Privacy Policy | Hong Kong Law Tutors

Last updated: 13 November 2026

We take the privacy of our clients, students, tutors and website visitors very seriously. This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it and what your rights are. It is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003 (PECR). For clients and website visitors in Hong Kong, it is also our Personal Information Collection Statement under the Personal Data (Privacy) Ordinance (Cap. 486); see section 14.

1. Who we are

Hong Kong Law Tutors® is a trading name of London Law Tutor Ltd (company number 08253481), which is the controller of your personal data. Our registered office is Berkeley Square House, Berkeley Square, London W1J 6BD. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA236376. This policy covers all of our trading names and websites, including Hong Kong Law Tutors, London Law Tutor, London Tutors, Law Tutors Online, UK Law Tutor, UK Law Notes and Law Assessment.

For any question about your personal data, or to exercise your rights, email enquiries@hongkonglawtutor.com with “Data Protection” in the subject line, or write to us at our registered office.

2. The personal data we collect

Contact and identity details: your name, email address, telephone or WhatsApp number, postal address and, where a parent or guardian orders for a student, their details too.
Study details: your university, school or college, course, year of study, modules, exam dates, academic goals and any work or materials you share with us.
Order and payment details: the services you order, quotes, invoices and payment records. Card payments are processed by our payment providers and we do not store your full card details.
Communications: emails, WhatsApp and live chat messages, call notes and feedback.
Session and learning data: session schedules, tutor notes and, where you use them, records from our online learning platforms.
Website data: your IP address, device and browser information and how you use our websites, collected through cookies and similar technologies (see section 9).
Special category data: we do not ask for this, but you may choose to tell us about a health condition, disability or personal circumstances, for example so that we can adapt your tutoring or support an academic appeal or extenuating circumstances claim.
Tutors, writers and applicants: your CV, qualifications, references, right to work information, bank details for payment and, where you will teach students under 18, background check information.

We collect this data directly from you, from a parent, guardian or organisation that books on your behalf, from our website forms (Contact, Request a Quote and Tutor With Us) and live chat, and from our payment providers. If you give us information about another person, please make sure they know you are doing so and have seen this policy.

3. Why we use your data and our lawful bases

To respond to enquiries, prepare quotes and provide our services, including matching you with a tutor, scheduling sessions and delivering Materials. Lawful basis: performance of a contract with you, or steps taken at your request before entering into one.
To take payments, keep accounts and meet tax and other legal obligations, including the checks we make under the Skills and Post-16 Education Act 2022. Lawful basis: legal obligation, and contract.
To run and improve our business and websites, train our team, handle complaints, prevent fraud and protect our legal rights. Lawful basis: our legitimate interests in running a safe, effective business, balanced against your rights.
To send you news about our services. Lawful basis: your consent or, for existing clients, our legitimate interests (see section 4).
To use special category data you choose to share. Lawful basis: your explicit consent, or where necessary to establish, exercise or defend legal claims. You can withdraw consent at any time.
To recruit and pay tutors and writers. Lawful basis: contract, legal obligation and our legitimate interests in ensuring our tutors are suitable.

We may use software tools, including AI assisted tools, to help our team match students with suitable tutors and manage bookings. A member of our team always reviews and makes the final decision. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Marketing

If you are a client, or have asked us for a quote, we may email or message you about similar services of our own. You can opt out at any time, and every message will include a simple way to do so. We will only send marketing to anyone else if they have given consent. We do not sell your data, and we never pass your details to third parties for their own marketing.

To stop marketing messages, use the unsubscribe link, reply “STOP”, or email us. We will keep a record that you have opted out so that we do not contact you again.

5. Who we share your data with

We only share your data where needed, and only the minimum required:

Our tutors, consultants and writers, who receive the details they need to provide your services. They are bound by confidentiality obligations.
Service providers who act for us, under written contracts that require them to protect your data. These include website hosting, our form delivery service (Web3Forms), email and cloud storage providers, our live chat provider (Zendesk), video conferencing platforms used for online sessions, our online learning platform, and our accountants and professional advisers.
Payment providers, such as PayPal and our card payment processor, who process your payment and may use your data under their own privacy policies.
Messaging platforms, such as WhatsApp, if you choose to contact us that way.
HMRC, regulators, the police or courts, where the law requires it.
A buyer of our business, if we sell or transfer all or part of it, in which case your data will continue to be protected in line with this policy.

Where a parent, guardian, employer or institution has booked and paid for services for a student, we may share attendance and progress information with them as part of the arrangement.

6. International transfers

Some of our service providers, and some of our tutors who teach students in other jurisdictions, are based outside the UK. When we transfer personal data outside the UK, we make sure it is protected: either the country is recognised by the UK as providing adequate protection (for example, through the UK Extension to the EU-US Data Privacy Framework), or we use the ICO’s International Data Transfer Agreement or Addendum, or the transfer is necessary to perform our contract with you. You can ask us for more information about these safeguards.

7. How long we keep your data

Client records, orders, invoices and correspondence: 6 years after our last contract with you ends, to meet tax requirements and in case of legal claims.
Enquiries and quotes that do not lead to an order: 2 years after our last contact.
Complaint records: 6 years after the complaint is closed.
Live chat transcripts: up to 2 years.
Marketing preferences: until you opt out, after which we keep a minimal suppression record.
Unsuccessful tutor and writer applications: 12 months. Tutor and writer records: 6 years after the relationship ends.

After these periods, we securely delete or anonymise the data.

8. Your rights

You have the right to:

ask for a copy of the personal data we hold about you (a subject access request);
ask us to correct inaccurate or incomplete data;
ask us to delete your data, where there is no good reason for us to keep it;
ask us to restrict how we use your data;
object to our use of your data based on legitimate interests, and to direct marketing at any time;
ask us to transfer data you gave us to another organisation (data portability);
withdraw your consent at any time, where we rely on consent; and
not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any right, contact us as shown in section 1. There is usually no charge. We may need to confirm your identity first. We will respond within one month, which may be extended by up to two further months for complex requests, in which case we will tell you why. We will carry out a reasonable and proportionate search for the data you ask for.

9. Cookies and similar technologies

When you first visit our website, a cookie banner lets you accept or decline our optional live chat cookies. Optional cookies, and the third party services that set them, are only loaded if you agree. Our Cookie Policy lists the cookies we use. You can change or withdraw your consent at any time with the link, which also appears at the bottom of every page.

10. Keeping your data secure

We use appropriate technical and organisational measures to protect your data, including secure (encrypted) connections on our websites and payment pages, access controls and confidentiality obligations for our team and tutors. Email is not always secure, so please do not send card details or other highly sensitive information to us by email. If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay.

11. Children

Our services are mainly for students aged 16 and over. Where a student is under 18, we ask a parent or guardian to place the order and act as our main contact. We do not knowingly collect personal data online from children under 13 without the consent of a parent or guardian.

12. Complaints about how we use your data

If you are unhappy with how we have used your personal data, please contact us first, as shown in section 1 or under our Complaints Policy. We will acknowledge your complaint within 30 days (and we aim to do so within 2 working days), investigate it without undue delay, keep you informed and tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

13. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the date it was last updated. If we make significant changes, we will tell our clients directly.

14. Clients and visitors in Hong Kong

If you are in Hong Kong, we also handle your personal data in line with the six Data Protection Principles of the Personal Data (Privacy) Ordinance (Cap. 486) (the “PDPO”). In particular:

Purpose: we use your data only for the purposes set out in section 3, or directly related purposes, unless you give us your express and voluntary consent. Providing data is voluntary, but if you do not provide the information we ask for, we may not be able to provide our services.
Direct marketing: we will only use your personal data for direct marketing with your consent, as required by Part 6A of the PDPO, and we will never provide it to others for their marketing. You can withdraw consent at any time, free of charge.
Transfers: your data may be transferred to and processed in the United Kingdom and other places outside Hong Kong, as described in sections 5 and 6, with safeguards in line with the guidance of the Privacy Commissioner for Personal Data.
Access and correction: you may ask for a copy of your personal data and ask us to correct it. We will respond within 40 days, as the PDPO requires, and may charge a fee for a data access request that is not excessive, which we will tell you in advance.
Complaints: you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, at www.pcpd.org.hk or on 2827 2827.

Privacy policy.