Privacy Policy

• Name and email address — to create your account, confirm bookings, send class reminders and reply to you. Legal basis: performance of our contract.
• Login credentials (password hash, or Google sign-in identifier) — to secure access to your account. Legal basis: contract and legitimate interest in account security.
• Profile photo, if you choose to upload one — to personalise your account and our chat. Legal basis: consent.
• Booking, class balance and lesson history — to run the scheduling and class-credit system. Legal basis: contract.
• Private messages between you and me — to provide teaching support and keep a record of our conversation. Legal basis: contract.
• Order references from Paddle (transaction and subscription identifiers, amounts, plan type) — to apply your class credits and keep records. I never receive or store your card number. Legal basis: contract and legal obligation.
• Technical data — IP address, device and browser information, and aggregated page usage — for security, fraud prevention and improving the site. Legal basis: legitimate interests.

• Paddle, our Merchant of Record, for the sale of classes and plans, subscription management, payments, tax compliance and invoicing.
• Service providers that host the website and database, send transactional email, and provide aggregated site analytics.
• Google Meet, when you join a class by video call.
• Professional advisers (accounting, legal) where necessary.
• Authorities, where required by law.

I do not sell your personal data and I do not share it for third-party advertising.

Some of these providers process data outside your country, including in the United States and the European Union. Where data leaves the UK or EEA, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Account, booking and message data is kept while your account is active and for up to 24 months after your last class, so I can answer questions about past lessons. Records required for tax and accounting are kept for the period the law requires. After that, data is deleted or anonymised.

Depending on where you live, you can request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. If you are in the UK or EEA, you can also complain to your local supervisory authority.

To exercise any of these rights, email sessions@professionalspanishtutor.com. I respond within one month.

Data is transmitted over encrypted connections, stored in access-controlled systems, and protected by row-level access rules so only you and I can see your account information. Card details are handled entirely by Paddle under PCI-DSS standards and never reach this website.

This site uses strictly necessary cookies and local storage to keep you signed in and to keep the checkout secure, plus privacy-friendly aggregated analytics to understand how many people visit which pages. There are no advertising or tracking cookies. You can clear or block cookies in your browser settings, though signing in will not work without the essential ones.

Classes are intended for adults and older teenagers. Students under 18 should use the service with the consent and supervision of a parent or guardian.

If this notice changes, the date at the top of the page is updated. Material changes will be communicated by email.