DUARTE BUSINESS ENGLISHBusiness English for global professionals

Privacy Policy

Last updated: 30/09/2026

This Privacy Policy explains how Duarte Business English (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website or book our services. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

  1. Who we are (Data Controller)

The controller responsible for your personal data is:

Business name: Duarte Business English
Owner: Melissa Brooke Duarte
NIE: Y5009319W
Postal address: shown in our Legal Notice
Email: info@duartebusinessenglish.com
Website: duartebusinessenglish.com

If you have any questions about this policy or how we handle your data, contact us at the email above.

  1. What personal data we collect

Depending on how you use our site, we may collect:

When you contact us through the contact form

Your name
Your email address
The content of your message

When you book and pay for classes

Your name and email address
Billing information needed to process payment

Payments are handled securely by our payment provider (see Section 5). We do not store or have access to your full card details on our website.

When you take classes

The information you share with us during lessons, scheduling, and correspondence.

When you browse our website

Basic technical information collected automatically through cookies and similar technologies, such as your IP address, browser type, and how you use the site. See our separate Cookie Policy for full details.

When you sign up for free resources or emails

Your email address, the date and the page where you signed up, and whether you open or click the emails we send. We use this to send you what you asked for (for example the free grammar guides), a short series of follow-up emails, and The Business English Monthly.

When you join a waiting list or register for a live class

Your name, email address, country or time zone, the days and times that suit you and, if you choose to give them, your job title and company. We use this only to organise groups and live classes and to contact you about them.

  1. Why we use your data and our legal basis

We only process your personal data where we have a lawful basis to do so:

  • Responding to your inquiries via the contact form, based on your consent and our legitimate interest in answering you.
  • Arranging, delivering, and managing your classes, based on performance of a contract with you.
  • Processing your payments, based on performance of a contract with you.
  • Keeping accounting and tax records, based on compliance with our legal obligations.
  • Sending the free resources and emails you signed up for, including occasional offers, based on your consent. Every email has a one-click unsubscribe link.
  • Organising waiting lists and live classes you have asked to join, based on your request and consent.
  • Maintaining and securing our website, based on our legitimate interest in running the site.

You can withdraw your consent at any time where consent is the basis for processing (see Section 7).

  1. How long we keep your data

We keep your personal data only as long as necessary:

Inquiry messages: kept while we handle your request and for a reasonable period afterwards, then deleted.
Client and class records: kept for the duration of our working relationship and for a reasonable period afterwards.
Invoices and payment records: retained for the period required by Spanish tax and commercial law (generally several years).
Email subscribers: kept until you unsubscribe or withdraw consent.
Waiting list and live class registrations: kept until the group or class takes place and for up to 12 months afterwards, unless you become a client or ask us to delete them sooner.

  1. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who help us run our business, and only as far as needed:

Stripe (Stripe Payments Europe Ltd., Ireland) to process your payments securely.
Kit (Kit / ConvertKit LLC, United States) to store our email list and send the emails you signed up for.
Automattic (WordPress.com and Jetpack) to host this website, receive contact and waiting list forms, and produce basic visitor statistics.
Google (Google Meet) to deliver online classes.
Zoom (Zoom Communications, United States) to run free live classes and webinars.
Cloudflare (Turnstile) to protect our payment forms from spam and fraud.
YouTube (Google Ireland Ltd.) to play the videos on this website. A video only loads from YouTube when you press play, and YouTube then processes your data under its own privacy policy.

Each of these providers acts as a data processor and is bound to protect your data and use it only for the purposes we specify.

  1. International data transfers

Some of our service providers (for example, payment and video-conferencing tools) may process data outside the European Economic Area (EEA), including in the United States. Where this happens, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses or the providers’ certification under the EU–US Data Privacy Framework. You can request more information about these safeguards by contacting us.

  1. Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data (“right to be forgotten”) in certain circumstances.
Restrict or object to our processing of your data.
Data portability: receive your data in a usable format.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@duartebusinessenglish.com. We will respond within the timeframes required by law.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe your data has been mishandled:

Website: http://www.aepd.es

  1. Cookies

Our website uses cookies and similar technologies to function properly and to understand how visitors use the site. You can manage your preferences through our cookie banner. For full details, please see our separate Cookie Policy.

  1. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

  1. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review it periodically.

  1. Contact

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact:

Duarte Business English
info@duartebusinessenglish.com