Privacy policy

Who is responsible for your data

The data controller is Езикова работилница ООД [ЕИК: TO FILL IN], ул. „Добротич“ 3, ет. 7, 4000 Пловдив, Bulgaria, info@languageworkshop.works.

What we collect and why

Account: name, email, hashed password, language. Legal basis: contract (GDPR art. 6(1)(b)), to give you access to courses.

Orders: product, amount, date, payment status. Payments are handled by Stripe; we never see card details. Legal basis: contract and legal obligation (accounting).

Learning: lesson progress and community posts. Legal basis: contract.

Contact form: name, email, message. Legal basis: legitimate interest in answering your enquiry.

Marketing emails: only if you opted in. You can opt out any time.

Analytics: only after consent in the cookie banner (Plausible, no tracking cookies, no personal profiles).

AI assistant

The chat uses a model by Anthropic. Your messages are sent to Anthropic to generate a reply. We don't store conversations. Please don't enter sensitive personal data.

Processors

Vercel (hosting), Neon (database, EU), Cloudflare R2 (files), Mux (video), Stripe (payments), Resend (email), Anthropic (AI chat), Plausible (analytics, EU). Some are US-based; transfers rely on the EU-US Data Privacy Framework and/or standard contractual clauses.

How long we keep data

Account: as long as you have it. You can delete it yourself from the Account page.

Accounting records (orders, invoices): 10 years under the Bulgarian Accountancy Act.

Contact enquiries: up to 2 years.

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Data download and account deletion are available directly on your Account page.

You can complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).