Privacy policy and terms

This explains what The Learn Labs collects, why, and what rights you have over it under UK GDPR and the Data Protection Act 2018. It covers two things: this website (thelearnlabs.co.uk), and the products we build for customers (dashboards, apps, websites, software and marketing work), once you become a customer. Website terms are in section 9.

1. Who we are

The Learn Labs is operated by Hamzah Qureshi, trading as The Learn Labs, based in the UK. For data protection purposes, we act as the data controller for enquiry and marketing data collected through this website, and as a data processor for the session, homework, progress and other data your own tutors and staff put into the products we build for you once you are a customer. You remain the controller of that data.

2. What we collect, and why

When you fill in the booking, enquiry or "keep me posted" forms on this site, we collect your name, business or school name, email address, optional phone number, an approximate number of students, the services you are interested in, and anything you write in the message field. If you book a call, we also record the time slot you choose. We use this solely to respond to your enquiry and, if you go ahead, to scope and set up your project. We do not use it for marketing you have not asked for, and we do not sell or share it with third parties.

The lawful basis for this is our legitimate interest in responding to enquiries from businesses that have contacted us. If you join our updates list, the basis is your consent, which you can withdraw at any time. Once you become a customer, the lawful basis for processing tied to your products is performance of our contract with you.

This site does not use cookies or tracking analytics, so there is nothing to opt out of here. The demos on the home page run in your browser using sample data, and nothing you type into them is sent to us.

3. Where it is stored

Enquiry and booking data is stored with our database provider, Supabase. Access is locked down so that submissions can only be added through this website, never read back. Only we can view them, signed in directly to the database. Email notifications and confirmations are sent via SendGrid, and calls may be scheduled via Zoom and Microsoft 365 calendar sync. These providers act as our sub‑processors and only see the minimum data needed to do their job, for example an email address to send a message to.

These providers may process data on servers outside the UK or EEA (for example, in the United States). Where that happens, they do so under standard contractual clauses or an equivalent recognised safeguard, as required by UK GDPR.

4. How long we keep it

Enquiry data is kept for as long as it is useful to our conversation with you, and deleted if nothing comes of it after a reasonable period. For customers, project and product data is kept for as long as you are using the product. If you leave, your data is exported to you and then deleted from our systems within a reasonable period, unless we are required to keep certain records for longer, for example invoices, for tax purposes.

5. If you become a customer: your students' and parents' data

Your dashboard or app will hold further personal data entered by your own tutors, students and parents: things like session records, homework, messages, attendance and progress notes, and billing details. That data belongs to you as the tutoring business or school, stays visible only to the logins you control, and is exported and deleted on request if you ever leave. There is no visibility across different customers. You are responsible for having a lawful basis to collect and process that data (typically your own agreement with parents and students), and for your own privacy notice to the families you work with. We can advise on this as part of onboarding, but it is not a substitute for your own legal review.

Children's data. Much of the data held in tutoring and school products relates to students under 18. We do not collect this data directly or use it for our own purposes. It is entered and controlled by the business as part of running their sessions. Customers are responsible for ensuring they have appropriate parental consent or another lawful basis for processing their students' data, in line with UK GDPR's additional protections for children.

AI features. If you choose features that use AI, such as drafting progress notes, the content is processed by an AI provider only to produce the draft. A person at your business reviews and approves anything before it is sent, and we agree which provider is used and what data it sees before a feature goes live.

6. Marketing and content work for customers

If we run ads, social media, short-form video or email campaigns for you, we may need access to your advertising and social accounts, brand assets, and in some cases images or video of your tutors or students. We only use these to deliver the agreed work. We will not publish any content showing students or other identifiable people unless you confirm that the right consents are in place, and we will agree this with you before filming or posting. Ad platforms such as Google and Meta have their own privacy practices, which apply to anything collected through ads. Marketing results vary and are never guaranteed.

7. Your rights

Under UK GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data deleted in certain circumstances; restrict or object to how we use it; withdraw consent; and receive a copy of it in a portable format. To exercise any of these, email us using the details below and we will respond within one month. If you are not satisfied with how we have handled your data, you have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

8. Getting in touch

Questions about any of this, or a request to see, correct or delete your data, email admin@thelearnlabs.co.uk. The Learn Labs is operated by Hamzah Qureshi, trading as The Learn Labs, United Kingdom.

9. Website terms

• Using this site. This site is for information about our services. You may browse it and contact us through it. Please do not misuse the forms, attempt to disrupt the site, or send unlawful or harmful content.
• Demos and examples. The demos, screenshots, sample names and figures on this site are illustrations using sample data. They are not client data, results or guarantees.
• No guarantee of results. Statements about marketing, growth or student numbers describe the kind of work we do. Results depend on many factors outside our control and are never guaranteed.
• Quotes and projects. Nothing on this site is a binding offer. Prices and terms are agreed in writing for each project, including who owns what is built, before work starts.
• Our content. The text, design and videos on this site belong to The Learn Labs. Please ask before reusing them.
• Third-party links. We are not responsible for the content or privacy practices of other websites we link to.
• Changes and law. We may update this page from time to time. These terms are governed by the laws of England and Wales.