1. Who is responsible for your data
The controller of your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For anything in this policy, write to [PRIVACY EMAIL]. [IF A DATA PROTECTION OFFICER IS APPOINTED, NAME AND CONTACT]
2. What we collect
- Your access request. The name, email, subject of interest and message you send through the form on our home page.
- Your account. Name, email, the language you use the site in, and your password, which is stored hashed — we never see it.
- Your learning. Sessions booked and attended, the plan agreed with your tutor, work you submit, notes your tutor keeps, and certificates issued.
- Technical records. Sign-in times, IP address, browser and device type, and pages visited on the learning platform. The platform produces these automatically in its logs.
- Messages. Emails and messages you exchange with our team or your tutor through the platform.
- Payment records. What you were charged and when. Card numbers are handled by our payment provider and never reach us.
We do not ask you for special-category data — health, beliefs, and the like — and you should not send it to us. We do not sell personal data, we do not use it to train machine-learning models, and we do not profile you or take automated decisions about you.
3. Why we use it, and on what basis
- To set up and run your account and sessions — necessary to perform our contract with you.
- To answer your access request and your questions — on the basis of your request and our legitimate interest in replying.
- To keep the platform secure and to investigate abuse — our legitimate interest in a safe service.
- To send service messages — booking confirmations, changes, password resets — necessary to run the service.
- To send anything promotional — only with your consent, which you can withdraw at any time.
- To meet legal, tax and accounting obligations — where the law requires it.
4. Who we share it with
Only with people and companies that help us run the service, and only as far as they need it:
- your tutor, for the learning that concerns you;
- our hosting and infrastructure provider, [HOSTING PROVIDER];
- our email provider, [EMAIL PROVIDER], and video provider, [VIDEO PROVIDER];
- our payment provider, [PAYMENT PROVIDER], which handles card details directly;
- professional advisers, or an authority where the law obliges us.
Each of them is bound to use the data only on our instructions. We never share your data with anyone for their own marketing.
5. Cookies and local storage
We keep this deliberately small. The platform uses only what it needs to work:
- A session cookie on the learning platform, which keeps you signed in. It expires when you sign out or the session ends, and the platform cannot work without it.
- A language preference stored in your browser by this website, so it opens in the language you chose. It stays on your device and is never sent to us.
- [IF YOU ADD ANALYTICS OR ANY THIRD-PARTY EMBED, LIST IT HERE AND ASK FOR CONSENT BEFORE IT LOADS]
Because we set no advertising or tracking cookies, there is no consent banner. You can clear or block this storage in your browser settings; if you block the session cookie, you will not be able to sign in.
6. Where it is stored
Your data is stored on servers in [COUNTRY / REGION]. Where a provider processes data outside that region, the transfer is covered by [SAFEGUARD, e.g. EU standard contractual clauses].
7. How long we keep it
- Access requests that do not become accounts: [N] months.
- Account and learning records: while your account is open, then [N] months after it closes.
- Invoices and accounting records: [N] years, as tax law requires.
- Technical logs: [N] months.
You can ask us to delete your learning records sooner, and we will unless we are required to keep them.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what we did before.
Write to [PRIVACY EMAIL] and we will reply within [N] days. If you are not satisfied with our answer, you can complain to the supervisory authority where you live — for us that is [SUPERVISORY AUTHORITY].
9. Younger learners
An account for a learner under [MINIMUM AGE] is requested and supervised by a parent or guardian, who can exercise all the rights above on the learner's behalf. We keep no more about a younger learner than we do about anyone else.
10. Security
How we protect accounts and data is described on our security page. If we ever suffer a breach that puts your data at risk, we will tell you and the authority as the law requires.
11. Changes
If we change this policy we post the new version here with a new date, and we tell account holders by email when the change is significant.
12. Contact
[PRIVACY EMAIL] — or write to [POSTAL ADDRESS]. Our terms of use sit alongside this policy.