Privacy Policy

Who we are

English with Zoë is an English tutoring service operated as a sole trader business. We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

• Controller: English with Zoë (sole trader)
• Contact: hello@englishwithzoe.com

What information we collect

We collect information you provide directly to us, including:

• Name and email address when you contact us
• English level information (if provided)
• Messages and enquiries you send through our contact form
• Communication records during our lessons and correspondence

How we use your information

We use your personal information to:

• Respond to your enquiries and provide information about our services
• Arrange and deliver English lessons
• Communicate with you about scheduling, payments, and lesson materials
• Maintain records for legitimate business and tax purposes
• Improve our teaching methods and services

Legal basis for processing

We process your personal data based on:

• Consent: When you contact us or sign up for lessons
• Contract: To deliver the English tutoring services you've requested
• Legitimate interests: For business administration and record-keeping
• Legal obligation: To comply with tax, invoicing, and accounting requirements

How we protect your information

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

How long we keep your information

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy. Typically, we keep records for up to 7 years for business and tax purposes, after which they are securely deleted.

Sharing your information

We do not sell your personal information. We may disclose information if required by law or to protect our rights, property, or safety.

Service providers (processors)

We use trusted service providers to help deliver our services, such as website hosting, email delivery, scheduling tools, and video call platforms. These providers process personal data on our behalf under written contracts and are obligated to protect your information and act only on our instructions.

International transfers

Some service providers may process data outside your country (including outside the UK/EEA). When this happens, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect your information.

Your rights

Under GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct any inaccurate information
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Withdraw consent: Stop us from processing your data at any time
• Object: Object to processing based on legitimate interests

To exercise your rights, contact us using the details below. We may ask you to verify your identity. We aim to respond within one month. You also have the right to lodge a complaint with your local data protection authority (for example, the ICO in the UK or your national authority in the EEA).

Cookies

Our website uses only essential cookies necessary for the site to function properly (for example, the laravel_session and XSRF-TOKEN cookies for session and security). We do not use analytics or advertising cookies.

We load font files from Google Fonts, which means your IP address is transmitted to Google's servers to deliver those assets. No cookies are set by Google Fonts.

Contact us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.