📑 Privacy Policy for Next Level English

Effective date: 1st September 2025

Next Level English (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data of you and your child. This Privacy Policy explains how we collect, use, and safeguard your personal information in line with the General Data Protection Regulation (GDPR) and applicable EU and Spanish data protection laws.

1. Who We Are

Next Level English is an online school providing small-group English classes for bilingual children.

Legal entity / Data Controller: Next Level English - Richard Andrew Magee
Business type: Autonomo
Address: 138 Rambla del Poblenou, Barcelona 08018
Email : info@nextlevelenglish.es

2. What Data We Collect

When you register your child, we collect:

Parent/guardian details: name, email, phone number, billing information.
Child details: name, date of birth, year group.
Voluntary information: your child’s interests or learning goals (optional, only used to tailor classes).

When you use our services, we may also collect:

Class recordings (video/audio) — for quality assurance, safeguarding, and teacher training only.
Communication records — emails or messages exchanged with you about classes.

3. How We Use Personal Data

We use your data only for:

Providing online educational services.
Communicating with you about lessons, scheduling, and school activities.
Processing billing and administration.
Improving our teaching quality through limited use of class recordings.
Ensuring the safety and quality of our online classes.

We do not use your data for automated decision-making or profiling.

4. Class Recordings

Some lessons may be recorded for quality assurance, safeguarding, and teacher training.
These recordings are not shared publicly and are erased once no longer required for training.
We will never use class recordings for promotional purposes without your explicit written consent.

5. Legal Basis for Processing

We process your data under the following lawful bases (Article 6 GDPR):

Contractual necessity: to provide the classes you have registered for.
Legal obligation: to maintain tax and billing records.
Consent: for optional information you provide (e.g. child’s interests) and for marketing communications (if you opt in).
Legitimate interests: to ensure the safety, quality, and improvement of our teaching.

6. Data Storage & Security

All personal data is stored securely using GDPR-compliant digital systems.
Access is restricted to authorised staff/teachers only.
We take appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse of data.

7. Data Retention

Student and parent records are kept for as long as your child is enrolled and for a reasonable period thereafter (up to 6 years) to comply with legal and tax obligations.
Class recordings are retained only as long as necessary for training/safeguarding and are then permanently deleted.
Marketing contact details are kept until you withdraw consent (unsubscribe).

8. Sharing of Data

We do not sell or rent your data. We only share it when necessary to deliver our services:

With payment processors (e.g. Stripe) for billing.
With digital platforms we use to deliver classes (e.g. Zoom, Google Meet).
With legal authorities if required by law.

All third-party providers we use comply with GDPR and protect your data.

9. Your Rights (GDPR)

You have the right to:

Access your data (request a copy).
Correct inaccuracies.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Withdraw consent (e.g. unsubscribe from marketing).
Data portability (request your data in a usable format).

To exercise your rights, contact us at [Your Email].

10. International Clients

As we work with families in Spain, France, Italy, Germany, and across the EU, your data is protected under the GDPR regardless of your location.

11. Updates to This Policy

We may update this Privacy Policy occasionally. The updated version will always be available on our website, with the “effective date” at the top.