Privacy Policy

1. Identity of the Data Controller Under the GDPR and LOPDGDD, the data controller responsible for your personal information is:

  • Business Name: Tate English

  • Owner: Kristopher Tate (Autónomo)

  • Location: San Sebastián, Gipuzkoa, Spain

  • Contact Email: Kris@Tate-English.com

  • Tax ID : [Y1415218L]

2. What Personal Data We Collect and Why We only collect the information necessary to provide you with specialized English instruction and to comply with Spanish tax laws. We collect data through the following workflows:

  • Website Hosting & Analytics (Squarespace): This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including information about your browser, network, IP address, and how you interact with our site. We use this information to ensure the site runs reliably and to understand website traffic.

  • Scheduling (Calendly & Google Calendar): When you book a specialized diagnostic session or standard class, we collect your name, email address, and specific language goals to organize our calendar and tailor your lessons.

  • Payments (Stripe): When you purchase a lesson or package, your secure payment is processed via Stripe Checkout. We do not store or see your full credit card details.

  • Invoicing & Tax Compliance (Holded / Quipu): To comply with the mandatory TicketBAI electronic invoicing system in Gipuzkoa, we collect your billing address and Tax ID (NIF/NIE/Passport) to generate legally required invoices.

3. Third-Party Data Sharing To operate efficiently as a digital-first academy, we share your data with trusted third-party platforms that act as our data processors. These include:

  • Squarespace: For website hosting and basic analytics.

  • Calendly & Google Workspace: For scheduling and email communication.

  • Stripe: For secure payment processing.

  • Zapier / Make: To securely automate the transfer of booking data to our invoicing system.

  • Holded (or Quipu): For accounting and generating cryptographic invoices.

  • Hacienda Foral de Gipuzkoa: As required by law, all invoices are transmitted automatically and in real-time to the Gipuzkoa Treasury to comply with TicketBAI regulations.

4. Data Retention and the "Data Blocking" Obligation We retain your personal data for as long as you are an active student. Once our teaching relationship ends, Spain’s LOPDGDD imposes a strict "data blocking" (bloqueo de datos) obligation.

This means your data will not be immediately deleted. Instead, it will be securely restricted and kept completely inaccessible to the public. It will only be made available to public administrations, courts, or the Spanish Data Protection Agency (AEPD) to address any potential legal or tax liabilities. We will retain blocked billing and financial records for a period of 5 years, after which the data will be permanently destroyed.

5. Minors Under 14 In accordance with Spanish law, the digital age of consent is 14 years old. If we provide English instruction to children under 14, we require explicit, documented consent from a parent or legal guardian before any personal data is collected or processed.

6. Your Data Protection Rights Under the GDPR and LOPDGDD, you have the right to:

  • Access the personal data we hold about you.

  • Rectify any inaccurate or incomplete information.

  • Request Erasure (the "right to be forgotten"), subject to the data blocking obligations mentioned above.

  • Restrict or Object to the processing of your data.

  • Data Portability, allowing you to request a copy of your data in a structured format.

To exercise any of these rights, please contact me directly at Kris@Tate-english.com . If you feel your data protection rights have been violated, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD)