Privacy Policy

Nurture & Shine Education

Last updated: 15 October 2026

1. Introduction

At Nurture & Shine Education, we are committed to protecting your privacy and handling personal information responsibly, securely and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, make an enquiry, book tuition, participate in our online educational services, purchase resources or communicate with us.

We recognise that we work with children and families and take the protection of children's personal information particularly seriously.

We aim to comply with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

Business name: Nurture & Shine Education

Website: www.nurtureandshineeducation.co.uk

Privacy contact email: hello@nurtureandshineeducation.co.uk

Business correspondence address: Nurture and Shine Education, The Walsall Hub, 1902 Green Lane, Walsall, WS2 8HE

Business legal name: Nurture and Shine Education

Nurture & Shine Education is the data controller for personal information we determine how and why to use in operating our educational services.

If you have any questions about this policy or how we handle personal information, please contact us using the details above.

3. Information We Collect

Depending on how you interact with our business, we may collect:

Parents, carers and customers

• Names and contact details, including email addresses and telephone numbers.

• Booking and tuition enquiries.

• Details of purchased services and educational resources.

• Billing and transaction information.

• Communications, feedback and reviews.

Children attending our educational services

• Names, ages and school year groups.

• Information about learning needs, interests, progress and educational goals.

• Work completed during lessons.

• Information parents or carers choose to share to help us provide appropriate educational support.

• Attendance and participation information.

Where necessary, we may also process information relating to additional learning needs, disabilities or health requirements. Such information may require additional legal protections.

Website visitors

• Information submitted through contact forms.

• Technical information such as IP addresses, browser types and device information.

• Cookie and website usage information, depending on the website settings and your choices.

School and professional contacts

• School names and publicly listed institutional contact details.

• Professional names, roles and business contact information where relevant.

• Records of enquiries, correspondence and marketing preferences.

We only aim to collect information reasonably necessary for our services and business activities.

4. How We Use Your Information

We may use personal information to:

• Respond to enquiries and communicate with parents, carers, schools and customers.

• Arrange and deliver online tuition and home education classes.

• Adapt educational activities to pupils' learning needs.

• Manage bookings, attendance and payments.

• Provide purchased downloadable educational resources.

• Maintain appropriate safeguarding and administrative records.

• Respond to concerns, complaints or requests.

• Improve the quality of our educational services.

• Meet legal, financial and regulatory obligations.

• Promote our educational services where permitted by law.

We do not sell children's personal information or use children's educational records for unrelated marketing.

5. Our Legal Bases for Processing Personal Information

Under UK data protection law, we must have an appropriate lawful basis for processing personal information.

Depending on the circumstances, these may include:

Contract: Where processing is necessary to provide booked tuition, classes or purchased resources.

Legitimate interests: Where processing is necessary for reasonable business purposes, such as responding to relevant enquiries, managing services, protecting our business or undertaking lawful business-to-business marketing, provided individuals' rights are appropriately considered.

Legal obligation: Where we must process or retain information to comply with the law.

Consent: Where consent is required, including certain types of marketing or optional activities.

Vital interests: Where processing is necessary to protect someone's life in an emergency.

Where we process special category information, such as certain health or disability information, we will identify an additional lawful condition under Article 9 of the UK GDPR before doing so.

We will not rely on consent where another lawful basis is more appropriate simply because a parent or carer has supplied information.

6. Children's Privacy and Safeguarding

Protecting children's privacy is particularly important to Nurture & Shine Education.

We aim to:

• Collect only the information needed to provide educational support.

• Communicate appropriately with parents and carers.

• Use children's information only for legitimate educational, safeguarding and administrative purposes.

• Keep educational records securely.

• Restrict access to children's information.

• Avoid publishing children's personal details without an appropriate lawful basis.

• Provide age-appropriate explanations about how information is used.

We will not publish identifiable photographs, videos, testimonials or examples of children's work for promotional purposes without the necessary permissions and an appropriate data protection lawful basis.

Any online lesson recording must be covered by appropriate arrangements and privacy information before recording takes place.

Recording arrangements: We do not currently record live online tuition or home education classes. If we introduce recording in future, we will update this notice and tell families in advance, explaining the purpose, lawful basis, what will be captured, who can access recordings, how they will be protected and when they will be deleted. We will favour tutor-only recordings of teaching materials. Where consent is the appropriate basis, we will obtain it before recording. Turning cameras off does not prevent voices, names or chat from identifying children.

