Privacy Policy

Last updated: 28 June 2026

Who we are

This policy explains how Sessioned Ltd ("Sessioned", "we", "us") collects and uses your personal data. Sessioned Ltd is the data controller for the personal data described here. We are a company registered in England & Wales (company no. 17253480), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the UK Information Commissioner's Office (ICO), registration reference ZC172644. Our data protection contact is Archie Perkins — hello@sessioned.co.uk.

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and password. Tutors also provide qualifications, subjects, and profile photos.

Payment information: Payment card details are collected and processed securely by Stripe. Sessioned does not store your full card number or bank details.

Usage information: We collect data about how you use the platform, including pages visited, searches made, sessions booked, and messages sent.

2. How We Use Your Information

We use your information to: provide and improve the Sessioned platform; process bookings and payments; match students with relevant tutors; send booking confirmations and reminders; respond to support requests; prevent fraud and ensure platform safety.

Our lawful bases (UK GDPR Article 6): performance of our contract with you (creating your account, processing bookings and running sessions); our legitimate interests (operating, securing, improving and promoting the platform, and preventing fraud); your consent (for non-essential cookies and any optional marketing — which you can withdraw at any time); and compliance with a legal obligation (for example, keeping financial records). Where we process a child's data, we rely on the consent of their parent or guardian.

3. Information Sharing

We do not sell your personal information. We share limited information with the following processors and parties: Stripe (payment processing), Supabase (database, authentication and file hosting), Resend (transactional email delivery), and 8x8 / Jitsi (running your live video sessions); and with tutors (your name and session details when you book). Tutor profiles, including name, photo, qualifications, and reviews, are publicly visible on the platform.

International transfers: some providers (for example Stripe for payments, and our email and hosting providers) may process data on servers outside the UK, including in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards — such as the UK's adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses — to keep your data protected.

4. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure password storage, and regular security reviews. Payment processing is handled entirely by Stripe, which is PCI-DSS Level 1 certified.

5. Your Rights (GDPR)

If you are in the UK or EEA, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing; receive your data in a portable format. To exercise any of these rights, contact us at hello@sessioned.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113 — though we'd appreciate the chance to resolve your concern first.

6. Children's and Young People's Data

Sessioned is used by children and young people under 18, and protecting their data is something we take particularly seriously. Under UK GDPR, children's personal data is given special protection, and the following applies.

Accounts for under-18s must be created and managed by a parent or guardian. When you sign up on behalf of a child, you do so as their parent or guardian and you provide consent for us to process their data for the purpose of arranging and delivering tutoring sessions.

For a child using Sessioned, we may process: the child's first name, year group or academic level, the subjects they are studying, their bookings and session history, messages they exchange with tutors through the platform, and any session notes a tutor records. We collect only what we need to connect the child with a tutor and run their sessions. We do not use children's data for advertising or profiling, and we never sell it.

A child's session activity takes place on the Sessioned platform, with messaging kept on-platform so that parents and guardians retain visibility of communication between their child and a tutor.

As the parent or guardian, you have the right to access the personal data we hold about your child, ask us to correct it, request its deletion, or withdraw your consent at any time. To do any of these, contact us at hello@sessioned.co.uk and we will respond promptly.

If you believe a child's data has been provided to us without appropriate parental consent, please contact hello@sessioned.co.uk and we will remove it.

7. Cookies

We use essential cookies to keep you logged in and remember your preferences. We may also use analytics cookies to understand how the platform is used. You can manage cookie preferences in your browser settings.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. financial records for tax purposes).

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on the platform.

10. California Residents (CCPA/CPRA)

Sessioned is operated from the United Kingdom and is intended for users in the UK. If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of that information, and not to be discriminated against for exercising your rights. We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA), and we do not use it for cross-context behavioural advertising. To exercise any of these rights, contact us at hello@sessioned.co.uk.