Privacy Policy

1. Who We Are

TutorLook is an online tutoring marketplace connecting students and families in Perth, Western Australia with qualified private tutors. We operate the website at tutorlook.online. When this policy refers to "we", "us", or "TutorLook", it means the TutorLook platform.

2. What Information We Collect

We collect two categories of information: personal information that identifies you, and platform data that we use in aggregate for research and insights.

Personal information includes:

• Account information: your name, email address, and a hashed (never plain-text) password when you create an account.
• Tutor profile data: subjects you teach, education levels, hourly rates, suburb, qualifications, degree, years of experience, bio, teaching mode (online/in-person), languages, and a profile photo if you choose to upload one.
• Messages: the content of messages sent between parents and tutors through the platform.
• Reviews: star ratings and written reviews left by parents about tutors.
• Safety checks: whether a tutor holds a Working with Children Check, police clearance, or first aid certification — as self-declared on their profile.

Platform and behavioural data includes:

• Search queries: subjects, suburbs, education levels, price ranges, and other filters used when searching for tutors.
• Interaction data: which tutor profiles are viewed, how long they are viewed, whether a message is sent, and whether a profile is saved as a favourite.
• Engagement patterns: message frequency, response rates, review submission timing, and repeat visit patterns.
• Device and connection data: IP address, browser type, operating system, and pages visited — retained for security and debugging.
• Geographic signals: suburb and location data from profiles and search activity, used to map education supply and demand by area.

We do not collect payment card numbers or financial details. If payment processing is introduced in future, it will be handled entirely by a compliant third-party processor.

3. How We Use Your Information

We use your information for two broad purposes: running the platform, and generating aggregated insights about the education market.

To operate the platform:

• Creating and maintaining your account.
• Displaying tutor profiles to parents searching for tutors.
• Facilitating messages between parents and tutors.
• Sending transactional emails such as welcome messages, message notifications, review notifications, and password resets.
• Detecting and preventing fraud, abuse, or safety issues on the platform.
• Improving the platform based on how users interact with it.

To generate education market insights (using anonymised, aggregated data only):

• Analysing subject demand trends by geography, education level, and time of year.
• Benchmarking tutoring rates and availability across subjects and suburbs.
• Identifying gaps between tutor supply and family demand.
• Measuring engagement and outcome signals across the platform.
• Producing research and intelligence products that describe the education market without identifying individual users.

Insight generation always involves de-identified, aggregated data — never individual profiles or messages.

4. Who We Share Your Information With

We do not sell your personal information. We do not share personal information with advertisers or data brokers. We do not run third-party advertising on TutorLook.

The limited sharing of personal information that occurs:

• Between users: tutor profiles (name, suburb, subjects, rates, bio, reviews) are visible to all visitors. Your email address is never shown publicly.
• Hosting providers: our servers and database are hosted on reputable cloud providers who process data only as instructed by us and have no right to use your data for their own purposes.
• Email delivery: we use Resend to deliver transactional emails. Resend receives your email address solely for the purpose of delivering the email.
• Legal requirements: we may disclose information if required to do so by law or a valid court order.

Sharing of anonymised, aggregated data (not personal information):

• Research partners: universities, academic institutions, and researchers studying education markets, tutoring demand, or learning outcomes.
• Government and education bodies: state and federal education agencies, curriculum authorities, and policy bodies for the purpose of education planning and workforce analysis.
• Commercial partners: educational publishers, EdTech companies, workforce analytics firms, or other organisations seeking education market intelligence.

All third-party sharing of aggregated data is subject to contractual obligations that prohibit re-identification of individuals and require compliance with applicable privacy law.

5. Aggregated Data and Education Insights

Aggregated, de-identified data — meaning data that has been combined with data from many users and processed so that no individual can be reasonably identified — is not personal information under the Privacy Act 1988 (Cth). TutorLook may use, publish, licence, or commercialise such aggregated data without restriction.

Examples of aggregated insights TutorLook generates include:

• The most searched-for subjects in each Perth suburb during each school term.
• Average tutoring rates by subject and education level, and how these change over time.
• The ratio of tutor supply to family demand for each subject area.
• Seasonal patterns in tutoring demand correlated with the academic calendar.
• Geographic maps of education demand intensity across metropolitan Perth and beyond.

These insights represent TutorLook's proprietary data assets and are generated through legitimate analysis of platform activity. They can never be used to identify individual users.

6. Data Security

We take reasonable steps to protect your information from unauthorised access, loss, or misuse. These steps include:

• Passwords are stored using a one-way cryptographic hash — we cannot recover your plain-text password.
• All connections to TutorLook are encrypted via HTTPS/TLS.
• Database access is restricted and not exposed publicly.
• We apply parameterised SQL queries throughout to prevent injection attacks.
• CSRF tokens protect all form submissions from cross-site forgery attacks.

No system is completely secure. If you suspect your account has been compromised, contact us immediately at gubek@tutorlook.online.

7. Cookies and Tracking

TutorLook uses a single session cookie to keep you logged in. This cookie is necessary for the platform to function and expires when you close your browser or log out. We do not use third-party advertising cookies or tracking pixels. We collect internal behavioural data (search queries, profile views, interaction patterns) through our own systems as described in this policy — not through third-party trackers.

8. Email Notifications

We send transactional emails to notify you of messages, reviews, and account events. You can unsubscribe from non-essential notifications at any time using the unsubscribe link included in every email, or by emailing us at gubek@tutorlook.online.

Some emails — such as password reset messages — are essential to the service and cannot be disabled.

9. How Long We Keep Your Data

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate security purposes.

Anonymised, aggregated data derived from your platform activity — such as aggregated subject demand signals or pricing benchmarks — is not personal information and may be retained indefinitely as part of TutorLook's analytical datasets.

10. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct any inaccurate or incomplete information.
• Deletion: request that we delete your account and associated personal data.
• Unsubscribe: opt out of non-essential email notifications at any time.
• Complaint: if you believe we have mishandled your information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email us at gubek@tutorlook.online. We will respond within 30 days.

11. Children's Privacy

TutorLook accounts are intended for adults (parents, guardians, and tutors aged 18 and over). We do not knowingly collect personal information directly from children. Students' details may be included in messages sent by their parents or guardians, and these are handled with the same care as all other data.

12. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify registered users by email or by displaying a notice on the platform. The "Last updated" date at the top of this page reflects the most recent version.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please reach out: