Privacy Policy - UK GDPR

This Privacy Policy explains how UK Language Teaching ("we", "our", "us") processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our websites, applications and services, you acknowledge that your personal data will be processed as described below.

1. Data Controller

The data controller responsible for personal data under this Privacy Policy is UK Language Teaching. Our registered address serves solely as a tax and correspondence location. All privacy-related enquiries should be sent by email to: info@uklt.org

2. Categories of Personal Data We Process

We process the following categories of personal data: (i) identity and contact data (name, email address, telephone number); (ii) account information and authentication data; (iii) billing and transaction information processed exclusively through third-party payment providers; (iv) technical and usage data (IP address, logs, user-agent, browsing events, pages accessed and history of changes); (v) profile information, including profile pictures uploaded or imported via social login; (vi) data generated in educational activities, such as voice recordings for assessments, class attendance records and class recordings where permitted; (vii) additional identification data when required in certain jurisdictions. We do not disclose which jurisdictions or which documents are collected.

3. Legal Bases for Processing

We process personal data on the following legal bases: (i) performance of a contract or steps taken prior to entering into a contract; (ii) compliance with legal obligations; (iii) legitimate interests, including ensuring service reliability, preventing fraud, improving user experience and safeguarding platform security; (iv) consent, where required for optional features such as analytical cookies and certain recordings.

4. Purposes of Processing

Personal data is processed for the purposes of: (i) providing, operating and maintaining our educational services; (ii) managing user accounts and authentication; (iii) processing transactions and invoices; (iv) enabling online classes and digital educational content; (v) ensuring platform security and monitoring misuse; (vi) conducting analytics to improve services; (vii) complying with applicable regulatory obligations across different jurisdictions.

5. Cookies and Tracking Technologies

We use essential cookies for service functionality. With user consent, we also use analytics and marketing cookies provided by international services, including Google Analytics, Meta Pixel and LinkedIn Pixel. Cookie preferences can be managed through the consent banner.

6. International Data Transfers

As we operate across multiple jurisdictions, personal data may be transferred outside the United Kingdom. Where data is transferred internationally, we implement appropriate safeguards, such as: (i) UK-approved International Data Transfer Agreements (IDTA); (ii) Addendum to the EU Standard Contractual Clauses; (iii) additional technical and organisational measures; (iv) processing limitations strictly aligned with this Privacy Policy.

7. Sharing with Third-Party Service Providers

We may share personal data with third-party providers essential to our operations, including international services such as OpenAI, Google Text-to-Speech, Azure Cognitive Services, Stripe and DocuSign. In some countries, we also use local providers such as Asaas and Clicksign. These providers act under contractual obligations, process data only under our instructions and adhere to appropriate security standards.

8. Data Security

We implement industry-standard security measures, including encryption, access controls, audit logs and continuous monitoring. While no system is completely risk-free, we take reasonable steps to protect personal data and will notify relevant authorities and affected individuals in accordance with UK GDPR requirements if a security breach occurs.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes or enforce agreements. Retention periods vary depending on data type and applicable regulations.

10. Rights of Data Subjects (UK Residents)

Under the UK GDPR, you have the right to: (i) access your personal data; (ii) request the rectification of inaccurate or incomplete data; (iii) request erasure where applicable; (iv) restrict processing; (v) object to processing based on legitimate interests; (vi) request data portability; (vii) withdraw consent at any time where processing is based on consent; (viii) lodge a complaint with the Information Commissioner's Office (ICO).

11. Account Deletion

Users can request account deletion at any time. Certain data may be retained where legally required or necessary to prevent fraud or protect the integrity of our services.

12. Children's Privacy

Our services are intended exclusively for individuals aged 18 and over. We do not knowingly process personal data of children.

13. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in legal requirements or operational adjustments. Significant updates will be communicated through our platform.

14. Contact

For any questions or requests relating to this Privacy Policy, you must contact us exclusively via our official email: info@uklt.org