Privacy and Cookie Policy

Last updated: 12 september 2026 

By accessing to this Website and utilizing our Services, you affirm that you are 18 years of age or older. Our services are intended for adults over the age of 18. We do not knowingly collect personal data from anyone under the age of 13. If we become aware such data has been collected, we will delete it promptly.

Privacy Notice

Last updated: 12 September 2026

1. Controller and contact details

1.1 Daniel Cristiano trading as Spanish in The City is the controller of the personal data described in this Notice. Privacy enquiries and requests may be sent to admin@spanishinthecity.online. Spanish in The City is registered with the Information Commissioner’s Office.

2. Personal data collected

  • Identity and contact information, including name, postal address, email address, telephone number and employer or organisation.
  • Course information, including Spanish level, language-learning needs, other languages spoken, assessment answers and results, attendance, participation and progress information.
  • Booking, transaction and invoice information. Payment-card details for scheduled Courses are processed by Stripe and are not directly stored by Spanish in The City.
  • Communications, enquiries, complaints, feedback and correspondence.
  • Technical and website information, including information collected through essential cookies, server logs, security systems and website analytics described in the Cookie Policy.
  • Event, assessment and appointment information submitted through services such as TidyCal, Testmoz, LinkedIn, Eventbrite or comparable platforms.

3. How personal data is obtained

3.1 Personal data is normally obtained directly from the individual through the website, email, telephone, messaging platforms, booking and payment systems, assessment tools, lesson participation, event registration forms, the purchase or download of teaching materials and other digital resources, and participation in online learning activities or quizzes, including where a participant chooses to provide a name or nickname.

3.2 For employer-sponsored Courses, a Client may provide a Student’s name, business contact details, job information or relevant Course requirements. Public professional information may also be used where reasonably necessary to respond to an enquiry or administer a business relationship.

4. Purposes and lawful bases

4.1 Responding to enquiries and providing Courses

We use contact, Course, assessment and communication information to respond to enquiries, assess language level, arrange and provide Courses, supply materials and manage attendance. The lawful basis is taking steps before entering into a contract and performing the contract.

4.2 Payments and legal records

We use identity, transaction, invoice and Course information to issue invoices, process payments, comply with accounting and tax requirements and maintain legal records. The lawful bases are performance of the contract and compliance with legal obligations.

4.3 Course administration and security

We use contact, communication, technical and Course information to administer Courses, protect the security of the service, improve quality, prevent misuse and handle complaints. The lawful basis is our legitimate interest in operating and protecting the service, provided that this interest is not overridden by the individual’s rights.

4.4 Employer-sponsored Courses

We use attendance, assessment and progress information to provide proportionate information to an employer Client. The lawful bases are performance of the contract and our legitimate interest in administering an employer-sponsored Course.

4.5 Newsletters and promotional communications

We may use a person’s name, email address, interests and communication preferences to send newsletters or promotional communications. The lawful basis is consent where required or our legitimate interests where permitted by direct-marketing law. Individuals may opt out at any time.

4.6 Legal claims and lawful requests

We may use relevant identity, transaction, Course and communication information to establish, exercise or defend legal claims and comply with lawful requests. The lawful bases are compliance with legal obligations and our legitimate interests.

5. Who receives personal data

5.1 Personal data may be shared, where necessary, with employer Clients; payment, scheduling and assessment providers; videoconferencing, document-sharing and learning-platform providers; website, email, hosting, security and IT providers; professional advisers; and public authorities where disclosure is required by law.

5.2 Providers may include Stripe, WhooCommerce, Google, Zoom, Quizlet, Kahoot, TidyCal, Testmoz, the website host and email provider, and providers of AI-assisted administrative tools, depending on which services are used. Spanish in The City does not sell or rent personal data to third parties for their own promotional purposes.

6. International transfers

6.1 Some service providers may process personal data outside the United Kingdom. Where a restricted transfer occurs, Spanish in The City relies on an applicable UK adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with any additional measures required. Information about the relevant safeguard may be requested using the contact details above.

7. Retention

7.1 Course-administration and routine correspondence records are normally retained for up to six years after the end of the relevant Course or business relationship, where needed for contractual, accounting, tax or legal purposes.

7.2 Assessment drafts, shared classroom documents and working teaching records are reviewed periodically and deleted or anonymised when no longer needed. Marketing information is retained until the individual opts out or it is no longer useful, subject to a reasonable suppression record being kept to respect an opt-out.

