Privacy Policy
This explains what personal information GG Maths collects, why we collect it, who else sees it and what you can ask us to do about it. Most of our students are children, so the short version matters: we collect as little as we can, we do not sell anything to anyone, and we do not advertise to your child.
Last updated 31 August 2026.
Who we are
GG Maths is a maths tuition service operated by Giuliano Grasso as a sole trader, based in Southgate, London, and teaching online. For anything in this policy, including any request about your data, contact info@ggmaths.co.uk.
Giuliano Grasso is the data controller. That means he decides what is collected and why, and is responsible for looking after it.
What we collect, and why
When you send an enquiry
Our enquiry form asks for a name, email address, phone number, the level you are interested in, and a short description of the challenge you want help with. The form also records which page you submitted it from, which page you first landed on, and which website referred you — so we know which parts of the site are useful and which are not.
We use this to reply to you and to arrange a trial lesson. The lawful basis is our legitimate interest in responding to people who contact us, and, once you become a client, performance of our agreement with you.
When you message us on WhatsApp
We see your phone number, your WhatsApp profile name, and whatever you send us. We use it to answer you. WhatsApp is operated by Meta and its own terms and privacy policy apply to the message in transit.
When you join our email list
We collect your email address, and a note of which page you signed up from. We use it to send you the free resource you asked for and occasional emails about maths revision. The lawful basis is your consent, and every email has an unsubscribe link that works immediately.
When you become a student
Students get a login to our online portal. It holds a name, the login itself, and a record of the questions attempted and scores achieved, so tutors and parents can see progress. It does not hold payment details, medical information, or anything about a student's background. Lessons themselves are taught over video call.
When you simply read the site
We measure how many people visit which pages, using privacy-friendly analytics that do not identify you. See Cookies and analytics below.
Children's data
Most of our students are under 18, and we treat their information accordingly.
- We deal with the parent or guardian. Our enquiry form is addressed to parents, and bookings and billing always go through an adult.
- Our free resources are open to everyone. The practice booklets and revision pages are there for students to use, and the only thing the signup form asks for is an email address. If you are under 13, please ask a parent or guardian before signing up.
- We collect the minimum. A student's portal account holds a name, a login and their practice history. Nothing more.
- We never advertise to students. There is no advertising on this site, no advertising cookies, no tracking pixels, and we do not pass any student's details to anyone for marketing.
- Parents can ask for anything. As the parent or guardian, you can ask to see your child's data, correct it, or have it deleted, and we will act on that request.
Who else sees your data
We use a small number of established services to run the business. Each one only gets the data it needs to do its job, and none of them are permitted to use it for their own purposes.
- Formspree — delivers our enquiry form to our inbox.
- MailerLite — stores our mailing list and sends the emails. Its signup form uses Google reCAPTCHA to tell people apart from bots.
- Plausible Analytics — counts visits. Receives no personal data at all.
- Vercel — hosts the student portal.
- GitHub Pages — hosts this website.
- Google — our Business Profile, where reviews you choose to leave are public and controlled by you, not us.
- Meta / WhatsApp — carries messages you send us.
Some of these are based outside the UK. Where data is transferred abroad, it is done under the safeguards the UK GDPR requires, such as an adequacy decision or standard contractual clauses.
We do not sell personal data. We do not share it with advertisers or data brokers. We would only disclose it if the law required us to.
How long we keep it
- Enquiries that go nowhere — deleted within 24 months.
- Client records — kept while you are a client and for 6 years afterwards, because tax law requires us to keep business records that long.
- Portal accounts — deleted within 12 months of a student stopping lessons, or sooner if you ask.
- Mailing list — until you unsubscribe, then removed.
- Analytics — aggregate counts only, with nothing to link back to a person.
Cookies and analytics
We do not use tracking or advertising cookies, and we do not use Google Analytics or any advertising pixel. That is why you have not been shown a cookie banner.
We use Plausible Analytics, which is cookieless. It does not store anything on your device, does not follow you across other websites, and does not collect anything that identifies you. It records the page visited, the country, the approximate device type and where the visit came from — all as anonymous aggregate counts.
Three exceptions worth naming. Our signup form is embedded from MailerLite, and that third-party form may set cookies necessary for its own operation when it loads. That form is protected by Google reCAPTCHA, which sets its own cookies and shares some data with Google in order to tell people apart from bots. And our website stores one item in your browser's session storage — the first page you landed on — so that if you later send us an enquiry we know which page brought you here. It is cleared when you close the tab and it never leaves your browser unless you submit the form.
Your rights
Under UK data protection law you can ask us to:
- Show you what personal data we hold about you or your child.
- Correct anything that is wrong.
- Delete it, where we have no legal reason to keep it.
- Restrict or object to how we use it.
- Send you a copy in a portable format.
- Withdraw consent at any time, where consent is what we relied on.
Email info@ggmaths.co.uk and we will respond within one month. There is no charge.
Complaints
If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. If the change is significant and we hold your email address, we will tell you directly.