Privacy policy
The short version: I collect only what I need to teach you English: your enquiry details, your student account if you have one, and payment records. Everything I store lives on servers in the European Union. I do not run advertising cookies or analytics trackers, I never sell your data, and you can ask me to show or delete what I hold about you at any time.
Who is responsible for your data
This website, properenglishlessons.com ("Proper English Lessons"), is run by Harry, an independent English teacher. For anything relating to your personal data, contact [email protected]. I am the data controller for the personal data described in this policy under the UK GDPR and the EU GDPR.
What I collect, and why
Booking enquiries. When you request a lesson I collect your name, email address, what you want to focus on, your level, and anything you write in the message box. I use this to reply to you and arrange your lesson. Legal basis: taking steps at your request before entering into a contract.
Student accounts and classroom data. If you become a student, you get an account in the student portal. That involves your email address, a password (stored only in securely hashed form), your lesson schedule, learning materials, homework you submit, feedback and grades, messages between us, and progress records. I use this to deliver your lessons. Legal basis: performance of our contract.
Payments. Card payments are handled by Stripe. Your card number goes directly to Stripe and never touches my servers; I receive only a record of the payment (what was bought, when, and a payment reference). I keep payment records because tax law requires it. Legal basis: legal obligation and performance of our contract.
The level test. The English level test runs entirely in your browser. Your answers and your result are not sent anywhere and are not stored. If you choose to book a lesson afterwards, your result is added to your booking message so I can see it, and is then treated like any other enquiry.
Technical data. Like almost every website, the servers and the Cloudflare network in front of them process IP addresses and basic request logs to serve pages, prevent abuse and keep the site secure. Legal basis: legitimate interest in running a safe, working website.
Where your data lives
All data that I store, including bookings, student accounts, classroom content and the website's content system, is hosted on servers located in the European Union.
A small number of trusted services help run the site, and some of them operate globally:
- Stripe processes card payments. Stripe may transfer data outside the EEA under its approved safeguards (Standard Contractual Clauses and the EU-US Data Privacy Framework).
- Cloudflare provides the content delivery network and security layer in front of the site, and processes visitor IP addresses to do so.
- Google Fonts serves the site's typefaces. When your browser fetches a font, your IP address is transmitted to Google.
- Zoom hosts the video lessons themselves. When we meet on a call, Zoom's own privacy policy applies to the call.
These providers act as processors or independent services; I share with them only what is necessary for them to do their job.
Cookies and browser storage
There are no advertising cookies and no analytics trackers on this site. The cookie banner lets you choose whether optional advertising-measurement cookies may run; nothing optional runs without your consent. Details are in the cookie policy. The site uses a small amount of functional browser storage only: a flag that stops the welcome animation replaying during your visit, and, if you are a student, the token that keeps you signed in to the portal. Neither is used to track you.
How long I keep things
Enquiries that do not become lessons are deleted within 12 months. Student records are kept while you are studying with me and for up to 12 months afterwards, in case you return. Payment and invoice records are kept for six years, as tax law requires. If you ask me to delete your data sooner, I will, except where the law requires me to keep it.
Your rights
Under the UK and EU GDPR you have the right to ask for a copy of the personal data I hold about you, to have it corrected, to have it deleted, to receive it in a portable format, to restrict or object to how it is used, and to withdraw any consent you have given. Email [email protected] and I will respond within one month.
You also have the right to complain to a supervisory authority: in the UK that is the Information Commissioner's Office (ico.org.uk), and in the EU it is the data protection authority in your country.
Children
Lessons and this website are designed for adults. I do not knowingly collect data from children. If you believe a child has submitted personal data here, contact me and I will delete it.
What I will never do
I will never sell your personal data, use it for advertising, or send you marketing you did not ask for. There is no automated decision-making or profiling on this site.
Changes to this policy
If the way the site handles data changes, this page will be updated and the date at the top revised. Significant changes that affect existing students will be flagged directly.