Privacy Policy

Last updated: 05/01/2025

1. Introduction

She’s So Spanish (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit https://shessospanish.com, contact us, or use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.



2. Who We Are

Business name: She’s So Spanish
Owner: Dina
Based in: United Kingdom
Contact phone: +44(0)7887 519653

She’s So Spanish provides Spanish language tuition.



3. What Data We Collect

We may collect and process the following personal data:

a) Information you provide directly
• Name
• Email address
• Phone number•
Any information you include when contacting us via forms, email, WhatsApp, or phone

b) Technical data

• IP address
• Browser type and version
• Device and operating system
• Pages visited and time spent on the site

(This data is typically collected via analytics tools.)



4. How We Use Your Data

We use your personal data to:
• Respond to enquiries and messages
• Provide information about our services
• Arrange lessons or calls
• Improve our website and services
• Comply with legal or regulatory obligations

We do not sell or rent your personal data to third parties.



5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:
Consent – when you submit a contact form or request information
Contract – where processing is necessary to provide tutoring services
Legitimate interests – to operate and improve our business and website
Legal obligation – where required by law



6. Cookies and Analytics

Our website may use cookies and similar technologies to improve user experience and analyse website traffic.
These may include:
• Essential cookies (required for the site to function)
• Analytics cookies (e.g. Google Analytics)
You can control or disable cookies through your browser settings.



7. Third-Party Services

We may use trusted third-party services to operate our business, such as:
• Website hosting providers
• Analytics services
• Email or messaging platforms
These providers only process data on our instructions and are required to keep your data secure.



8. Data Retention

We retain personal data only for as long as necessary:
• Enquiry data: up to [e.g. 12 months] after last contact
• Client data: for the duration of the service and as required for legal or accounting purposes



9. Your Rights

Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)
You can exercise these rights by contacting us using the details above.



10. Data Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, or disclosure.



11. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.



12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.



13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:
Phone: +44(0)7887 519653