7.3 A shorter or longer period may apply where required by law, necessary for a legal claim, requested by the individual and legally permissible, or appropriate having regard to the nature and sensitivity of the information.

8. Security

8.1 Spanish in The City uses reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet or electronic-storage system can be guaranteed to be completely secure.

8.2 Where a personal-data breach occurs, Spanish in The City will assess the risk and notify the ICO and/or affected individuals where required by data-protection law.

9. Individual rights

9.1 Depending on the circumstances and lawful basis, individuals may have rights to access their personal data; correct inaccurate data; request erasure; restrict processing; object to processing; receive certain data in a portable format; and withdraw consent where consent is relied upon. Withdrawing consent does not affect earlier lawful processing.

9.2 The right to object to direct marketing may be exercised at any time. To exercise a right, contact admin@spanishinthecity.online. Identity verification may be required. No fee is normally charged, although the law permits a reasonable fee or refusal in limited circumstances.

10. Complaints to the ICO

10.1 An individual may complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or through the ICO’s published contact details. Spanish in The City would welcome the opportunity to address the concern first.

11. Required information and automated decisions

11.1 Certain identity, contact, booking and payment information is necessary to enter into or perform a Course contract. If it is not provided, Spanish in The City may be unable to respond to an enquiry, assess suitability, confirm a booking or provide the Course.

11.2 Spanish in The City does not use solely automated decision-making, including profiling, that produces legal or similarly significant effects on individuals.

12. Third-party websites and cookies

12.1 Third-party websites and embedded services operate under their own privacy notices. Spanish in The City is not responsible for their independent processing practices.

12.2 Further information about cookies and website technologies, including how to change preferences, is provided in the Cookie Policy at https://spanishinthecity.online/pcp/.

13. Cloudflare Turnestile and Spam Protection

13.1 We use Cloudflare Turnstile, provided by Cloudflare, Inc., to protect our online forms from spam, abuse and automated submissions. When Turnstile performs a security check, Cloudflare may process technical information relating to your browser, device and network connection, including your IP address. We use this service for our legitimate interest in maintaining the security and proper operation of our website and online forms.

13.2 Further information about how Cloudflare processes information through Turnstile is available in the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

14. Changes to this Notice

14.1 This Notice may be updated to reflect changes in law, technology or business practices. The latest version will be published on the website. Material changes affecting current Students or Clients will be communicated where appropriate.

Cookie Policy

Last updated: 12 September 2026

Spanish in The City uses cookies and similar technologies that are necessary for the operation, security and payment functions of its online shop.

1. Essential WooCommerce cookies

WooCommerce may place essential cookies to remember the contents of a visitor’s basket, identify when the basket changes, maintain a customer session and enable checkout. These may include:

  • woocommerce_cart_hash
  • woocommerce_items_in_cart
  • wp_woocommerce_session_

These cookies are necessary for the basket and checkout to function. The WooCommerce customer-session cookie normally remains for two days.

2. Payment and security technologies

When a visitor uses the checkout or selects a payment method, Stripe may use cookies or similar technologies to process payment, prevent fraud, maintain security and provide payment functions such as card payments, Apple Pay or Google Pay. Stripe processes payment information in accordance with its own privacy and cookie information. Spanish in The City does not directly store complete payment-card details.

3. Analytics and advertising

Spanish in The City does not use Google Analytics and does not intentionally use cookies for behavioural advertising or profiling. IONOS SiteAnalytics is used for statistical evaluation and technical optimisation. According to IONOS, this service does not use cookies and processes IP addresses in anonymised form.

4. Cookie consent and browser controls

Cookies that are strictly necessary for basket, checkout, security and payment functions cannot be rejected through a consent mechanism because the online shop cannot operate without them. If non-essential analytics, advertising or other optional cookies are introduced, this Policy will be updated and an appropriate consent mechanism introduced before they are used.

Visitors may delete or block cookies through their browser settings. Blocking essential cookies may prevent the basket, checkout or payment process from functioning correctly.

5. Third-party links

The website contains ordinary links to third-party websites. Selecting a link does not itself allow the third party to place cookies through Spanish in The City. Once a visitor accesses the external website, that website’s own cookie policy applies.

6. Contact

Questions about these Terms, the Privacy Notice or the Cookie Policy may be sent to:

Daniel Cristiano
Spanish in The City®
admin@spanishinthecity.online