Privacy Policy

We are committed to protecting your privacy and handling your personal data responsibly, in accordance with the General Data Protection Regulation (GDPR).

Who we are

JennyLingo is an online English learning platform providing 1:1 lessons, progress tracking, and structured lesson feedback.

The data controller is Jenny Wright, trading as JennyLingo, resident in Italy. You can contact her at:

Email: admin@jennylingo.com

What data we collect

When you create an account and use the platform, we collect the following categories of personal data:

• Identity & account: name, email address, hashed password, timezone
• Profile: avatar image, biography, spoken languages, learning goals
• Learning data: CEFR level history, lesson records, lesson topics, tutor-written feedback
• Communications: chat messages between you and your tutor, chat file attachments (automatically deleted after 7 days)
• Payment records: purchase history and transaction IDs (we do not store card numbers — payments are processed securely by Stripe)
• Technical and security data: IP address, browser type and request details, recorded in server logs
• Account activity: records of security and account events (for example logins, failed logins, lesson bookings and cancellations), with the date, IP address and browser type
• Contact form: name, email address, optional company name, your message, and technical details (IP address, browser type, language and referring page) used to protect the form from spam and abuse

Why we process your data

• To provide access to the learning platform and its features.
• To enable communication between tutors and students.
• To improve our services and overall learning experience.
• To comply with legal and regulatory obligations.

Legal basis for processing

• Performance of a contract (delivery of educational services).
• Legitimate interest (platform security, service improvement, and fraud prevention).
• Consent (where required, such as optional communications or non-essential cookies).

Data retention

Account and learning data is retained for as long as your account is active or as required to provide the service. Chat file attachments are automatically deleted after 7 days. Payment records are retained as required by applicable tax and accounting law. You may request deletion of your account and personal data at any time by contacting admin@jennylingo.com. Server logs, including IP addresses, are kept for up to 30 days for security and fraud-prevention purposes and are then automatically deleted. Account activity records are kept for up to 90 days for security and support purposes and are then automatically deleted. Contact form messages are kept for up to 24 months, or for 30 days after we delete them. The technical details sent with a message (IP address, browser type, language and referring page) are removed after 90 days. Records of requests to our website (IP address, page, browser type and language, referring page) may also be stored in our database for up to 30 days to monitor security and traffic; statistics derived from them contain no IP addresses.

Data sharing

We do not sell your personal data. We share data only with the following trusted third-party processors under GDPR-compliant agreements:

• Stripe, Inc. — payment processing. Stripe stores and processes card data on our behalf. See Stripe's privacy policy at stripe.com/privacy.
• Hosting and infrastructure providers — for storing and serving platform data.
• Cloudflare, Inc. — bot protection (Turnstile) on the contact, login, signup and password-reset forms. Cloudflare receives your IP address and browser details to tell humans from automated traffic. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

No personal data is shared with advertisers or data brokers.

Your rights

• Access, correct, or delete your personal data.
• Restrict or object to certain data processing activities.
• Withdraw your consent at any time, where applicable.
• Lodge a complaint with your national Data Protection Authority.

To exercise your rights or ask questions about this policy, please contact us at admin@jennylingo.com.

Supervisory authority

As Jenny Wright is resident in Italy, the lead supervisory authority for this service is the Garante per la protezione dei dati personali (www.garanteprivacy.it). If you are based in another EU country, you may also contact your national Data Protection Authority.

For more details about how we use cookies, please see our Cookie Policy.