Privacy

Who we are

UPrep is run by Abdulrehman Shaker as a sole trader. Contact: uprep.tutors@gmail.com · 07305 601684.

When you send an enquiry

We collect your name, whether you're a parent, student or other, your email and phone, and the year group, exam and lesson format you pick. The form has no free-text box, and please don't send us medical, health, disability, special educational needs or safeguarding details through it; we'll talk about what your child needs when we call. We use it only to reply to you and, if you'd like lessons, to arrange a consultation.

Our legal basis: taking steps you've asked for before any agreement, or our legitimate interest in answering your question.

Who sees it

Only UPrep. Your enquiry is stored with Google (Firebase), which handles it only on our instructions. Once it's stored, our system emails the details you entered to our own UPrep Gmail inbox (also run by Google), so we can reply to you quickly. We never sell your information or use it for marketing.

Where it's kept: your enquiry is stored and handled in London, in the UK. Outside the UK: Google may still process some of it outside the UK, including in the USA. Google is signed up to the UK's adequacy regulations for the US (the "UK Extension" to the EU–US Data Privacy Framework), and its Firebase data processing terms also include standard contractual clauses, which you can read at firebase.google.com/terms/data-processing-terms or ask us for.

Keeping the form safe

When you start filling in the form, we use reCAPTCHA (through Firebase App Check) to check the message comes from our website and not an automated program. Google provides reCAPTCHA to us as a service provider working on our instructions, under our Google Cloud terms, and uses the information only to provide that security check. It looks at technical information about your browser and device, and Google may set a necessary cookie on its own domain (_GRECAPTCHA) for its risk check; Firebase App Check keeps a short-lived verification token in your browser's storage (firebase-app-check-database). To stop repeated or automated sending, we also keep a scrambled (hashed) version of your network address, normally for no more than 48 hours, and Google's systems record technical details of the request (such as your network address and browser) in our server logs, which are kept for 30 days. Our legal basis: our legitimate interest in keeping the form working and free of abuse.

How long we keep it

If no lessons follow, we delete your enquiry 12 months after we last spoke, together with its alert record and our alert email. If lessons follow, it becomes part of your tuition record, and we'll give you our full privacy information for lessons when they start.

Your rights

You can ask to see, correct or delete your information, or object to how we use it.

Complaints: email uprep.tutors@gmail.com with the subject "Data protection complaint". We'll acknowledge it within 30 days and tell you the outcome. You can also contact the Information Commissioner's Office: ico.org.uk · 0303 123 1113.

What we store in your browser

We don't use analytics, advertising or tracking cookies. We store just two things of our own: your "Interface sounds" choice, if you use that switch, so the site remembers it; and a sign-in token, only if you log in to the portal. To object to the sounds setting, leave the switch off or clear this site's data in your browser settings. We don't share either of them. Only if you start filling in the enquiry form, Google's reCAPTCHA may set a necessary cookie (_GRECAPTCHA), and Firebase App Check keeps a short-lived verification token, used solely to check the form isn't being sent by an automated program. They aren't used for anything else, and they don't appear if you only browse the site.

Families and tutors

If your child has lessons with us, read our privacy notice for parents and pupils and the short version for children. If you tutor for UPrep, read our tutor privacy notice.

Last updated 1 October 2026.