DUARTE BUSINESS ENGLISH

BOOKS | ABOUT | FREE RESOURCES | CLASSES

Privacy Policy

Last updated:04/06/2026

This Privacy Policy explains how Duarte Business English (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or book our services. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

  1. Who we are (Data Controller)

The controller responsible for your personal data is:

Business name: Duarte Business English
Owner: Melissa B. Duarte
Email: info@duartebusinessenglish.com
Website: duartebusinessenglish.com

If you have any questions about this policy or how we handle your data, contact us at the email above.

  1. What personal data we collect

Depending on how you use our site, we may collect:

When you contact us through the contact form

Your name
Your email address
The content of your message

When you book and pay for classes

Your name and email address
Billing information needed to process payment

Payments are handled securely by our payment provider (see Section 5). We do not store or have access to your full card details on our website.

When you take classes

The information you share with us during lessons, scheduling, and correspondence.

When you browse our website

Basic technical information collected automatically through cookies and similar technologies, such as your IP address, browser type, and how you use the site. See our separate Cookie Policy for full details.

  1. Why we use your data and our legal basis

We only process your personal data where we have a lawful basis to do so:

  • Responding to your enquiries via the contact form — based on your consent and our legitimate interest in answering you.
  • Arranging, delivering, and managing your classes — based on performance of a contract with you.
  • Processing your payments — based on performance of a contract with you.
  • Keeping accounting and tax records — based on compliance with our legal obligations.
  • Sending occasional updates or offers (only if you opt in) — based on your consent.
  • Maintaining and securing our website — based on our legitimate interest in running the site.

You can withdraw your consent at any time where consent is the basis for processing (see Section 7).

  1. How long we keep your data

We keep your personal data only as long as necessary:

Enquiry messages: kept while we handle your request and for a reasonable period afterwards, then deleted.
Client and class records: kept for the duration of our working relationship and for a reasonable period afterwards.
Invoices and payment records: retained for the period required by Spanish tax and commercial law (generally several years).
Marketing data: kept until you unsubscribe or withdraw consent.

  1. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only as far as needed:

STRIPE to process your payments securely.
Google Meet to deliver your online classes.
WordPress to operate our website and communicate with you.

Each of these providers acts as a data processor and is bound to protect your data and use it only for the purposes we specify.

  1. International data transfers

Some of our service providers (for example, payment and video-conferencing tools) may process data outside the European Economic Area (EEA), including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses or the providers’ certification under the EU–US Data Privacy Framework. You can request more information about these safeguards by contacting us.

  1. Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data (“right to be forgotten”) in certain circumstances.
Restrict or object to our processing of your data.
Data portability — receive your data in a usable format.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@duartebusinessenglish.com. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe your data has been mishandled:

Website: http://www.aepd.es

  1. Cookies

Our website uses cookies and similar technologies to function properly and to understand how visitors use the site. You can manage your preferences through our cookie banner. For full details, please see our separate Cookie Policy.

  1. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

  1. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review it periodically.

  1. Contact

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact:

Duarte Business English
info@duartebusinessenglish.com