7. Online Lessons and Third-Party Services

Nurture & Shine Education may use third-party technology providers to deliver online teaching, manage bookings, host our website, process payments and communicate with customers.

These may include:

• Wix, for website hosting, bookings and related services.

• Google Meet, for online teaching and video meetings.

• Gmail (also known as Google Mail), for business email communications.

• Payment providers connected to our website.

These providers may process information on our behalf or act as independent data controllers for certain activities.

We aim to use appropriate providers and safeguards when sharing personal information.

Other services and storage used: We use Wix for our website and bookings, Google Meet for live online tuition, and Gmail (Google Mail) for business email communications. Personal information may also be stored on the business owner’s personal computer.

8. Payments

Payments for tuition, classes or downloadable resources may be processed through third-party payment providers.

We may receive transaction information necessary to administer purchases, issue receipts and maintain financial records.

Where payment card details are handled directly by a payment provider, that provider's privacy and security arrangements also apply.

Payments: Payments are made through the checkout on our Wix website, with proceeds paid into our business bank account. Wix and the payment provider operating the selected checkout method process the information needed to complete payments, prevent fraud and administer refunds. We receive payment status and transaction details for bookings and accounting. The payment provider’s own privacy notice also applies; its identity is shown with the payment method at checkout.

9. Marketing Communications to Schools

Nurture & Shine Education may contact schools and other educational organisations to introduce relevant educational services, assemblies and teaching resources.

We may obtain school contact information from official school websites, public educational registers or directly from schools.

Where personal information is involved, we will identify an appropriate lawful basis and comply with applicable data protection requirements.

Before sending promotional emails, we distinguish corporate subscribers from individuals, sole traders and certain partnerships. We may send relevant marketing to corporate subscribers without prior PECR consent where lawful, identify ourselves and offer an opt-out. Where personal information is used, we also establish an appropriate UK GDPR lawful basis. We do not assume that every school address is a corporate subscriber.

We will identify our business in marketing messages and provide a clear way to opt out.

Recipients can request that we stop sending promotional emails by replying with UNSUBSCRIBE or contacting us at our published business email address.

We will maintain appropriate suppression records to help ensure that marketing objections are respected.

10. Marketing to Parents and Families

We may send information about our tuition, classes, educational resources or other services where permitted by law.

Marketing emails to individuals, including parents and sole traders, are sent only with consent or where the customer soft opt-in lawfully applies. We use the soft opt-in only where we obtained the contact details directly during a sale or negotiations for a sale, market our own similar services, and offered a clear opt-out both when collecting the details and in every message. An opt-out alone is not permission to email a new individual prospect.

You can withdraw marketing consent or object to direct marketing at any time.

Booking a tuition session does not automatically mean that you have agreed to receive all future marketing communications.

11. Cookies and Website Analytics

Our website is hosted on Wix and uses cookies and similar technologies. Cookies are small files stored on your device. Essential cookies support security, fraud prevention, sessions and the operation of the website and its booking and checkout functions.

Wix’s published examples include XSRF-TOKEN for fraud detection (session), svSession for security and core functions (12 months), and SSR-caching for rendering performance (24 hours). These are examples from Wix’s platform guidance; the exact cookies depend on the features used and may change.

Where optional analytics, functional or advertising technologies are enabled and consent is required, we will request consent before using them. Essential cookies do not require consent where they are strictly necessary to provide a service you request.

You can block or delete cookies through your browser settings, although this may affect bookings, checkout or other functions. Where a cookie-consent banner or settings control is displayed, you can use it to accept or reject optional categories and change your choices.

Further cookie information: Wix explains its cookie purposes and durations at https://support.wix.com/en/article/cookies-and-your-wix-site. Cookies used by additional booking or payment features may differ from the examples above. Contact us using the privacy contact details in this policy if you need further information about cookies on our website.

12. Sharing Personal Information

We may share personal information where reasonably necessary with:

• Service providers supporting website operation, bookings, communications, payments or online lessons.

• Professional advisers where appropriate.

• Public authorities or safeguarding organisations where legally required or justified.

