Privacy and cookies

What we do with your information, in plain English.

You are trusting us with information about your child. This page explains what we collect, why we use it, how long we keep it, who we share it with, and the rights you have over it.

Who is responsible
Mundamind Education LLP
Registered with the ICO
ZC189077
How to reach us about it
admin@mundamindeducation.co.uk
Last updated
19 September 2026

What we hold, and why.

To teach your child

Their name and year group, what the assessment found, the level they are working at, their progress and attendance, and your contact details.

We hold this because you have asked us to teach your child and we cannot do it otherwise. It is part of the arrangement between us, not something you are asked to agree to separately. The legal basis. Your own contact details: our contract with you. Your child’s name, address, date of birth and attendance: our legal obligation as an Ofsted-registered provider. Everything else we hold to teach them: our legitimate interests — teaching your child well, which we cannot do without a record of what they can already do and how they are getting on.
To keep children safe, and to satisfy the law

Safeguarding records where they arise, the information our Ofsted registration requires us to keep, and our financial records.

We hold this because we are required to. A safeguarding record exists to protect a child rather than to serve us, which is why it is not ours to delete on request. The legal basis. Safeguarding records: the recognised legitimate interest of protecting a child from harm, and, where they contain health or similar information, the substantial public interest condition for safeguarding children. The records Ofsted requires, and our financial records: our legal obligation.
Health and additional needs, where you tell us

Anything you share about a medical condition, an allergy, or an additional need — so a tutor can teach your child properly and keep them safe.

We ask for this only where it matters for their teaching or their safety, we keep it separately from everything else, and access is limited to the people who need it. The legal basis. We ask for your explicit consent to hold it. In a medical emergency, where your child cannot consent, we rely instead on protecting their vital interests. If a safeguarding concern arises and asking permission first would put your child at risk, we rely on the safeguarding condition.
Photographs, and anything you let us quote

Images of a child, and words from a parent or student used on this website or in our materials.

For photographs and quotations we ask separately for permission. Saying no does not affect your child’s tuition, and you can withdraw it later. The legal basis. Your consent, and nothing else. Withdraw it and we stop.

Where information is about your child, it usually comes from you, from your child, from our assessment, and from the records we create while teaching them.

Who we share it with.

We do not sell information about you or your child, and we do not pass it to anyone for their own marketing.

  • Nobody, for most of itWhat we hold to teach your child stays with us and the people here who need it.
  • Where the law requires itSafeguarding information can have to go to Ofsted, to the local authority, or to the police. That is a duty rather than a choice, and it is the one disclosure we cannot let you refuse.
  • Google and Meta, only if you allow itIf you accept analytics or advertising, this website sends those companies events about pages visited and whether an enquiry or booking followed. We do not send the contents of your enquiry, assessment information, or child-identifying health, SEND, safeguarding, school or grade information to Google or Meta.
  • Anyone you ask us toIf you want us to speak to your child’s school, we will — and only then.
  • The companies whose systems we use to run the centreWe do not run our own email, booking system or website, so a few suppliers hold some of this on our behalf and may use it for nothing of their own. Microsoft 365 holds our email and our files. Cal.com and Calendly hold the name and contact details you give when you book an assessment. Hostinger hosts this website and holds whatever you send through a form on it. WhatsApp, which is part of Meta, holds the messages you exchange with us if you message us.
  • Anthropic (Claude)Limited administrative assistance, using minimised information. Our internal rules prohibit identifiable SEND, health, safeguarding or other special-category information about a pupil from being entered.

Some of it is held outside the UK. Most of these companies are based in the United States; our website host is in Lithuania. Where information leaves the UK it travels under the contract terms the law provides for exactly that — the UK’s international data transfer addendum, or the standard clauses approved for it. We read each supplier’s own terms to check this rather than assuming it.

How long we keep it.

  • Two years from the date it is recordedThe details Ofsted requires us to hold as a registered childcare provider — your child’s name, address and date of birth, your own contact details, and the days and times they attend.
  • Six years after your child leavesTeaching and assessment records, including progress notes — long enough that we can still answer a question about the work we did, or resolve a disagreement about it, years later.
  • Until your child turns 25Safeguarding and welfare records. We keep these far longer than anything else about the teaching, because a concern raised in childhood can matter long after a child has left us.
  • 75 yearsIf a record relates to an allegation or a case of child sexual abuse, it is kept for 75 years and reviewed periodically. That follows the recommendation of the national Inquiry into Child Sexual Abuse, which found it can take decades before someone feels able to come forward. Records are destroyed only on our Designated Safeguarding Lead’s authority.
  • Six yearsPayments, invoices and receipts. Company law and tax law each set their own shorter minimum; we keep one six-year rule so nothing is destroyed early by accident.
  • Twelve monthsIf you enquire and your child never starts with us, we keep what you sent for twelve months after we last hear from you, then delete it or strip your name from it — unless there is a lawful reason to keep something for longer.
  • For as long as we rely on it, then six yearsA permission you have given us, and the record of what you agreed to and when. We keep the minimum evidence afterwards so we can show what was agreed.

Cookies, and what this website measures.

Nothing that tracks you runs on this site until you say it may. When you first arrive you are asked, and you can say no to everything except the parts that make the site work.

You can change your mind at any time — Cookie settings sits in the footer of every page, and it reopens the same choices.

Essentialalways on

Used to remember your privacy choices and to provide functions the site needs to work. It does not tell us who you are, it is never used for advertising, and it cannot be switched off — without it the site could not remember that you said no.

Analytics — Google Analyticsoff unless you allow it

How many people visit, which pages they read, and where they give up. We want it because we have never been able to see whether this website helps anyone, and we would rather find out than guess. It reaches Google Analytics through Google Tag Manager.

Advertising — Google Ads and Metaoff unless you allow it

Whether our advertising reaches the families we are for. If you allow it, Google and Meta may set cookies, and this website sends them events — the pages visited, and whether an enquiry or an assessment booking followed. Meta also receives some of those events from our own systems rather than from your browser.

What is never sent: anything you write to us, your child’s name or date of birth, their school, their health or SEND information, safeguarding information, assessment results or grades. Those never reach an advertising or analytics company.

What you can ask us to do.

Ask by email, by phone, or in person. You do not need to put it in writing or use any particular form of words, and requests are normally free of charge. We respond normally within one month — and in the circumstances where the law allows longer, we will tell you why.

  • Show me what you holdWe give you a copy.
  • Correct itIf something is wrong, we fix it.
  • Delete itWe delete what we can. We will tell you plainly if something must be kept, and on what ground — safeguarding and financial records are the usual reasons.
  • Stop using my permissionWithdraw a permission for photography, quoting, or cookies, and we stop. Your child’s place is unaffected.
  • Object to what we are doing with itTell us you object and we stop, unless we can show a reason that outweighs your objection or the law requires us to continue. Ask, and we will explain which applies.
  • Pause it, or take it elsewhereAsk us to restrict what we do with something while a question about it is settled, or to give you a copy in a form you can pass to somebody else.

If you are not satisfied with how we handled it, you can complain to the Information Commissioner’s Office. You do not need our permission and you do not need to come to us first.

ico.org.uk · 0303 123 1113

Ask us anything about this.

If something here is unclear, or you want to know exactly what we hold about your child, say so and we will tell you.