Privacy Policy

This privacy policy applies between you, the User of this Website, and StudyBox Ltd, the owner and provider of this Website. StudyBox Ltd takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website. Please read this privacy policy carefully.

1. Who we are

StudyBox Ltd is a company incorporated in England and Wales with registered number 10254220. Our registered office is at Unit 1 Kensington Court, 108 Manor Road, Wallington, SM6 0DW.

We are registered with the Information Commissioner’s Office (ICO) as a data controller. For any privacy-related queries, please contact us at info@studybox.london.

2. Definitions

Data All information that you submit to StudyBox Ltd via this Website, including personal data as defined under UK GDPR.
Cookies Small text files placed on your device by this Website when you visit certain parts of it or use certain features.
UK GDPR The UK General Data Protection Regulation — Regulation (EU) 2016/679 as retained in UK law by the European Union (Withdrawal) Act 2018, as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019, and as further amended by the Data (Use and Access) Act 2025.
DPA 2018 The Data Protection Act 2018.
StudyBox Ltd, we, us, our StudyBox Ltd, as described above.
User or you Any third party that accesses this Website and is not employed by or engaged as a consultant to StudyBox Ltd.
Website The website at www.studybox.london and any sub-domains, unless expressly excluded by their own terms.

3. Scope of this privacy policy

This privacy policy applies only to the actions of StudyBox Ltd and Users with respect to this Website. It does not extend to any third-party websites accessible from this Website, including links to social media platforms.

4. Data we collect

We may collect the following personal data from you:

  • Name (parent/guardian and pupil)
  • Contact information, including email address and telephone number
  • Child’s school year and subjects of interest
  • Centre preference (Sutton, Wallington, Croydon or West Malling)
  • IP address (automatically collected)
  • Web browser type and version (automatically collected)
  • Operating system (automatically collected)
  • Pages visited and time spent on the Website (automatically collected via analytics cookies)
  • Marketing interaction data (e.g. which ads you clicked on)

5. Lawful basis for processing

We process your personal data on the following lawful bases under UK GDPR Article 6:

  • Consent — where you have given us explicit consent (e.g. opting in to marketing communications, or accepting non-essential cookies).
  • Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and preventing fraud, provided these interests are not overridden by your rights.
  • Legal obligation — where we are required to process data to comply with a legal requirement.

6. How we use your data

We use the personal data we collect for the following purposes:

  • To respond to your enquiry and book a free trial lesson
  • To provide tuition and related services
  • For internal record keeping and administration
  • To improve our Website, services and marketing
  • To send you promotional materials about our services, where you have opted in or we have a legitimate interest to do so
  • To conduct market research and analyse the effectiveness of our advertising

7. Data retention

We retain enquiry and contact form data for up to 24 months from the date of your last interaction with us, after which it is securely deleted. If you become a student or customer of StudyBox, we retain relevant records for 6 years from the end of our relationship, in line with our legal obligations.

8. Third-party services and processors

We use the following third-party services which may process your personal data on our behalf or in their own right:

  • Google Analytics (GA4) — website analytics. Data may be transferred to Google servers in the USA. Google Privacy Policy.
  • Google Ads — advertising and conversion tracking. Google Privacy Policy.
  • Meta (Facebook/Instagram) — advertising and the Meta Pixel, which tracks interactions with our Website for ad optimisation. Meta Privacy Policy.
  • Contact Form 7 — form submission handling on our Website.
  • FluentSMTP / email delivery provider — used to deliver email notifications from our forms.
  • Cookie Script — cookie consent management.
  • GoDaddy / Cloudflare — web hosting and content delivery.

All third-party processors are required to handle your data in accordance with UK GDPR and our data processing instructions. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (see Section 12).

9. Sharing your data

We will not sell or rent your personal data to any third party. We may disclose your data to:

  • Our third-party service providers, as listed above, to the extent necessary to operate the Website and deliver our services
  • Law enforcement or regulatory authorities where we are required to do so by law
  • A prospective or actual purchaser of our business or any part of it, where data transfer is necessary and appropriate safeguards are in place

10. Your rights under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access — you have the right to request a copy of the personal data we hold about you (a Subject Access Request). This is free of charge and we will respond within one calendar month.
  • Right to rectification — you have the right to ask us to correct any inaccurate or incomplete data we hold about you.
  • Right to erasure — you have the right to ask us to delete your personal data where there is no legitimate reason for us to continue processing it.
  • Right to restrict processing — you have the right to request that we restrict the processing of your data in certain circumstances.
  • Right to data portability — you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.
  • Right to object — you have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Rights related to automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.
  • Right to withdraw consent — where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@studybox.london. We will respond within one calendar month of receiving your request.

11. Right to complain

If you believe we have not handled your personal data in compliance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

12. International data transfers

Some of our third-party service providers (including Google and Meta) may store or process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, including relying on the UK’s adequacy decisions, the UK–US Data Bridge, or standard contractual clauses approved by the ICO, to ensure your data receives an equivalent level of protection.

13. Security

Data security is of great importance to StudyBox Ltd. We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our Website is served over HTTPS and hosted on secure, managed infrastructure.

Transmission of information over the internet carries inherent risks. While we take all reasonable precautions, we cannot guarantee the absolute security of data transmitted to the Website.

14. Links to other websites

This Website may provide links to third-party websites. We have no control over those websites and are not responsible for their content or privacy practices. This privacy policy does not extend to your use of such websites. We recommend you read the privacy policy of any website you visit.

15. Changes of business ownership and control

StudyBox Ltd may from time to time expand or reduce our business, which may involve the sale or transfer of control of all or part of the company. In such cases, personal data held by us may be transferred to the new owner, who will be bound by the terms of this privacy policy.

16. Cookies

This Website uses cookies in accordance with the Privacy and Electronic Communications Regulations (PECR) and the Data (Use and Access) Act 2025. We use a cookie consent tool to obtain your consent before placing non-essential cookies.

We use the following categories of cookies:

  • Strictly necessary cookies — essential for the operation of the Website (e.g. security, form submission). No consent required.
  • Analytics cookies — help us understand how visitors use the Website (e.g. Google Analytics). Placed only with your consent.
  • Marketing/targeting cookies — used to deliver relevant advertising (e.g. Meta Pixel, Google Ads). Placed only with your consent.
  • Functionality cookies — remember your preferences to improve your experience. Placed only with your consent.

You can manage or withdraw your cookie consent at any time via the cookie banner on this Website, or by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of the Website.

17. Direct marketing

We will only contact you for direct marketing purposes where you have consented to receive such communications, or where we have a legitimate interest and you have not opted out. You may opt out of marketing communications at any time by emailing info@studybox.london or clicking the unsubscribe link in any marketing email.

18. General

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any provision of this privacy policy is found to be invalid, illegal or unenforceable, the remaining provisions shall continue in full force and effect.

This privacy policy is governed by the law of England and Wales. All disputes arising under it shall be subject to the exclusive jurisdiction of the English and Welsh courts.

19. Changes to this privacy policy

We reserve the right to update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the updated policy.

If you have any questions about this privacy policy, please contact us at info@studybox.london.

Last updated: June 2026