Privacy Policy

Last Updated: January 15, 2026

English Bright Academy ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website, enroll in our courses, or interact with our services. By using our website or services, you agree to the terms outlined in this policy.

1. Information We Collect

We collect various types of information to provide and improve our services:

1.1 Personal Information You Provide

When you register for courses, book a trial lesson, or contact us, you may provide:

  • Full name
  • Phone number
  • Postal address
  • Date of birth (for certain courses)
  • Current English proficiency level
  • Learning goals and preferences
  • Payment information (processed securely through third-party payment processors)
  • Any other information you choose to provide in forms or communications

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

  • IP address and general location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on our website
  • Referring website or source
  • Device information (mobile, tablet, desktop)

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. For detailed information about our cookie usage, please see our Cookie Policy.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

  • Processing course registrations and bookings
  • Scheduling and conducting lessons
  • Providing personalized learning materials and curriculum
  • Assessing your progress and providing feedback
  • Issuing certificates upon course completion
  • Processing payments and managing your account

2.2 Communication

  • Responding to your inquiries and support requests
  • Sending lesson reminders and schedule updates
  • Providing important information about your courses
  • Notifying you of changes to our services or policies
  • Sending promotional materials and special offers (with your consent)

2.3 Improvement and Analysis

  • Analyzing usage patterns to improve our website and services
  • Conducting research to develop new courses and features
  • Monitoring and improving teaching quality
  • Understanding student demographics and preferences

2.4 Legal and Security

  • Complying with legal obligations and regulations
  • Protecting against fraud and unauthorized access
  • Enforcing our terms and conditions
  • Resolving disputes and investigating complaints

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill our contractual obligations to provide educational services
  • Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services and preventing fraud
  • Legal Obligation: Processing required to comply with legal and regulatory requirements

4. Data Sharing and Disclosure

We do not sell your personal information to third parties. However, we may share your data in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist us in operating our business:

  • Payment processors (for secure transaction handling)
  • Video conferencing platforms (for online lessons)
  • Cloud storage providers (for secure data storage)
  • Email service providers (for communications)
  • Analytics services (for website improvement)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Educational Partners

With your consent, we may share relevant information with exam boards, certification bodies, or partner institutions when necessary for course administration or certification.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

  • Comply with legal processes
  • Protect our rights and property
  • Prevent fraud or illegal activity
  • Protect the safety of our students, staff, or the public

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring organization, subject to the same privacy protections.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

  • Active Students: Your data is retained throughout your enrollment and for the duration of your course package validity
  • Former Students: We retain course records and certificates for 7 years after course completion for verification purposes
  • Inquiries: Contact form submissions and inquiries are retained for 2 years
  • Marketing Consent: If you subscribe to marketing communications, we retain your contact information until you unsubscribe
  • Legal Requirements: Some data may be retained longer if required by law (e.g., financial records for tax purposes)

After the retention period expires, we securely delete or anonymize your personal information.

6. Your Rights and Choices

Under GDPR and UK data protection laws, you have the following rights regarding your personal information:

6.1 Right to Access

You can request a copy of the personal information we hold about you.

6.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information in certain circumstances, such as when it's no longer necessary for the purposes collected or if you withdraw consent.

6.4 Right to Restrict Processing

You can request that we limit how we use your personal information in specific situations.

6.5 Right to Data Portability

You can request a copy of your personal information in a structured, commonly used format that can be transferred to another service provider.

6.6 Right to Object

You can object to processing of your personal information for direct marketing purposes or based on legitimate interests.

6.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

6.8 Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

To exercise any of these rights, please contact us at +44 7302 257754 or +44 7569 785604. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

  • Secure Socket Layer (SSL) encryption for data transmission
  • Encrypted storage of sensitive data
  • Regular security assessments and updates
  • Access controls limiting who can view personal information
  • Staff training on data protection and confidentiality
  • Secure password policies and authentication measures
  • Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. International Data Transfers

Your personal information is primarily stored and processed in the United Kingdom. If we transfer data to countries outside the UK or European Economic Area (EEA), we ensure adequate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Transfers to countries with adequacy decisions
  • Other legally approved transfer mechanisms

9. Children's Privacy

Our services are designed for students aged 16 and above. If a student is under 16, we require parental or guardian consent before collecting personal information. Parents or guardians have the right to review, request deletion of, or refuse further collection of their child's information by contacting us.

10. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification to registered students (for material changes)
  • Displaying a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

English Bright Academy
789 Hobbs corner
Lake Charlotte
SO5 7AN
United Kingdom

Phone: +44 7302 257754 or +44 7569 785604

13. Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the relevant supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom

Website: www.ico.org.uk
Helpline: 0303 123 1113