Privacy Policy

Merton Tutors (“we”, “us”) operates the website mertontutors.com. We are the data controller for personal data collected through this site. Contact: info@mertontutors.com.

• Enquiry data.When you submit our contact form, we collect your name, email, the student’s level, and your message. We use this to respond to your enquiry. Lawful basis: legitimate interest in answering prospective clients.
• TMUA paper unlocks. To access our free TMUA past papers, you enter your email and (optionally) first name. We use the email to provide access and, if you tick the marketing box, to send TMUA preparation tips. Lawful basis: contract (delivering requested content) and consent (marketing only).
• Account data. If you purchase Premium TMUA access, we hold the email address linked to your account via our authentication provider (Clerk) and a record of your purchase. Lawful basis: contract.
• Payment data. Card payments are processed by Stripe. We never see your full card number. We retain a transaction reference and the amount paid. Lawful basis: contract and legal obligation (accounting records).
• Usage data. When you visit the site we log the URL visited, referrer, IP address, browser, operating system, device type, and approximate location (country and city derived from IP). We use this to understand how the site is used and to detect abuse. Lawful basis: legitimate interest in operating and securing the site.

We do not use advertising or tracking cookies. The only cookie we set is mt_unlock, which remembers that you have submitted your email to access the free TMUA papers. This cookie is “strictly necessary” under UK PECR and does not require consent. It expires after 90 days.

We use the following processors:

• Vercel — website hosting
• Neon — database
• Clerk — account authentication
• Stripe — payment processing
• Resend — transactional email
• Slack — internal enquiry notifications

Each operates under appropriate data-processing agreements. We do not sell your personal data to anyone.

• Enquiries: 3 years from the date of last contact
• Paper unlock emails: until you ask us to delete them
• Account and purchase records: 6 years (UK accounting requirement)
• Usage logs: 13 months

Under UK GDPR you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct or delete it
• Object to or restrict our processing of it
• Withdraw consent to marketing at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights, email info@mertontutors.com. We respond within 30 days.

Some of our processors are based outside the UK or EEA (notably in the United States). Where this is the case, transfers are protected by Standard Contractual Clauses or equivalent safeguards under UK GDPR.

We may update this policy from time to time. Material changes will be announced on the site. The “last updated” date at the top reflects the most recent version.