This Privacy Policy explains how Castle Language Hub handles personal data when visitors use our website or contact us about language courses and tutoring. It applies to inquiries, enrolment-related steps, lesson administration, and related communications.
We may collect identification and contact details, course inquiry information, level screening responses, timetable preferences, enrolment details, attendance records, progress review notes, payment-related information, and technical data such as device and browser information. Where users communicate with us, we also process the content of those messages and any information needed to manage small-group language courses and tutoring.
We receive data directly from users when they make an inquiry, complete level screening, confirm course terms, enrol, or contact us by phone, email, form, or in person. We also collect information generated during scheduling, lesson administration, progress summaries, and website use, including basic technical logs and cookie-related data.
We may use session cookies to support navigation and form use, persistent cookies to remember preferences, and analytical cookies to understand site performance and usage patterns. Cookie data is used to maintain security, improve functionality, and support a consistent user experience.
Users may manage cookies through their browser settings and, where available, through on-site preference tools. Some cookies are necessary for basic site functions and may not be fully disabled without affecting the operation of the website.
We use personal data to respond to inquiries, assess language level, match learners to suitable groups and timetables, confirm course terms, manage enrolment, organize scheduled lessons, support guided practice, prepare progress summaries, process payments, maintain records, operate the website, and meet legal or accounting obligations. We may also use data to communicate about course administration and service changes.
We may share personal data with trusted service providers that support website hosting, communications, scheduling, payment processing, record management, or technical maintenance. These parties are expected to use the information only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with law, a court order, or a lawful request from a public authority. We may also share information where disclosure is necessary to establish, exercise, or defend legal claims, or to protect our rights and the safety of users or others.
Subject to applicable law, users may request access to their personal data, correction of inaccurate information, deletion where appropriate, restriction of certain processing, or objection to processing based on legitimate interests. Some requests may be limited where we must retain information for legal, contractual, or operational reasons.
To exercise a privacy right, users should submit a clear request using the contact details in this policy and provide enough information for us to verify identity and locate the relevant records. We will review the request and respond within the timeframe required by applicable law.
We keep personal data only for as long as needed to manage inquiries, enrolment, lessons, records, and legal obligations. When data is no longer required, we delete it or anonymize it where appropriate, subject to any retention period required by law.
We may update this Privacy Policy from time to time to reflect operational changes or legal requirements. The revised version will apply from the date it is posted, and we may provide additional notice where a change is material.
