Last updated: June 8, 2025
Plain‑Language Promise
We wrote this Privacy Policy in clear, straightforward English. If you still have questions, please email info@lenguasclub.com and we’ll happily clarify.
1. Who We Are (Data Controller)
| Controller | Lenguas Club LLC (a New York limited‑liability company) |
| Registered Address | 120 Hawley St, Binghamton, NY 13901, USA |
| Contact Email | info@lenguasclub.com |
| EU/UK Inquiries | While we operate in the U.S., EU/UK users may contact us at the above address or email to exercise GDPR rights. |
2. What Personal Data We Collect
| Category | Examples | Collected When |
| Information You Provide | Name, email, school/organization, course preferences, language level, user-generated content (assignments, forum posts, testimonials), limited payment details (last 4 digits, card type). | Creating an account, enrolling, submitting forms, uploading homework, contacting support, surveys. |
| Information We Collect Automatically | IP address, device & browser type, pages visited, time stamps, clickstream, session duration, approximate location, email engagement (opens/clicks). | Navigating the Site or opening our emails (via cookies, pixels). |
| Information from Third Parties | Payment confirmation (Stripe, PayPal), single‑sign‑on profile (Google), analytics data (Google Analytics), videoconference attendance (Zoom). | When you authorize integrations or when vendors send us service data. |
2.1 Why We Collect Each Type of Data
| Data Type | Purpose | Legal Basis* |
| Account details | Deliver Services, maintain security | Contract |
| Course progress & preferences | Personalize learning, issue certificates | Legitimate Interest / Contract |
| Payment confirmations | Process transactions, prevent fraud | Contract / Legal Obligation |
| Usage analytics | Improve Site performance & content | Legitimate Interest |
| Marketing preferences | Send newsletters & offers | Consent |
* Legal bases refer to GDPR; definitions appear in §4.
3. How We Use Your Data
We use your information to:
- Provide & improve Services (create accounts, deliver lessons, personalize content, debug issues).
- Communicate (confirmations, service announcements, newsletters—you can unsubscribe anytime).
- Process payments through secure third‑party processors; we never store full card numbers.
- Ensure security & prevent fraud (monitor log files, enforce Terms & Conditions).
- Comply with law (tax, bookkeeping, regulatory requests).
We do not use automated decision‑making that produces legal or similarly significant effects.
4. Legal Bases for Processing (GDPR)
| Basis | When We Rely on It |
| Contractual Necessity | Creating your account, providing lessons, issuing certificates. |
| Legitimate Interests | Improving the Site, preventing fraud, limited marketing to existing learners (balanced with your rights). |
| Consent | Optional cookies, promotional emails, testimonials. |
| Legal Obligation | Tax records, court orders, bookkeeping. |
5. Cookies & Similar Tech
We use first‑ and third‑party cookies, pixels, and local storage to remember preferences, analyze traffic, and improve user experience. You may manage cookies via your browser or our Cookie Settings banner at the bottom of every page.
6. Sharing & Disclosure
We never sell or rent personal information. We share it only:
- Service Providers (hosting: AWS; payments: Stripe/PayPal; email: Mailchimp; video: Zoom; analytics: Google) bound by confidentiality agreements.
- Schools/Organizations — if you enroll through an institutional license, authorized administrators receive progress reports.
- Legal Requirements — subpoenas, court orders, or to protect rights & safety.
- Business Transfers — merger, acquisition, or asset sale (you’ll receive notice before your data is transferred).
6.1 “Do Not Sell or Share” (CCPA/CPRA)
We do not “sell” or “share” personal data as those terms are defined by California law. California residents can still submit requests via info@lenguasclub.com or the footer link “Do Not Sell or Share My Info.”
7. International Transfers
Data is stored on U.S. servers. If you reside outside the U.S., your data may be transferred here. We rely on Standard Contractual Clauses or comparable safeguards where required.
8. Data Retention
| Data Category | Typical Retention Period |
| Active learner accounts | While account is active + 2 years of inactivity, then deletion within 90 days. |
| Financial transaction records | 7 years (tax & accounting). |
| Marketing opt‑out lists | Indefinitely (to honor opt‑out). |
| Support tickets | 3 years after closure. |
We may retain anonymized or aggregated data indefinitely.
9. Security
We employ TLS encryption, firewalls, access controls, regular backups, and annual penetration tests. Despite safeguards, no system is 100% secure.
9.1 Breach Notification
If a data breach creating risk to your rights occurs, we will notify affected users and regulators as required by law.
10. Your Choices & Rights
- Unsubscribe — Click “Unsubscribe” in marketing emails or adjust preferences under Account → Notifications.
- Cookie Controls — Use your browser or our banner.
Region‑Specific Rights
| Region | Rights & How to Exercise |
| EEA/UK | Access, rectification, erasure, restriction, portability, objection. Email info@lenguasclub.com. Lodge complaints with local DPA. |
| California (CCPA/CPRA) | Right to know, delete, correct, opt‑out of sale/share, limit sensitive data, non‑discrimination. Submit requests via email or footer link. |
| Other Jurisdictions | We honor all applicable local rights—contact us. |
We will verify identity before fulfilling rights requests.
11. Children’s Privacy
Our Services are designed for school students, adult, and institutional clients. When we partner with schools, we receive only the minimum student information required—typically the student’s name, class assignment, and any officially documented accommodations or modifications (“Special Modifications”). We do not knowingly collect additional personal data from children under 13 (U.S.) or under the age of digital consent in your region unless the school has provided verifiable consent on the parents’ behalf under the FERPA/COPPA “school authority” exception. Parents or guardians who have questions or believe that inappropriate data has been supplied should contact us at info@lenguasclub.com to request deletion.
12. Links to Other Sites
Our Site may link to external sites; their privacy practices are independent of ours. Please review their policies.
13. Changes to This Policy
We may update this Policy occasionally. We will post the new version with a new “Last updated” date, and—if changes are material—notify you via email or a prominent banner.
14. Contact Us
Questions? Reach out:
Lenguas Club LLC
Attn: Privacy Officer
120 Hawley St, Binghamton, NY 13901, USA
Email: info@lenguasclub.com
By using our Site or Services you acknowledge that you have read and understood this Privacy Policy.