates – necessary to perform our contract with you.
- To process orders and payments, and keep financial records – contract and legal obligation (tax and accounting law).
- To run live tutoring sessions – contract.
- To let others check that a certificate is genuine using its verification ID – our legitimate interests in protecting the value of our certificates.
- To keep the website secure, prevent fraud and fix problems – legitimate interests.
- To improve our courses and website, using aggregated information where possible – legitimate interests.
- To send service messages (for example, password resets, order confirmations and course updates) – contract.
- To send marketing emails – only with your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
- Non-essential cookies – your consent.
4. Live tutoring with Google Meet and Zoom
Some live sessions take place on Google Meet or Zoom. When you join, the session is provided by Google or Zoom, who process information such as your name, email address, audio, video and chat under their own privacy policies:
We will tell you in advance if a session is going to be recorded and how the recording will be used.
5. Who we share information with
We do not sell your personal information. We share it only where needed with:
- Service providers who help us run Tutwoo, including our website hosting provider, Cloudflare (website security, content delivery and video storage), email delivery services, and payment providers.
- Google and Zoom when you join a live session hosted on their services.
- Tutors delivering a course or live session you have joined, who can see your name and relevant progress.
- Professional advisers such as accountants and lawyers.
- Authorities where we are required by law.
Some pages contain links to courses on partner platforms. If you click these links, the partner and its affiliate network may record that you came from Tutwoo. Their own privacy policies then apply.
6. International transfers
Some of our service providers process information outside the UK, for example in the European Economic Area or the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. Cookies
We use cookies that are essential for the website to work, such as keeping you logged in and remembering items in your basket. With your consent, we may also use cookies for statistics and to improve the website. You can choose which non-essential cookies to allow using the cookie banner, and change your choices at any time.
8. How long we keep information
- Account, learning records and certificates – for as long as your account is active. If you ask us to delete your account, we delete or anonymise your information, except a minimal record of certificates issued, which we keep so that certificates can still be verified, unless you ask us to remove it.
- Order and payment records – six years after the end of the financial year they relate to, as required for tax purposes.
- Messages and support requests – up to two years after the matter is closed.
- Server and security logs – normally no longer than 12 months.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal information;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of your information where we rely on legitimate interests, and to direct marketing at any time;
- ask for information you gave us to be transferred to you or another organisation (data portability);
- withdraw consent at any time where we rely on consent.
To use any of these rights, email [email protected]. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
10. Children
Our website is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us their information, please contact us and we will delete it.
11. Security
We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), encrypted password storage and restricted access. No system is completely secure, so please use a strong, unique password and keep it private.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last changed. If we make significant changes, we will let registered users know.