Your privacy matters.

1. Information we collect

Account and profile data: email address, display name, Google authentication identifier where used, account status, age-and-eligibility confirmation, and optional country, timezone, interests, profile visibility, and consent choices.

Service data: quiz and English-level test answers, approximate results, optional result-delivery email and campaign attribution; event bookings and attendance; membership plan and status; notifications, support messages, safety reports, moderation actions, and limited security and audit logs such as timestamps and request identifiers.

Action and funnel data: when you deliberately start a quiz or test, select a join or registration action, submit registration, begin checkout, book, cancel, or complete another key service step, we record the action, time, page, referrer and campaign parameters together with IP address, approximate city/region/country supplied by our hosting provider, device category, browser, operating system, and a pseudonymous visitor key. We do not use this system to report ordinary page views.

Payment data: Stripe customer, subscription, price, invoice, and payment-status identifiers. Stripe collects card and billing details directly; we do not store full card numbers or security codes.

Voice data: the application recording you submit and the optional weekly insight recordings you create in your member space, together with their prompt, duration, storage key, review status, and any note you add.

2. Why we use it and our lawful bases

Contract: to create and secure your account, provide the quiz, memberships, bookings and live events, process billing, send essential service messages, provide support, and let you manage or close your account.

Legal obligation: to keep accounting and transaction records, handle consumer-rights requests, respond to lawful authorities, and meet data-protection, tax, fraud-prevention, and other legal duties.

Legitimate interests: to protect members, moderate reports, prevent abuse and duplicate free access, secure and improve the service, diagnose faults, and understand which deliberate sign-up, test, booking, and purchase steps work or fail. We balance these interests against your rights, limit the telemetry to meaningful actions rather than ordinary browsing, and do not use this basis where your interests override ours.

Consent: for optional marketing and for processing the application voice note before you submit it. Contract and legitimate interests support member insight processing needed to deliver the service and review participation. You can withdraw consent where consent is the basis, but withdrawal does not affect earlier lawful processing.

3. What you need to provide

An email address, authentication data, eligibility confirmation, and essential booking or billing details are needed to provide the relevant service. If you do not provide them, we may be unable to create an account, reserve an event, or sell a membership. Optional profile and marketing fields can be left blank.

The speaking quiz creates a profile and the English-level test creates an approximate CEFR result from the answers you choose. These are guidance for learning, personalisation, and marketing—not accredited qualifications or solely automated decisions that produce legal or similarly significant effects.

4. Who receives information

We use carefully selected providers to operate the service: Supabase for authentication, database hosting, and restricted funnel records; Vercel and Cloudflare for web hosting and approximate request location; Stripe for billing; Google for optional sign-in; Zoom or another disclosed video provider for events; Telegram for private operational alerts to authorised administrators; and our configured email infrastructure for transactional and opted-in marketing messages.

Providers process only the information needed for their role and are subject to contracts and their own legal obligations. We may also disclose information to professional advisers, regulators, courts, law enforcement, or a buyer of the business where legally permitted and necessary. We do not sell personal information.

Application and insight audio is stored in private object storage and sent to the configured private Telegram chat used by Elvina or another authorised reviewer. It is not posted to a public channel or shared with other members.

5. International transfers

Some providers or their support teams may process information outside the United Kingdom. Where a restricted transfer occurs, we use a UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful mechanism. You may ask support for information about the safeguard relevant to your data.

6. Retention

Core account, profile, booking, and membership records are normally kept while your account is active and for up to 24 months after closure so we can resolve disputes, prevent abuse, and maintain service integrity. Quiz data that is not linked to an account may be anonymised or deleted sooner.

Detailed funnel records containing IP address and device information are deleted automatically after 90 days. We may retain de-identified totals for longer. Private Telegram alerts are periodically deleted or retained only as long as reasonably needed for operational follow-up.

Application recordings are normally deleted within 90 days after a final application decision. Member insight recordings are normally kept while membership is active and for up to 90 days afterward, unless you request earlier deletion or a legal, safety, or dispute reason requires limited longer retention.

Invoice, payment, and accounting records may be kept for up to six years after the relevant financial period or longer if the law requires. Safety reports, moderation records, and security logs are normally kept for up to 24 months, but may be retained longer where a continuing safety issue, dispute, fraud investigation, or legal claim requires it. Optional marketing data is kept until you withdraw consent or after 24 months of inactivity.

At the end of a retention period we delete or irreversibly anonymise information, unless a legal hold requires us to preserve it.

7. Security and conversation privacy

We use HTTPS, restricted administrator access, server-only secrets, database row-level access controls, rate limits, audit records, and provider security controls. No online service can guarantee absolute security; use a unique password and protect your Google account.

Ordinary breakout conversations are not recorded by us. Members may not record, screenshot, transcribe, or share another participant’s words or personal information without clear permission. Safety reports are limited to the reporting member and authorised administrators.

8. Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, or portability of your personal information, or object to processing. You may withdraw consent at any time. In particular, you have the right to object to direct marketing at any time.

You can update profile details and consents, download an account copy, and request deletion from your profile. We may verify your identity and may keep information where lawfully required. We normally respond within one month.

Please contact us first if you have a concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

9. Children, sensitive information, and changes

The service is for adults aged 18 or older and is not directed to children. Please do not include health information, identity documents, or other sensitive information in your profile or ordinary support messages unless it is genuinely necessary.

We may update this notice when our service, providers, or legal duties change. Material changes will be brought to your attention and the revision date will be updated.

Contact

Questions, privacy requests, cancellation notices, refund requests, and complaints can be sent to support@ladiesspeakenglish.com. Please include the email address used for your account.