Duarte Business English Privacy Policy
Effective Date: [05/07/2025]
Duarte Business English is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect your information when you access our website, enroll in our 1-on-1 or group coaching classes, or interact with us in any way.
1. Who We Are
Data Controller:
Melissa B. Duarte
Duarte Business English
Email: [email protected]
Location: Based in Spain
2. What Personal Data We Collect
We collect the following data when you use our services:
▪︎ Full name
▪︎ Email address
▪︎ Country of residence
▪︎ Language level (optional)
▪︎ Payment and billing information (processed securely via third-party providers like Stripe or PayPal)
▪︎ Course/class participation history
▪︎ Any communication you send us via email or contact forms
We do not collect any sensitive personal data unless you voluntarily provide it.
3. How We Use Your Data
We use your data to:
▪︎ Provide our coaching and group class services
▪︎ Process payments and manage bookings
▪︎ Send class confirmations, updates, and course materials
▪︎ Respond to inquiries and customer service requests
▪︎ Send promotional emails (only with your consent)
▪︎ Comply with legal obligations
4. Lawful Basis for Processing
Under the GDPR, we process your data based on:
▪︎ Contract: To deliver the services you’ve requested
▪︎ Consent: For optional communications like newsletters
▪︎ Legal obligation: When required by law (e.g. tax records)
▪︎ Legitimate interest: To operate and improve our services, provided your rights are not overridden
5. Data Storage and Retention
We store your data securely in GDPR-compliant cloud platforms and learning tools (such as Kajabi, Google Workspace, Zoom, Stripe, or PayPal). Your data is kept only as long as necessary to fulfill our services and legal obligations, usually:
▪︎ Client and class records: up to 5 years
▪︎ Email inquiries and forms: up to 12 months
▪︎ Newsletter opt-ins: until you unsubscribe
6. Sharing Your Data
We do not sell or rent your personal data.
We may share your data only with:
▪︎ Trusted third-party service providers (e.g. email marketing tools, payment processors, scheduling platforms)
▪︎ Legal authorities when required by law
All third-party services are GDPR-compliant and bound by confidentiality agreements.
7. Your Rights Under GDPR
You have the right to:
▪︎ Access your personal data
▪︎ Correct or update inaccurate data
▪︎ Request deletion of your data (“right to be forgotten”)
▪︎ Object to certain processing
▪︎ Withdraw consent at any time
▪︎ Lodge a complaint with a Data Protection Authority in Spain
To exercise your rights, email us at [email protected]
8. Cookies & Tracking
Our website may use cookies or similar technologies to improve user experience, analyze website traffic, and deliver relevant content. You can manage cookie settings through your browser.
A detailed Cookie Policy is available separately.
9. Data Security
We take strong measures to protect your data using:
▪︎ Encrypted data storage and secure platforms
▪︎ Limited access only to authorized personnel
▪︎ Regular updates and monitoring of systems
However, no online system is 100% secure. We do our best, but we cannot guarantee absolute security.
10. Changes to This Privacy Policy
We may update this policy occasionally to comply with laws or improve clarity. All changes will be posted on this page, and you will be notified if they are significant.
Last updated: [05/07/2025]
