How we use your personal information.
What personal data we collect, why we use it, who we share it with, how long we keep it, and your rights, including additional rights for US residents.
New York Law Tutors® is a trading name of London Law Tutor Ltd. This privacy policy is the same one that applies across London Law Tutor and all of its websites, so references to “LLT”, “we”, “us” and “our” include New York Law Tutors.
Last updated: 7 November 2026
Clients in the United States: our US Local Terms also apply to you. They set out the rights you have under US and New York law and take priority over this policy where the two differ.
We take the privacy of our clients, students, tutors and website visitors very seriously. This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it and what your rights are. It is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
London Law Tutor Ltd (company number 08253481) is the controller of your personal data. Our registered office is Berkeley Square House, Berkeley Square, London W1J 6BD. We are registered with the Information Commissioner’s Office (ICO) under registration number ZA236376. This policy covers all of our trading names and websites, including New York Law Tutors, London Law Tutor, London Tutors, Law Tutors Online, UK Law Tutor, UK Law Notes and Law Assessment.
For any question about your personal data, or to exercise your rights, email enquiries@newyorklawtutor.com with “Data Protection” in the subject line, or write to us at our registered office.
2. The personal data we collect
- Contact and identity details: your name, email address, telephone or WhatsApp number, postal address and, where a parent or guardian orders for a student, their details too.
- Study details: your university, school or college, course, year of study, modules, exam dates, academic goals and any work or materials you share with us.
- Order and payment details: the services you order, quotes, invoices and payment records. Card payments are processed by our payment providers and we do not store your full card details.
- Communications: emails, WhatsApp and chat messages, call notes and feedback.
- Session and learning data: session schedules, tutor notes and, where you use them, records from our online learning platforms.
- Website data: your IP address, device and browser information and how you use our websites, collected through cookies and similar technologies (see section 9).
- Special category data: we do not ask for this, but you may choose to tell us about a health condition, disability or personal circumstances, for example so that we can adapt your tutoring or support an academic appeal or extenuating circumstances claim.
- Tutors, writers and applicants: your CV, qualifications, references, right to work information, bank details for payment and, where you will teach students under 18, background check information.
We collect this data directly from you, from a parent, guardian or organisation that books on your behalf, from our website forms and live chat, and from our payment providers. If you give us information about another person, please make sure they know you are doing so and have seen this policy.
3. Why we use your data and our lawful bases
- To respond to enquiries, prepare quotes and provide our services, including matching you with a tutor, scheduling sessions and delivering Materials. Lawful basis: performance of a contract with you, or steps taken at your request before entering into one.
- To take payments, keep accounts and meet tax and other legal obligations, including the checks we make under the Skills and Post-16 Education Act 2022. Lawful basis: legal obligation, and contract.
- To run and improve our business and websites, train our team, handle complaints, prevent fraud and protect our legal rights. Lawful basis: our legitimate interests in running a safe, effective business, balanced against your rights.
- To send you news about our services. Lawful basis: your consent or, for existing clients, our legitimate interests (see section 4).
- To use special category data you choose to share. Lawful basis: your explicit consent, or where necessary to establish, exercise or defend legal claims. You can withdraw consent at any time.
- To recruit and pay tutors and writers. Lawful basis: contract, legal obligation and our legitimate interests in ensuring our tutors are suitable.
We may use software tools, including AI assisted tools, to help our team match students with suitable tutors and manage bookings. A member of our team always reviews and makes the final decision. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Marketing
If you are a client, or have asked us for a quote, we may email or message you about similar services of our own. You can opt out at any time, and every message will include a simple way to do so. We will only send marketing to anyone else if they have given consent. We do not sell your data, and we never pass your details to third parties for their own marketing.
To stop marketing messages, use the unsubscribe link, reply “STOP”, or email us. We will keep a record that you have opted out so that we do not contact you again.
5. Who we share your data with
We only share your data where needed, and only the minimum required:
- Our tutors, consultants and writers, who receive the details they need to provide your services. They are bound by confidentiality obligations.
- Service providers who act for us, under written contracts that require them to protect your data. These include website and form hosting, email and cloud storage providers, our live chat provider (Zendesk), video conferencing platforms used for online sessions, our online learning platform, and our accountants and professional advisers.
- Payment providers, such as PayPal and our card payment processor, who process your payment and may use your data under their own privacy policies.
- Messaging platforms, such as WhatsApp, if you choose to contact us that way.
- HMRC, regulators, the police or courts, where the law requires it.
- A buyer of our business, if we sell or transfer all or part of it, in which case your data will continue to be protected in line with this policy.
Where a parent, guardian, employer or institution has booked and paid for services for a student, we may share attendance and progress information with them as part of the arrangement.
6. International transfers
Some of our service providers, and some of our tutors who teach students in other jurisdictions, are based outside the UK. When we transfer personal data outside the UK, we make sure it is protected: either the country is recognised by the UK as providing adequate protection (for example, through the UK Extension to the EU-US Data Privacy Framework), or we use the ICO’s International Data Transfer Agreement or Addendum, or the transfer is necessary to perform our contract with you. You can ask us for more information about these safeguards.
7. How long we keep your data
- Client records, orders, invoices and correspondence: 6 years after our last contract with you ends, to meet tax requirements and in case of legal claims.
