Who handles your data when you make a request
When you submit a request through this portal, your data passes through the following processors. First Tutors has a written data-processing agreement with each.
| Processor | Region | Purpose |
|---|---|---|
Supabase Inc. auth.firsttutors.co.uk (CNAME → Supabase) | EU (Ireland, eu-west-1) | Database, encrypted file storage, magic-link authentication for this portal. |
Resend, Inc. links.firsttutors.co.uk (CNAME → Resend) | EU (Ireland) | Delivery of verification, completion, and rejection emails. Click-tracking via links.firsttutors.co.uk (CNAME → Resend) to detect bounced or unopened delivery. |
Amazon Web Services, Inc. Internal — not visible to subjects. | EU (Ireland, eu-west-1) | Execution of the data-extraction Lambdas that gather your account data from First Tutors' internal systems, and temporary storage of the resulting export in S3 before it is packaged for delivery. |
Netlify, Inc. privacy.firsttutors.com | Global edge with EU origin | Static hosting and server-side rendering of this portal. Receives request metadata (IP address, user-agent) for the duration of each page load. |
Google LLC Internal — not visible to subjects. | EU (where DPO selected) | Internal copies of audit artifacts in Google Drive, accessible only to First Tutors' Data Protection Officer. Not used to deliver data to subjects. |
How long we keep your request data
Encrypted download packages are deleted automatically 14 days after they are made available to you. The underlying request record and audit trail are retained for up to 7 years for regulatory and dispute-resolution purposes, then automatically purged. You can request earlier deletion by contacting us at the address below.
Your rights
You can request access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), or object to processing (Article 21) at any time. You also have the right to lodge a complaint with your supervisory authority — for UK residents, the ICO at ico.org.uk.
Contact
Questions about how your data is handled? Email dpo@firsttutors.co.uk.