Privacy Notice

Last updated: 2026-10-06

Claudia, based in Querétaro, México, is responsible for your personal data collected through spanishbyclaudia.com. This notice explains what we collect, why, who else handles it, and how you can control it.

1. Data we collect

• Account data: your name, email address and password (stored only as a one-way hash, never in plain text), and optionally your country.
• Booking data: the lessons you book, their status, the amount, and PayPal's order identifier. We never receive your card number.
• Reviews you choose to write: your rating, your text and your first name (and country, if provided).
• Technical data needed to run the Site: a session cookie that keeps you logged in, and your time-zone and language preferences stored in your browser.
• Records of acceptance of these documents (version and date) and of administrative actions on your account, such as a password reset or a suspension.

We do not collect sensitive personal data, and we do not use analytics, advertising or tracking tools.

2. Why we use your data

Needed to provide the Service:

• create and manage your account and let you sign in;
• schedule, confirm, change or cancel your lessons, and process payments and refunds;
• send you emails about your bookings (confirmation, payment pending, cancellation);
• give you access to the lesson materials;
• keep the Site secure, prevent abuse and fraud, and enforce our Terms and Conditions;
• meet legal, tax and accounting obligations.

3. Optional uses

If you write a review, we display it publicly with your first name (and country if you provided it). You can ask us to edit or remove it at any time. We do not send marketing emails; if that ever changes, we will ask for your consent first.

4. Who else handles your data

We do not sell your data. We rely on these providers to run the Site, and they process data on our behalf under their own security and privacy terms:

• Cloudflare: hosting, database and file storage. Data may be processed in data centers outside México.
• PayPal: payment processing.
• Resend: delivery of booking emails.
• Google Fonts: loads the typefaces used by the Site, which means your browser contacts Google when a page loads.
• YouTube or Vimeo: only if the introduction video is shown through one of them; otherwise the video is served from this Site.

5. How long we keep it

We keep your account data while your account is active. Login sessions expire after 30 days. Booking and payment records are kept for as long as accounting and tax law require. When you ask us to delete your account, we remove your personal data, except what the law requires us to retain.

6. Your rights

You can access your data, correct it, ask us to delete it, object to a particular use, limit its use, and withdraw consent you gave. You can edit your name, email, country and password from My account. For anything else, write to us:

clau.guerrero.manriquez@gmail.com. Please tell us who you are (the email of your account) and what you would like to do. We will answer within the time limits set by law. If you are not satisfied with our response, you can contact the personal data protection authority in México or in your country.

7. Cookies and similar technologies

The Site uses one strictly necessary session cookie to keep you logged in, and stores your time-zone and language preferences in your browser. PayPal may set its own cookies on the payment step. We do not use advertising or analytics cookies.

8. Security

We protect your data with encrypted connections (HTTPS), hashed passwords and restricted administrator access. No system is perfectly secure, so please use a strong, unique password.

9. Children

The Service is intended for people aged 18 or over, or for younger people through a parent or guardian. If you believe a minor has given us data without permission, tell us and we will delete it.

10. Changes to this notice

If we change this notice, we will publish the new version here with its date and notify you of important changes.

Read the Terms and Conditions →