- Enquiries and quotes that do not lead to an order: 2 years after our last contact.
- Complaint records: 6 years after the complaint is closed.
- Live chat transcripts: up to 2 years.
- Marketing preferences: until you opt out, after which we keep a minimal suppression record.
- Unsuccessful tutor and writer applications: 12 months. Tutor and writer records: 6 years after the relationship ends.
After these periods, we securely delete or anonymise the data.
8. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you (a subject access request);
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where there is no good reason for us to keep it;
- ask us to restrict how we use your data;
- object to our use of your data based on legitimate interests, and to direct marketing at any time;
- ask us to transfer data you gave us to another organisation (data portability);
- withdraw your consent at any time, where we rely on consent; and
- not be subject to decisions based solely on automated processing that significantly affect you.
To exercise any right, contact us as shown in section 1. There is usually no charge. We may need to confirm your identity first. We will respond within one month, which may be extended by up to two further months for complex requests, in which case we will tell you why. We will carry out a reasonable and proportionate search for the data you ask for.
9. Cookies and similar technologies
Cookies are small files placed on your device when you visit a website. When you first visit our website, a cookie banner lets you accept all cookies, reject all optional cookies or choose which categories to allow. Optional cookies and the third party services that set them are only loaded if you agree.
- Essential (always on): needed for our website and its forms to work and to remember your cookie choice (our “llt_consent” cookie, kept for 6 months).
- Live chat: our Zendesk live chat widget, which uses cookies and similar technologies to keep your chat session.
These third party providers process data under their own privacy policies. You can change or withdraw your consent at any time by clicking Cookie settings, which also appears at the bottom of every page. You can also block or delete cookies through your browser settings, although some parts of our website may not then work properly.
10. Keeping your data secure
We use appropriate technical and organisational measures to protect your data, including secure (encrypted) connections on our websites and payment pages, access controls and confidentiality obligations for our team and tutors. Email is not always secure, so please do not send card details or other highly sensitive information to us by email. If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay.
11. Children
Our services are mainly for students aged 16 and over. Where a student is under 18, we ask a parent or guardian to place the order and act as our main contact. We do not knowingly collect personal data online from children under 13 without the consent of a parent or guardian.
12. Complaints about how we use your data
If you are unhappy with how we have used your personal data, please contact us first, as shown in section 1 or under our Complaints Policy. We will acknowledge your complaint within 30 days (and we aim to do so within 2 working days), investigate it without undue delay, keep you informed and tell you the outcome.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
13. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the date it was last updated. If we make significant changes, we will tell our clients directly.
14. Additional information for residents of the United States
This section applies if you live in the United States. It adds to the rest of this policy and takes priority where the two differ.
No sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral or targeted advertising. We have not done so in the past 12 months, and we do not disclose personal information to third parties for their own direct marketing.
Your choices and rights. Wherever you live in the US, you can ask us to tell you what personal information we hold and give you a copy, correct it, delete it (unless we must keep it for a legal or contractual reason, which we will explain), and stop sending you marketing. If you live in a state with a consumer privacy law that applies to us, such as California, Colorado, Connecticut, Virginia, Texas or New Jersey, you may also have the right to opt out of profiling and targeted advertising, to limit the use of sensitive personal information and to appeal our decision on your request. We will not discriminate against you for using your rights.
How to make a request. Email enquiries@newyorklawtutor.com with “Privacy Request” in the subject line. We will confirm receipt within 10 business days and respond within 45 days (extendable once by 45 days, with reasons). We may need to verify your identity. You may use an authorized agent with your signed permission. If we decline your request, you can appeal by replying with “Appeal” in the subject line; we will respond within 60 days, and if your appeal is denied you may contact your state Attorney General.
California. In the past 12 months we have collected the categories of personal information in section 2 (identifiers, education information, commercial information, internet activity and sensitive information you choose to share), from the sources and for the purposes described in sections 2 and 3, and disclosed them for business purposes to the recipients in section 5. We keep each category for the periods in section 7.
Global Privacy Control. If your browser sends a GPC signal, we treat it as a choice to turn optional cookies off. See our Cookie Policy.
Emails, calls and texts. Our marketing emails identify us, include our mailing address and a simple way to unsubscribe, as the CAN-SPAM Act requires. We will not send marketing calls or texts using automated technology without your prior express written consent, as the Telephone Consumer Protection Act requires, and consent is never a condition of buying from us. Reply “STOP” to opt out.
Security and breaches. We maintain reasonable administrative, technical and physical safeguards for the information of New York residents, as required by the New York SHIELD Act (General Business Law § 899-bb), and will notify you of a security breach as required by General Business Law § 899-aa and other applicable state laws.
Children and minors. We do not knowingly collect personal information online from children under 13, in line with the Children’s Online Privacy Protection Act (COPPA). For students aged 13 to 17, we ask a parent or guardian to order, and we process a minor’s information only as strictly necessary to provide the services requested, in line with the New York Child Data Protection Act. We never sell it or use it for advertising.
Complaints. If you are unhappy with how we have handled your information, please contact us first. You may also contact the Attorney General of your state; in New York, the Bureau of Internet and Technology of the New York State Attorney General.
