Privacy Notice

1. Who is responsible for your data

English by Design is a trading name of Omar Bach Toubdji Andueza, a sole trader based in Barcelona, Spain. For the personal data described in this notice, Omar Bach Toubdji Andueza is the data controller — meaning we decide what data is collected and why.

Contact for any privacy question or request: omarbach1998@gmail.com.

2. What we collect and why

Payment card details are never collected or stored by us — they are handled directly by Stripe, our payment processor.

• Identity and contact data (name, email address, phone or WhatsApp number) — to create your order, deliver your guide, book and run classes, and answer your messages. Legal basis: performance of our contract with you.
• Order data (product purchased, order number, amount, country, tax applied, purchase date) — to fulfil the order, send your receipt and keep accounting records. Legal basis: contract and legal obligation.
• Learning content you send us (writing tasks, exercises, notes shared during classes) — to give you feedback and teach effectively. Legal basis: contract.
• Support messages (email, WhatsApp, contact-form messages) — to provide customer support. Legal basis: contract and legitimate interests.
• Usage and technical data (pages viewed, referring page, browser and device type, IP address, approximate location) — to keep the site secure, prevent fraud and abuse, and understand which resources are useful. Legal basis: legitimate interests.
• Marketing preferences and email engagement, where you have signed up — to send updates about new guides and resources. Legal basis: consent, which you can withdraw at any time.

3. Who we share it with

We never sell your personal data, and we do not share it for third-party advertising.

• Stripe — our payment processor, used to take payment for digital products, issue receipts and process refunds.
• Hosting and backend infrastructure providers, which store the site, our database and your downloadable files.
• Email delivery providers, used to send order confirmations, your guide and follow-up messages.
• Scheduling tools, used when you book a class or consultation.
• Professional advisers (accounting, legal) where necessary, and public authorities where we are required by law to disclose information.

4. International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details of the safeguards in place.

5. How long we keep it

Order and invoicing records are kept for as long as Spanish tax and accounting law requires (currently up to 6 years). Class and learning materials are kept while you are an active student and for up to 2 years afterwards. Support messages are kept for up to 2 years. Marketing contact data is kept until you unsubscribe. Anything we no longer need is deleted or anonymised.

6. Your rights

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to our processing, receive it in a portable format, and withdraw consent where processing is based on consent. To exercise any of these rights, email omarbach1998@gmail.com — we will respond within one month.

If you are not satisfied with our response, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, www.aepd.es) or to the supervisory authority in your country of residence.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted storage, access controls limited to those who need the data, and download links tied to a verified payment rather than shared publicly. No system is perfectly secure, but we review our practices regularly.

8. Cookies and similar technologies

We use strictly necessary cookies and local storage to run the site — for example to remember your language preference and to keep the checkout working. Where we use analytics or marketing cookies, they are only set with your consent, and you can change or withdraw that consent at any time through your browser settings or by contacting us. Blocking essential cookies may stop parts of the site from working.

9. Children

Classes for children and teenagers are arranged with a parent or guardian, who provides the contact and payment details and consents to the processing described here. We do not knowingly collect data directly from children under 14 without that consent.

10. Changes to this notice

We may update this notice as our services or legal obligations change. The current version is always published on this page with the date it was last updated.