Privacy Policy for English for Life

Effective Date: August 5, 2026

Website: englishforlife.work

1. Introduction

Welcome to English for Life. Respecting and protecting your personal data is fundamental to our service. This Privacy Policy explains how we collect, use, store, disclosure, and safeguard your information when you visit our website at englishforlife.work or engage with our online English teaching services, in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

2. Data Controller Contact Details

For the purposes of applicable data protection laws, the Data Controller responsible for your personal information is:

● Business Name: English for Life

● Owner / Contact Person: David Hopwood

● Contact Email: david@englishforlife.work

● Website: https://englishforlife.work

3. What Personal Data We Collect

We may collect and process the following types of personal data when you interact with our website and services:

A. Information You Provide Directly to Us

● Contact Information: Name, email address, phone number, and any communication preferences when you use our contact form, support widget, or email us directly at david@englishforlife.work.

● Booking & Lesson Details: Details necessary to schedule and deliver tailored online English lessons, such as language proficiency goals, availability, scheduling information, and payment verification data.

● Support & Correspondence: Messages, feedback, or queries submitted via the on-site

support widget ("EFL Support") or contact forms.

B. Information Collected Automatically

● Technical & Usage Data: IP address, browser type and version, operating system, device details, time zone, referring websites, pages visited, and interaction durations.

● Cookies and Similar Technologies: Essential operational cookies, performance/analytics cookies, and functional cookies used by our hosting platform (Squarespace).

4. Lawful Bases for Processing Data

Under GDPR, we rely on the following legal grounds to collect and process your personal data:

Purpose of Processing

Responding to inquiries, questions, and support requests

Type of Personal Data

Name, Email, Message Content

Lawful Basis under GDPR

Legitimate Interests (to communicate with potential or existing clients)

Purpose of Processing

Scheduling, delivering, and managing English lessons

Type of Personal Data

Name, Email, Lesson Goals, Booking Details

Lawful Basis under GDPR

Performance of a Contract (providing requested teaching services)

Purpose of Processing

Processing lesson payments and billing records

Type of Personal Data

Payment confirmation, Billing details

Lawful Basis under GDPR

Legal Obligation and Performance of a Contract

Purpose of Processing

Analyzing site usage and improving performance

Type of Personal Data

Cookies, Analytics, Technical details

Lawful Basis under GDPR

Consent (via cookie consent banner)

5. Cookies and Tracking Technologies

Our website uses cookies provided by Squarespace and third-party tools to facilitate website navigation, analyze site usage, and ensure optimal user experience.

● Necessary Cookies: Required for fundamental website functionality, security, and accessibility. These cannot be switched off in our systems.

● Analytics & Performance Cookies: Help us measure visitor traffic, popular pages, and performance patterns to refine our offerings.

You can adjust your cookie preferences at any time through our website’s Cookie Preferences / Banner controls or directly within your web browser settings.

6. Third-Party Service Providers (Data Processors)

We do not sell, rent, or trade your personal data to third parties. We share limited personal data only with trusted third-party service providers who assist us in operating our website and delivering lessons under strict confidentiality agreements:

● Website Hosting & Infrastructure: Squarespace (stores site logs, form submissions, and analytics).

● Online Communication & Video Conferencing: Video lesson tools (e.g., Zoom, Google Meet, Skype) used to host online sessions.

● Email & Payment Services: Secure third-party email providers and payment processors required for invoices and lesson scheduling.

7. International Data Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area (EEA)—such as to server infrastructures hosting Squarespace in the United States—we ensure appropriate safeguards are implemented, such as the UK Addendum / EU Standard Contractual Clauses (SCCs) or reliance on adequacy decisions (e.g., EU-U.S. / UK-U.S. Data Privacy Framework).

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting mandates:

● Inquiries & Leads: Retained for up to 12 months after the last communication if no services are rendered.

● Client & Lesson Records: Retained for the duration of the teaching relationship and up to 6 years thereafter for tax, accounting, and legal requirements.

● Analytics Data: Retained in aggregated/anonymized formats according to standard platform policies.

9. Your Data Protection Rights under GDPR

Depending on your location, you hold specific legal rights regarding your personal information:

● Right of Access: Request a copy of the personal data we hold about you.

● Right to Rectification: Request correction of inaccurate or incomplete personal information.

● Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal reason for us to retain it.

● Right to Restrict Processing: Request that we limit the processing of your personal information.

● Right to Data Portability: Request a structured, machine-readable export of data provided to us.

● Right to Object: Object to processing based on legitimate interests or direct marketing.

● Right to Withdraw Consent: Withdraw cookie or consent-based authorizations at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at david@englishforlife.work. We will respond within one calendar month.

10. Data Security

We take suitable technical and organizational measures to protect personal data from loss, unauthorized access, alteration, or disclosure. All connections to englishforlife.work are encrypted via Standard Secure Socket Layer (SSL/TLS) encryption (HTTPS).

11. Right to Complain

If you have concerns about our handling of your personal data, please contact us first so we can resolve the issue. You also have the right to lodge a formal complaint with a supervisory authority:

● UK: Information Commissioner's Office (ICO) — ico.org.uk

● EU: Your local national Data Protection Authority (DPA).

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or website functionalities. Any updates will be posted directly to this page with an updated "Effective Date".

13. Contact Us

For questions or comments regarding this Privacy Policy or your data privacy rights, please reach out via email:

Email: david@englishforlife.work

Website: englishforlife.work