For tutors, academies & online course creators

The Education & Tutoring Compliance Pack: handle student data with care.

Registrations, progress records, parent contacts and course platforms all hold information about learners, and many of them are children. Get the consent wording, vendor checklist, retention guidance and marketing rules you can adapt in an afternoon.

One-time payment · instant download · 14-day money-back guarantee
5
parts, from registration to alumni marketing
Art. 8
children's consent, explained
1
sub-processor checklist for course tools
GDPRGARD · 2026
Education & Tutoring Compliance Pack
  1. Student registration & progress data
  2. Parental consent
  3. Course platforms & video tools
  4. Retention of student records
  5. Marketing to former students
Wording · checklists · guidance
🎓 Built for tutors & course creators📋 Art. 8 & Art. 13 GDPR covered👪 Parental consent wording⚡ Copy, adapt, publish

Learners trust you with their details and their progress.

Names, contact details, grades, attendance and sometimes recordings of lessons are personal data, and many learners are minors. Parents and schools increasingly ask how you handle it. Clear notices and a careful choice of tools answer most of those questions.

👪

Children's data needs extra care

If your learners are minors, parents or guardians are often involved, and notices must be written so families can understand them. The pack covers parental consent and plain-language wording.

🎥

Platforms see everything

Course platforms, video lessons and messaging tools process student names, progress and sometimes recordings. The sub-processor checklist shows what to verify with each.

📣

Alumni are not a free list

Former students are still individuals with rights. The pack shows when you can contact them about new courses and how to word it.

Five parts. One careful approach to student data.

Each part stands on its own and also points to the next: the registration notice feeds the retention rules, and the platform checklist protects what you collect.

01

Student registration & progress data

Collect what teaching needs and explain it clearly.

  • Registration form wording and a privacy notice for students
  • What to record about progress, attendance and feedback
  • Keeping sensitive information, such as learning needs, to a minimum
02

Parental consent If minors

Involve parents and guardians properly.

  • When parental consent or involvement is needed
  • Consent and information wording for parents and guardians
  • Age considerations for online services aimed at children
03

Course platforms & video tools as sub-processors

Know who sees your students.

Course platformsVideo toolsMessaging+ more
  • What to check with each tool: DPA, data location, transfer mechanisms
  • Questions to ask before you record lessons or share student work
04

Retention of student records

How long to keep what, and what to do afterwards.

  • How long to keep registration, progress and certificate records
  • Notes on national differences
  • When to delete or anonymise
05

Marketing to former students

Stay in touch within the rules.

  • When you can contact former students and when you need consent
  • Wording for opt-in and unsubscribe
  • Keeping course messages separate from promotions

Real wording, not a table of contents.

Two short excerpts from the pack. Highlighted fields are the parts you fill in for your own course business.

Consent wording · Parents and guardiansExcerpt

Registration for students under 18

Because [student name] is under [age], we ask a parent or guardian to read this notice and to confirm that they agree to us using the details on this form to run the course, keep in touch about lessons and record progress. We do not use a child's details for marketing.

A parent or guardian can ask to see, correct or delete this information at any time by writing to [contact email].

The full pack adds the age rules for online services and a short version written for children.

Vendor checklist · Course platformExcerpt

Before you put students on a new tool

  • Is there a data processing agreement, and have you signed it?
  • Where are student data and recordings stored?
  • Does the provider use student data for its own purposes, such as advertising or training?
  • Can you delete a student's data and recordings when asked?
  • Are lessons recorded by default, and can you turn that off?

The full checklist covers transfers and security questions.

These are shortened starting points. Your own notices and records must reflect what you actually do, and national rules vary. The pack shows you where to check.

Who it's for, and who it isn't.

A good fit if you

  • Run a tutoring service, academy, training provider or online course
  • Collect registration and progress data from students or their parents
  • Use a course platform, video tool or messaging app
  • Have no in-house privacy counsel

Not enough on its own if you

  • Are a public school or other public body, which has additional duties such as appointing a data protection officer
  • Process special-needs or health data about learners at scale
  • Use proctoring, behaviour monitoring or AI that scores students
  • Need a signed, lawyer-reviewed contract; the pack is not legal advice
The complete pack

Five parts. One payment.

Everything on this page, delivered together. Adapt it to your business, update your notices and answer the next question from the same documents.

  • Student registration & progress data
  • Parental consent
  • Course platforms & video tools as sub-processors
  • Retention of student records
  • Marketing to former students
GDPRGard Education & Tutoring Compliance Pack
€39
One-time payment · or get all 14 with the membership
Get the Pack
🛡️ 14-day money-back guarantee · 🔒 Secure checkout
Teaching with AI tools? See the AI Tools Compliance Pack.

Before you ask —

Who is the Education & Tutoring Compliance Pack for?

Tutors, academies, training providers and online course creators in the EU that collect student data, sometimes about minors, and want a clear, documented way to handle it.

What do I receive?

Five parts: student registration and progress wording, parental consent wording, a sub-processor checklist for course platforms and video tools, retention guidance for student records and rules for marketing to former students. You get your download page straight after checkout, with no account to create.

At what age do children need parental consent?

For online services offered directly to a child that rely on consent, the GDPR sets the age at 16, and member states may lower it to no less than 13, so the age depends on your country. Other situations, such as a tutoring contract, are shaped by national contract law. The pack explains how to check and gives wording for parents.

Can I record lessons?

You can, but you need a clear purpose, a legal basis and notice to everyone recorded, and recordings of children call for extra care. The vendor checklist and registration wording help you decide whether to record at all and how long to keep recordings.

Can I email former students about new courses?

It depends on your country and on how you collected their details. Consent is the usual route for marketing emails, and some countries allow limited messages to existing customers about similar services. The pack gives opt-in wording and explains how to check your national rule.

Is this legal advice?

No. The pack is a practical starting point. The wording and records are drafts you adapt to how you really work, and national rules vary. Have a qualified lawyer review anything you rely on.

What if it isn't what I expected?

Email hello@gdprgard.eu within 14 days for a full refund. No form to fill in.

Teach with your students' trust.

Get the consent wording, platform checklist, retention guidance and marketing rules in one pack.

Get the Pack — €39
One-time payment · 14-day money-back guarantee