1. Who is responsible for your information?
Steve Hoca English is the data controller for the personal information described in this notice. We are based in London, United Kingdom. Privacy questions can be sent to privacy@stevehocaenglish.com.
2. Information we collect
We may collect your name, email address, telephone or WhatsApp number, billing address, account login details, course selections, lesson attendance, progress notes, support messages, payment status and cookie preferences. Stripe will process payment card information when payments are enabled. We do not intend to store full card details on our own systems.
3. Why we use your information
4. Who receives your information?
We may use service providers for website hosting, email, video lessons, customer support, secure payment processing through Stripe, analytics, Microsoft Clarity and advertising platforms. Only providers needed for an enabled service should receive data. Contracts and access controls should be used to protect it.
5. International transfers
Some technology providers may process information outside the United Kingdom. Where required, we will rely on an adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum, and complete any necessary transfer risk assessment.
6. How long we keep information
Enquiry records are normally reviewed after 24 months. Account and course records are normally kept while your account is active and reviewed after 6 years where transaction or legal records are involved. Marketing consent records are kept while consent remains valid and for a limited period after withdrawal to demonstrate compliance. Cookie preferences are reviewed at least every 6 months or when purposes change.
7. Your rights
Depending on the circumstances, you may have rights to be informed, access your information, correct it, erase it, restrict its use, receive portable data, object to processing and withdraw consent. You may also have rights relating to solely automated decisions. We do not currently plan to make decisions with legal or similarly significant effects solely by automated means.
You can object to direct marketing at any time. You may also object to processing based on legitimate interests. Contact privacy@stevehocaenglish.com and explain your request.
8. Complaints
Please contact us first so we can investigate your concern. You also have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.
9. Changes to this policy
We will review this notice when our services, providers or legal obligations change. Material changes will be brought to users' attention where appropriate.