Privacy Policy
Last updated: July 2026
Who is responsible for your data
The data controller is Pavel García Lorenzo, trading as Tuelang, tax ID PENDING — add your NIF/NIE, PENDING — add your registered address (Spain). For anything about this policy or your data, email hello@tuelang.com — that address reaches a person, not a ticket queue.
What we collect
- Contact details you give us — your name and email address.
- Booking details — the lesson time you choose and any notes you add.
- Application answers — your level, goals and anything else you write on the application form.
- Payment details — handled directly by our payment processor (Stripe). We see the amount, the date and the last four digits; we never see or store your full card number.
- Usage data — page views and advertising events, plus your IP address and device or browser type (see our cookie policy).
We do not ask for special-category data (health, beliefs, and so on), and we do not knowingly collect data from children under 16. If you believe a child has given us data, email us and we will delete it.
Why we use it, and on what legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, booking time, lesson notes | To schedule and deliver the lesson you booked and send confirmations | Performance of a contract (Art. 6(1)(b)) |
| Payment and billing records | To take payment, issue invoices and meet Spanish tax and accounting duties | Contract and legal obligation (Art. 6(1)(b) and (c)) |
| Application-form answers | To assess and respond to your cohort application | Steps taken at your request before a contract (Art. 6(1)(b)) |
| Advertising and page-view events | To measure which ads lead to bookings and improve our campaigns | Your consent (Art. 6(1)(a)) — nothing is collected until you accept on the cookie banner, and you can withdraw at any time |
| Emails you send us | To answer your question and keep a record of what was agreed | Legitimate interest (Art. 6(1)(f)) |
We do not sell your personal data, and we do not use it to make automated decisions that have a legal or similarly significant effect on you.
Who we share it with
We use trusted providers to run the service, each acting on our instructions:
- Stripe — payment processing (Ireland/USA).
- Cal.com — scheduling and calendar invites (USA).
- Resend — transactional and application email (USA).
- Meta Platforms — advertising and conversion measurement (Ireland/USA).
- Our hosting provider — serving this website and storing form submissions (EU).
We also disclose data where the law requires it — for example to tax authorities or in response to a valid legal order.
Transfers outside the EU/EEA
Some of the providers above process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards that apply to a specific transfer.
How long we keep it
- Enquiries and applications that don't become bookings — up to 12 months.
- Student and lesson records — for as long as you study with us, plus 12 months.
- Invoices and payment records — 6 years, as Spanish accounting law requires.
- Advertising event data — as set out in our cookie policy (up to 90 days).
How we protect it
The site is served over HTTPS, access to student records is limited to the people who teach and run Tuelang, and payment data never touches our systems. No service can promise perfect security, but if a breach ever affects your rights we will tell you and the supervisory authority as the GDPR requires.
Your rights
If you are in the EU/EEA you have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to how we use it (including objecting to processing based on legitimate interests), and to withdraw consent at any time without affecting what we did before you withdrew it.
Email hello@tuelang.com to exercise any of these — we respond within one month. If you think we've got it wrong, you can complain to the Agencia Española de Protección de Datos (AEPD), or to the data protection authority where you live.
Changes to this policy
If we change how we use your data, we will update this page and the date above. The version published when you book is the one that applies to that booking.