Privacy Policy

                                                                           September 2025

The Nurture Pod (“we”, “our”, “us”) is the Controller of the personal data you provide to us. This means we decide how your personal data is processed and for what purposes.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

We only collect the personal data necessary to deliver our tutoring services. This includes:

• Name of parent/guardian and student
• Address
• Email address
• Telephone number
• Information about the student’s learning needs, including any special educational needs (SEN) or relevant health information that may affect their learning or safety during sessions

We treat information about learning needs and SEN as special category data under UK GDPR. This type of data is only collected with the knowledge and consent of the parent/guardian, and is used solely to tailor our tutoring to meet the student’s needs and ensure their wellbeing.

Why We Need Your Data (Lawful Basis)

We process personal data under the following lawful bases:

• Contract: to deliver our tutoring services to you.
• Legal Obligation: to meet tax and accounting requirements.
• Legitimate Interests: to communicate with you about tutoring sessions and to improve our services.
• Consent: where you provide information about your child’s learning needs or special educational needs (SEN), we will only process this with your explicit consent. This information is used solely to tailor tutoring to meet your child’s needs and ensure their wellbeing. You may withdraw this consent at any time.

Children’s Data

As our services are provided to children, we only collect personal data about pupils from the school or the pupils' parents or legal guardian. We do not collect personal data directly from children.

What We Do With Your Data

• All personal data is processed by The Nurture Pod.
• We do not share your data with third parties unless required by law.
• We may use trusted third-party service providers (such as email, invoicing, or accounting software) to help deliver our services. These providers act only on our instructions and are GDPR-compliant.

Data Security

We take appropriate technical and organisational measures to ensure your data is secure, including:

• Password protection on all electronic records.
• Secure storage for any paper-based records.
• Restricting access to personal data to authorised personnel only.

How Long We Keep Your Data

• We are required under UK tax law to keep your basic personal data (name, address, contact details) for 6 years, after which it will be securely destroyed.
• Personal data used for optional updates will be kept for 1 year, unless you ask us to delete it sooner.

Thrive

Thrive has its own privacy policy. If you would like a copy then please contact us at: lauren@thenurturepod.co.uk

Your Rights

Under UK GDPR, you have the right to:

• Request access to the data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, where applicable.
• Object to or restrict the processing of your data.
• Withdraw consent at any time (where consent is the lawful basis).

To exercise these rights, please contact us at: lauren@thenurturepod.co.uk

Complaints

If you wish to raise a complaint about how we handle your personal data, please contact us first at lauren@thenurturepod.co.uk, and we will do our best to resolve the matter.

If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/