Effective Date: 17/03/2026
Last Updated: 17/03/2026
This Policy applies as between you, the User of this Website and Locked In Lessons LTD the owner and provider of this Website.
This Policy explains how we collect, use, store, and protect your personal data when you use:
- our website
- our learning platform (LearnWorlds)
- our services
We are the data controller for the purposes of UK data protection law.
Locked In Lessons Ltd
Company Number: 17081708
Registered address:
7 Diseworth Close, Derby, United Kingdom, DE73 6XE
Email: lockedinlessonsltd@gmail.com
This Privacy Policy applies to:
- Parents or guardians purchasing services
- Students aged 13–17
- Students aged 18+
- Website visitors
For students under 18:
- The parent/guardian is the account holder
- The student uses the platform under parental supervision
Account: user account used to access services
Data: all personal data you provide
Services: courses, lessons, and related services
System: platform communications (chat, messaging, etc.)
Website: www.lockedinlessons.com
We may collect the following personal data:
5.1 Identity & Contact Data
- Parent/guardian name
- Student name
- Email address
- Telephone number
- Billing address
5.2 Account Data
- Login credentials
- Course enrolment
- Student age
- Predicted grades (if provided)
- Learning support information (if provided)
5.3 Educational Data
- Homework submissions
- Coursework uploads
- Teacher feedback
- Assessment results
5.4 Communication Data
- Messages between students and teachers
- Customer support enquiries
- Platform communications
5.5 Transaction Data
- Payment history
- Purchase records
Payments are processed securely via third-party providers (e.g. Stripe).
We do not store full card details.
5.6 Technical & Usage Data
- IP address
- Device type
- Browser information
- Login activity
- Platform usage
Where parents choose to provide information such as:
- Learning difficulties
- Diagnosed conditions
- Educational needs
This may be classified as special category data.
We process this:
- With explicit consent
- Only where necessary to support learning
- With restricted access
We process personal data under the following lawful bases:
7.1 Contract
To:
- Deliver courses
- Provide tutoring
- Manage accounts
- Process payments
- Provide access to the platform
7.2 Legitimate Interests
To:
- Improve services
- Monitor platform use
- Ensure safety and safeguarding
- Prevent misuse
- Protect our business
7.3 Consent
Where required for:
- Marketing communications
- Special category data
- Recording of 1:1 sessions
7.4 Legal Obligation
To:
- Comply with UK law
- Maintain financial records
- Respond to safeguarding concerns
- Respond to legal requests
- Group lessons will be recorded
- 1:1 sessions may be recorded with consent
Recordings:
- Are used for safeguarding and quality assurance
- Are accessible within the platform only
- Are not downloadable
- Are deleted after up to 12 months unless required for safeguarding or legal purposes
All communication must remain within the platform.
We:
- Monitor messages for safeguarding
- Retain chat logs for up to 12 months
- Retain longer where required for safeguarding
Teachers:
- Cannot download student data
- Cannot store data locally
- Cannot move communication to personal channels
Parents may request access to communication records.
Where necessary, we may:
- Contact parents
- Share concerns with relevant authorities
- Disclose information to protect a child
This may occur without consent where legally required.
We share data only where necessary with trusted providers:
- LearnWorlds (platform)
- Stripe (payments)
- Zoom (live lessons)
- Email providers
All providers are required to protect your data.
We do not sell personal data.
Some providers may process data outside the UK.
Where this happens, we ensure safeguards such as:
- UK adequacy decisions
- Standard Contractual Clauses
- UK International Data Transfer Addendum
We retain data as follows:
- Account data: duration of enrolment + 2 years
- Homework / submitted work: course duration + 12 months
- Chat logs: up to 12 months
- Recordings: up to 12 months
- Payment records: 6 years
After this, data is deleted or anonymised.
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion
Restrict processing
- Object to processing
- Data portability
- Withdraw consent
You may also complain to the Information Commissioner’s Office (ICO).
We implement appropriate security measures, including:
- Secure platform access
- Restricted teacher permissions
- Encrypted payment processing
- Secure hosting
This Website uses cookies.
Please refer to our
Cookie Policy for full details.
We are not responsible for external websites linked from our platform.
We may update this Privacy Policy at any time.
The latest version will always be available on our Website.
