Data protection
What the school knows about you, why, and how to ask for it back.
The school is the controller of your personal data. Write to [email protected] about anything on this page.
WHAT WE HOLD, AND WHY
If you enrol or ask about a course: your name, email, phone, the level you told us or the result of the placement test, and what you wrote in the message. We hold it in order to answer you and to run the course you signed up for. That is a contract, or the steps before one.
If you book lessons: the lessons themselves, who taught them, what you paid, and the invoice details you gave us. Payments run through Stripe and the school never sees your card number. Invoice records are kept as long as Polish tax law requires.
If you take the placement test: your answers and the level they produce, so a teacher can put you in the right group.
If you apply to teach: everything you wrote in the application, so the school can decide. If the answer is no, we keep the application only as long as we need to explain the decision.
If you agreed to hear from us: your email, for news about courses. That agreement is separate from everything else, it is never required to buy anything, and you can withdraw it at any time by writing to us.
WHO WE SHARE IT WITH
Stripe, for payments. Resend, to deliver the emails the school sends you. Neon, which hosts the database, and Hostinger, which runs the site. Google and Meta, but only for what the cookie policy describes and only if you agreed to it.
We do not sell your data. Nobody buys advertising space in your inbox from us.
HOW LONG
Enquiries that never became a course: two years, then deleted. Students: for as long as you have an account, plus what the tax rules require for the payments. Marketing consent: until you withdraw it.
SIGNING IN WITH GOOGLE OR FACEBOOK
You can create an account and sign in with Google or Facebook instead of setting a password. When you do, we receive three things from them: your email address, your name, and the id of your account with that provider. If you have a profile picture there, we also receive the address of that picture.
We use it for one thing: to create your InPolish account and to recognise you the next time you sign in. The id is stored so that a sign-in can be matched to your account - without it, every sign-in would make a new one. We do not read your contacts, your mail or your friends, we never post anything as you, and we never see your password with those providers.
Data received from Google is used in accordance with the Google API Services User Data Policy, including the Limited Use requirements. We do not pass it to anybody else, we do not use it for advertising, and we do not sell it.
To unlink Google or Facebook from your account, or to delete the account along with this data, write to [email protected]. You can also revoke our access from your side, in your Google or Facebook account settings.
YOUR RIGHTS
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or take it elsewhere. Write to [email protected] and the school will answer within a month.
If you think we have handled your data badly, you can complain to the President of the Personal Data Protection Office (UODO) in Warsaw. We would rather you told us first.