Mindbuilders Ltd trading as 11 plus made simple
This policy explains how Mindbuilders Ltd trading as 11 plus made simple (referred to as the "Owner," "we," or "us") collects, uses, and protects your Personal Data when you use our online 11 plus tutoring services and website ("this Application"). We are committed to protecting your privacy and handling your data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Owner and Data Controller: Mindbuilders Ltd Contact Email: admin@mindbuilders.co.uk Last Updated: 15/04/2026
1. Types of Data Collected
We collect the following types of Personal Data either directly from you or through third parties:
- Contract Data: Parents first name, last name, phone number, email address, and the childs name. This data is freely provided by the User.
- Usage Data: Tracker, Usage Data (e.g. IP addresses, time of visit, browser features). This data is collected automatically when using this Application.
- Marketing and Advertising Data: Parents first name and email address collected from our landing page. We also collect phone numbers for communication and advertising matching. This data is freely provided by the User.
- Mandatory Data: Unless specified otherwise, all data requested is mandatory and failure to provide it may make it impossible for us to provide our services.
2. Purposes and Legal Basis for Processing
We collect your Personal Data only when a legal basis under UK GDPR allows us to do so.
- Service Provision and Management:
- Data: Contract Data, Childs Name
- Legal Basis: Contractual Necessity (Provision of data is necessary for the performance of an agreement with the User).
- Communication and Reminders:
- Data: Parents Phone Number for WhatsApp
- Legal Basis: Legitimate Interests (Necessary for efficient running of the tutoring service and ease of contact).
- Direct Marketing and Advertising:
- Data: Marketing and Advertising Data
- Legal Basis: Consent (Users have given their consent for one or more specific purposes).
- Website Analytics:
- Data: Usage Data, Tracker
- Legal Basis: Legitimate Interests (Monitoring and analysing web traffic to improve our service).
- Legal Compliance:
- Data: Any Data
- Legal Basis: Legal Obligation (Processing is necessary for compliance with a legal obligation to which the Owner is subject).
3. Data Retention Time (Storage Limitation)
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
- Contract Data: Retained for the duration of the tutoring contract (up to 3 years) PLUS one full calendar year for administrative, financial, and regulatory purposes. Once this retention period expires, Personal Data shall be deleted.
- Marketing and Advertising Data: Retained until consent is withdrawn.
4. Third Party Processors (Who We Share Data With)
We use various third party providers, who act as Data Processors, to deliver our services.
- Zoom: For hosting live online tutoring sessions.
- Google Classroom and Firestore: For the virtual classroom, database management, and securing student work.
- WhatsApp: For direct real time communication for session management.
- Calendly: For scheduling and booking management.
- Godaddy: For website and landing page hosting.
- Zapier: For tool automation in passing data between our systems.
- Meta Platforms Ireland Limited: For measuring our advertising performance and delivering relevant educational content. We use the Meta Pixel and Conversions API to securely pass interaction data to Meta.
- Other Educational Tools: For educational content and digital annotation tools.
5. Website Analytics and Advertising Tracking
- Google Analytics: This is a web analysis service provided by Google Ireland Limited. We use the anonymised IP integration, which shortens Users IP addresses within member states of the European Union or in other contracting states. Personal Data processed includes Tracker and Usage Data.
- Meta Conversions API and Advanced Matching: We use Meta tracking technologies to measure the effectiveness of our advertising campaigns. When you submit your contact details through our Readiness Check we securely hash your first name, email address, and phone number before transmitting it to Meta. Cryptographic hashing converts your data into a secure unreadable format to completely protect your privacy during transmission. This process allows us to personalise our advertising and measure success without exposing your raw contact details.
- Managing Your Meta Data: We believe you should have complete control over your data. You can manage how Meta uses your information from our website in several ways directly through your Facebook or Instagram accounts. You can navigate to your Meta Ad Preferences to see which advertisers are showing you ads and hide them. Additionally you can use the Off Facebook Activity tool within your privacy settings to view the information businesses have shared with Meta and you can actively clear this history or disconnect future off Facebook activity from your account at any time.
- Cookie Policy: This Application uses Trackers and Cookies to ensure smooth functionality and measure advertising performance.
6. International Data Transfers
Data transfers may involve transferring the Users Data outside the UK and EEA (e.g. to the USA where some service providers are based). We ensure that appropriate safeguards, such as Standard Contractual Clauses, are in place for any data processed outside the UK and EEA.
7. Data Security
We take the security of your Personal Data very seriously. We implement appropriate technical and organisational security measures to protect your data against unauthorised access, accidental loss, disclosure, or destruction. Access to your data is strictly limited to authorised personnel who require it to perform their professional duties.
8. Childrens Privacy
Our tutoring services are designed for educational purposes however we strictly collect all contact information, marketing consent, and contract details directly from the parent or legal guardian. We do not process direct contact details or marketing profiles for the children taking our courses.
9. Your Rights Under UK GDPR
Users may exercise certain rights regarding their Data processed by the Owner. These rights, to the extent permitted by law, include:
- Right to Withdraw Consent: The right to withdraw consent where they have previously given it.
- Right to Object to Processing: The right to object to processing if the legal basis is not consent. Where Personal Data is processed for direct marketing purposes, they can object at any time, free of charge and without providing any justification.
- Right of Access Data: The right to learn if Data is being processed and obtain a copy of the Data undergoing processing.
- Right to Rectification: The right to verify the accuracy of their Data and ask for it to be updated or corrected.
- Right to Restrict Processing: The right to restrict the processing of their Data (in which case the Owner will not process their Data for any purpose other than storing it).
- Right to Erasure (Right to be Forgotten): The right to obtain the erasure of their Data from the Owner.
- Right to Data Portability: The right to receive their Data in a structured, commonly used and machine readable format and to have it transmitted to another controller.
- Right to Lodge a Complaint: The right to bring a claim before their competent data protection authority.
10. Legal Action and System Logs
- Legal Action: The Users Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.
- System Logs and Maintenance: For operation and maintenance purposes, this Application and any third party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.
11. How to Exercise Your Rights and Complaints
Any requests to exercise User rights can be directed to the Owner through the contact details provided below. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month.
If you are not satisfied with our response or believe we are processing your personal data incorrectly, you have the right to lodge a complaint with the Information Commissioners Office, the UK supervisory authority for data protection.
Owner Contact Email: admin@mindbuilders.co.uk