• Other parties where you have authorised the sharing or where another lawful basis applies.

We do not sell personal information to third-party marketing companies.

We will not disclose children's educational information to unrelated third parties for advertising purposes.

13. International Data Transfers

Wix and Google (Gmail and Google Meet) operate internationally. Information used for website visits, bookings, email and live online lessons may therefore be processed outside the United Kingdom, including in Europe, Israel and the United States, depending on the service and provider.

International transfers must have the protection required by UK data protection law. This may involve UK adequacy regulations (recognition that a destination provides adequate protection) or approved contractual safeguards, with additional measures where necessary.

Provider safeguards: Wix’s Data Processing Addendum provides for applicable adequacy arrangements or contractual safeguards for international transfers. Google’s published transfer framework describes adequacy arrangements, including the UK Extension to the EU–US Data Privacy Framework for covered transfers to certified US entities, and standard contractual clauses where required. The mechanism depends on the receiving entity, destination and service; these arrangements do not mean that all information stays in the UK. Further details: https://www.wix.com/about/privacy-dpa-users and https://policies.google.com/privacy/frameworks. You may contact us for more information about safeguards relevant to your information.

14. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including relevant educational, safeguarding, financial and legal obligations.

Retention periods depend on the type of information and why it is held.

For example:

• General enquiries that do not lead to a booking: delete 12 months after the last substantive contact from the enquirer.

• Routine tuition notes, pupil work and attendance: keep while tuition is ongoing, review annually, and normally delete 12 months after the final lesson. Records needed for a safeguarding concern, complaint or legal obligation are handled separately.

• Invoices, receipts, payment and tax records: retain for five years after the 31 January Self Assessment submission deadline for the relevant tax year. For example, records for 2025–26 are retained until at least 31 January 2032. Longer retention applies where required for a late return, HMRC enquiry or other applicable obligation.

• Marketing contacts: review annually and remove from the active marketing list after 12 months without a substantive response, enquiry or purchase from the recipient, or sooner if they opt out. Sending another marketing email does not itself restart this period. Keep only the minimum contact identifier, opt-out date and preference needed on a suppression list for as long as we carry out marketing that could otherwise contact them; review this need annually.

We review retention at least annually and securely delete or anonymise information when its retention period ends. A documented, necessary extension may apply for an unresolved complaint, legal claim, safeguarding matter, official inquiry or legal requirement. Keeping the business running is not, by itself, a reason to keep all personal information indefinitely.

Safeguarding and child protection records: keep separately from routine tuition records. Our adopted baseline for a child protection file is retention until the child’s 25th birthday, with an annual review of access and continuing need. This is a business policy informed by education-sector guidance, rather than a universal statutory deadline for private tutors. Records concerning allegations against an adult are retained for 10 years from the allegation or until that adult’s normal pension age, whichever is later, subject to applicable guidance on the case outcome. Longer periods apply where required by law, an official inquiry, ongoing proceedings or relevant safeguarding or insurer requirements; the reason and review date will be recorded. These records are not subject to the routine 12-month deletion rule.

15. Keeping Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These may include access controls, secure account credentials, appropriate software security settings and restricted access to confidential educational information.

No online system can guarantee absolute security, but we aim to maintain safeguards appropriate to the information we process.

16. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Be informed about how your information is used.

• Request access to your personal information.

• Ask for inaccurate information to be corrected.

• Request deletion of information in certain circumstances.

• Request restrictions on how information is used.

• Object to certain processing, including direct marketing.

• Request data portability where applicable.

• Withdraw consent where processing relies on consent.

These rights are subject to legal conditions and exceptions.

Parents and carers may be able to exercise rights on behalf of their children where appropriate. Children's own rights and understanding will also be considered.

To make a request, please contact us using the business email address provided in this policy.

17. Complaints

If you have concerns about how Nurture & Shine Education handles personal information, please contact us first so we can investigate.

You also have the right to raise a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Telephone: 0303 123 1113

18. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal obligations or data handling practices change.

The latest version will be published on our website with an updated revision date.

We encourage visitors, parents, carers and customers to review this page periodically.

Nurture & Shine Education

*Nurture. Grow. Shine.*

www.nurtureandshineeducation.co.uk

Privacy enquiries: hello@nurtureandshineeducation.co.uk