Privacy Policy
Effective date: September 2, 2026. This policy is part of the Terms of Service.
1. Who is responsible for your data
Natalie, independent Ukrainian language tutor, Florida, United States. Email: [email protected]. For the purposes of the GDPR and similar laws, I am the data controller.
2. What I collect and why
| Data | Where it comes from | Why I use it |
|---|---|---|
| Name, email address, phone number, time zone | Booking form (Cal.com), Stripe checkout, contact form, your messages | To confirm and run lessons, send the meeting link, send reminders and answer you. The phone number is a backup: I use it only if your email bounces or you miss a lesson and I cannot reach you by email. No marketing calls or texts. |
| Payment record: amount, date, last four digits of the card, Stripe transaction ID | Stripe | To confirm payment, issue refunds, keep accounting records. Full card details never reach me. |
| Learning information: your goals, level, lesson plans, notes, workbooks, homework, progress statistics, package balance | Created by me during our work together | To prepare personal lessons and show your progress in the student cabinet |
| Short audio clips of you reading or speaking | Recorded during lessons with your knowledge | To compare your progress over time. Never published without your separate consent. |
| Messages you send me by email, Instagram, TikTok or the contact form | You | To reply and to keep track of our agreements |
| Reviews and feedback you give | You | To improve lessons and, with your first name only, to show on the website and social media unless you object |
| Basic technical data: IP address, browser type, pages visited | Hosting provider logs (Cloudflare) | Security, preventing abuse, and aggregated statistics of site visits. I do not use this to identify individual visitors. |
Legal bases where the GDPR or UK GDPR applies: performance of our contract (booking, lessons, payments, the cabinet), my legitimate interests (security, keeping records, improving lessons, showing reviews), legal obligations (accounting records), and your consent (audio clips, publishing a review with your name). You can withdraw consent at any time.
3. Services I use to run the lessons
Your data is processed by these providers on my behalf. Each has its own privacy policy.
- Cal.com — booking calendar, confirmations and reminders.
- Stripe — payments and refunds.
- Google Meet — the video lessons themselves. I do not record lessons in Meet.
- Cloudflare — website hosting, the student cabinet, its database and the email code login.
- Web3Forms — delivery of the contact form on the website.
- Google (Gmail) — email correspondence.
I do not sell or rent your data. I do not share it with anyone else, except if the law requires it or to protect my rights, for example in a payment dispute.
4. Cookies
The website itself does not set advertising or tracking cookies. The student cabinet uses a login cookie so you stay signed in. Embedded services (Cal.com booking popup, Stripe checkout, Google Fonts) may set their own cookies or load resources from their servers under their own policies.
5. Where your data is stored
I am based in the United States, and the services above store data in the United States and other countries. If you live in the EU, UK, Switzerland or another country with data transfer rules, your data is transferred to the US on the basis of the providers' standard contractual clauses or equivalent safeguards, and, for our own correspondence and lesson materials, because the transfer is necessary to perform our contract.
6. How long I keep your data
- Lesson materials, progress data and audio clips: while we work together and for up to 2 years after your last lesson, so that you can come back and continue where you stopped. Deleted earlier on request.
- Payment and refund records: 7 years, as required for accounting and tax purposes.
- Emails and messages: up to 2 years after our last contact.
- Contact form submissions that do not lead to lessons: up to 1 year.
7. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, Canada's PIPEDA, the Australian Privacy Act or US state privacy laws), you can ask me to:
- show you the personal data I hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, subject to records I must keep by law;
- restrict or object to certain processing;
- withdraw consent you gave earlier;
- receive your data in a portable format.
Write to [email protected]. I answer within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
8. Security
The website and the cabinet run over HTTPS. Cabinet access works through a one-time code sent to your email, so there is no password to leak. Payment data is handled entirely by Stripe. Lesson files and the database are accessible only to me and to you for your own data. No method is perfectly secure, and I will tell you without undue delay if a breach affects your data.
9. Children
I teach adult learners only (19 and older). I do not knowingly collect personal data from anyone under 19. If I learn that I have collected data from a minor, I delete it.
10. Changes
If I change this policy, I update the date at the top and, for active students, send an email. Continuing to use the lessons after a change means you accept the updated policy.