Privacy Policy

Last Updated: 15 January 2025

At Smallex Tiny, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our services or visit our website at smallextiny.com.

We're a Portuguese pronunciation school based in London, and we handle data in line with UK GDPR and Data Protection Act 2018. If you have questions about anything here, just get in touch.

Who We Are

Smallex Tiny operates as a language education provider specializing in Portuguese pronunciation training. Our registered address is Clerkenwell Road (Stop CN), London EC1R 4TF, United Kingdom.

For any privacy-related questions or concerns, you can reach us at [email protected] or call +441902556606 during business hours.

Information We Collect

The type of information we gather depends on how you interact with us. Here's what we typically collect:

Information You Provide Directly

  • Contact details: Your name, email address, phone number, and postal address when you enquire about our programmes or sign up
  • Account information: Username, password, and preferences when you create a learning account
  • Payment data: Billing information and transaction details when you purchase courses (payment processing is handled by secure third-party providers)
  • Learning progress: Course completion rates, assessment scores, and areas where you need extra support
  • Communications: Messages you send us through contact forms, emails, or support channels

Information Collected Automatically

  • Technical data: IP address, browser type, device information, and operating system
  • Usage data: Pages visited, time spent on site, links clicked, and navigation patterns
  • Cookies and tracking: Small files stored on your device to remember preferences and improve functionality

We don't collect sensitive personal data like health records, religious beliefs, or biometric information unless you specifically provide it for accessibility accommodations.

How We Use Your Information

We use the information we collect for specific purposes that help us deliver better language education services:

Purpose Legal Basis
Providing and managing your courses and learning materials Contract performance
Processing payments and preventing fraud Contract performance and legal obligation
Sending course updates, learning resources, and support materials Contract performance
Responding to enquiries and providing customer support Legitimate interests
Improving our website and course content based on usage patterns Legitimate interests
Sending marketing emails about new courses or special offers Consent (you can opt out anytime)
Complying with legal requirements and protecting our rights Legal obligation

We won't use your data for purposes beyond what we've outlined here without getting your explicit consent first.

Sharing Your Information

We don't sell or rent your personal data to third parties. However, we do share information with specific partners who help us run our services:

Service Providers

  • Payment processors: Secure platforms that handle card transactions and payment verification
  • Email services: Providers that help us send course materials and communications
  • Cloud hosting: Services that store course content and maintain our learning platform
  • Analytics tools: Platforms that help us understand how people use our website

All service providers are carefully vetted and bound by contracts that require them to protect your data and use it only as we direct.

Legal Requirements

We may disclose your information if required by law, court order, or government request. This includes situations where disclosure is necessary to prevent harm or protect our legal rights.

If our business structure changes through merger, acquisition, or sale, your data may be transferred to the new entity. We'll notify you before this happens and explain any changes to how your information is handled.

International Data Transfers

Some of our service providers operate outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Transfers to countries with adequacy decisions from the UK government
  • Standard contractual clauses approved by UK authorities
  • Additional security measures where needed to protect your rights

You can contact us for more details about specific transfers and the protections we've implemented.

Data Security

Protecting your information is something we take seriously. We've implemented various technical and organizational measures:

  • Encrypted data transmission using SSL/TLS protocols
  • Secure password storage with industry-standard hashing
  • Regular security audits and vulnerability assessments
  • Restricted access to personal data on a need-to-know basis
  • Staff training on data protection practices
  • Secure backup systems with encrypted storage

While we work hard to protect your data, no system is completely foolproof. We can't guarantee absolute security, but we continuously monitor and improve our defenses.

How Long We Keep Your Data

We retain your information only as long as necessary for the purposes outlined in this policy:

Active Students

While you're enrolled in courses or actively using our services, we keep your account information and learning records accessible.

After Course Completion

We retain learning records for up to three years after you complete your final course. This allows you to access certificates and review your progress history.

Inactive Accounts

If your account remains inactive for more than two years, we'll send you a reminder email. After three years of inactivity, we'll delete your account unless you've requested otherwise.

Financial Records

Payment and billing information is kept for seven years to comply with UK tax and accounting regulations.

Marketing Data

If you've subscribed to marketing emails but never enrolled, we'll keep your contact details for two years. You can unsubscribe anytime.

Your Rights and Choices

Under UK data protection law, you have several rights regarding your personal information:

Access Your Data

You can request a copy of the personal information we hold about you. We'll provide this in a commonly used electronic format within one month of your request.

Correct Inaccurate Information

If any of your personal details are wrong or outdated, you can ask us to correct them. You can update most information directly through your account settings.

Delete Your Data

You can request deletion of your personal information in certain circumstances, such as when it's no longer needed or if you withdraw consent. Some data may need to be retained for legal reasons.

Restrict Processing

You can ask us to temporarily stop using your data in specific situations, like when you're disputing its accuracy or questioning whether we need it.

Data Portability

You can request your data in a structured format that you can transfer to another service provider.

Object to Processing

You can object to how we use your data for direct marketing or when we're relying on legitimate interests as our legal basis.

Withdraw Consent

Where we're using your data based on consent, you can withdraw that consent anytime. This won't affect any processing that happened before you withdrew consent.

To exercise any of these rights, email us at [email protected] with details of your request. We'll respond within one month and may need to verify your identity first.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and understand how people use our site.

Essential Cookies

These are necessary for the website to function properly. They enable basic features like page navigation, secure access to your account, and course delivery.

Performance Cookies

We use these to collect anonymous information about how visitors use our site, which helps us identify areas for improvement.

Functionality Cookies

These remember your preferences and choices to provide a more personalized experience on return visits.

Marketing Cookies

With your consent, we use these to show relevant advertisements and track campaign effectiveness.

You can control cookie settings through your browser preferences. Blocking certain cookies may affect website functionality.

Children's Privacy

Our services are designed for adults and young people aged 16 and over. We don't knowingly collect information from children under 16 without parental consent.

If we discover we've accidentally collected data from someone under 16 without proper consent, we'll delete it promptly. Parents who believe we may have information about their child should contact us immediately.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our website.

The "Last Updated" date at the top of this page shows when the most recent changes were made. Continued use of our services after changes take effect means you accept the updated policy.

Making a Complaint

If you're not satisfied with how we've handled your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

We'd appreciate the chance to address your concerns before you contact the ICO, so please reach out to us first if possible.

Questions About Your Privacy?

If anything in this policy is unclear or you have specific questions about how we handle your information, we're here to help.

Phone: +441902556606
Address: Clerkenwell Road (Stop CN), London EC1R 4TF, United Kingdom