Privacy Notice

This website and the English lessons offered through it are operated by English Language Studio, a sole trader business trading under the name English Language Studio, based at Sluisstraat 79, De Hoorn, 3000 Leuven, Belgium.

English Language Studio is the data controller for the personal data described in this notice: we decide what data is collected, why, and how it is used. You can contact us about any privacy matter at annalexovna@gmail.com.

• Identity and contact data — your name, email address and phone number where you provide it.
• Learning data — your English level, learning goals, scheduling preferences and the course or lesson you choose.
• Enquiry and support data — the content of messages you send us through our forms or by email.
• Account credentials — email address and login details, only if you are given a studio account.
• Usage, device and campaign data — pages viewed, referring page, approximate location derived from IP address, device and browser identifiers, and advertising campaign parameters in the link you clicked.
• Order data — a record that a purchase was made, the item, amount and transaction reference. Card and billing details are collected and processed by Paddle, not by us; we never see or store your card number.

• To arrange and deliver lessons, courses and trial assessments, and to confirm bookings and orders — legal basis: performance of a contract with you, or steps taken at your request before entering a contract.
• To reply to your enquiries and provide customer support — legal basis: performance of a contract, or our legitimate interest in answering people who contact us.
• To keep the site secure and prevent fraud or abuse — legal basis: our legitimate interest in protecting our service and students.
• To measure advertising and improve the website — legal basis: your consent, given through our cookie/consent controls, which you can withdraw at any time.
• To meet accounting, tax and other legal obligations — legal basis: compliance with a legal obligation.

• Paddle.com Market Ltd — our Merchant of Record. Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. When you buy a course or lesson, your name, email address, billing and payment details are collected and processed by Paddle in order to take payment, run fraud and sanctions checks, calculate and remit sales tax, issue invoices, manage your order and handle refunds and customer service enquiries relating to the purchase. Paddle acts as an independent controller for that payment data and its own privacy policy applies at paddle.com.
• Service providers and subprocessors acting on our instructions: website and database hosting, email delivery for booking and order confirmations, and support tooling.
• Analytics and advertising providers — Google (Google Ads measurement), where you have consented to analytics/marketing cookies.
• Professional advisers — our accountant and, if ever needed, legal advisers.
• Public authorities where we are required to disclose data by law.

We do not sell your personal data, and we do not send marketing emails you did not ask for.

Our providers may process data outside the European Economic Area. Where that happens, the transfer is protected either by an adequacy decision of the European Commission or by Standard Contractual Clauses together with appropriate additional safeguards.

Enquiries that do not lead to a booking are kept for up to 12 months. Student and booking records are kept for the duration of your course and for up to 3 years afterwards so we can answer follow-up questions and issue certificates. Records needed for accounting and tax are kept for 7 years, as Belgian law requires. When a retention period ends, data is deleted or anonymised.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encryption at rest for our database, row-level access rules so records can only be read by authorised accounts, strong authentication with access limited to those who need it, and regular review of the providers we use. Payment card data never reaches our systems — it is handled by Paddle on PCI-DSS compliant infrastructure.

We use essential cookies that are needed for the site and secure login to work, and analytics and marketing cookies set by Google Ads measurement tags to understand which adverts lead to bookings. Non-essential cookies are only set after you consent; consent defaults to denied until you agree. You can withdraw consent or change your choice at any time through your browser settings or by emailing us, and you can block or delete cookies in your browser at any time.

Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent. Email annalexovna@gmail.com and we will respond within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be).