Privacy Policy

Last updated: April 2026

At Holaesp Ltd. (hereinafter — "we", "us", or "our") we take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use the holaesp.com website and our services, in accordance with the General Data Protection Regulation (GDPR).

1. What data we collect

We may collect the following categories of personal data:

  • Identification data: first name, last name, email address, phone number (Telegram/WhatsApp).
  • Technical data: IP address, browser type, time zone, device information, cookies.
  • Learning data: test results, learning progress, lesson recordings (solely with your consent for quality control purposes).
  • Financial data: we do NOT store your bank card details. All payments are processed through secure third-party payment gateways certified to PCI DSS standards.

2. How we use your data

Your data is used solely to provide and improve the quality of our educational services:

  • To create and manage your personal account.
  • To match you with a teacher and build an individual schedule.
  • To process payments and refunds.
  • To contact you regarding organizational matters (schedule changes, lesson links).
  • To protect the platform from fraud and ensure security.

3. Sharing data with third parties

We do not sell or rent your personal data. Your data may be shared only with a strictly limited group of third parties:

  • Teachers (only first name, language level, and time zone in order to conduct the lesson).
  • Payment providers (for secure transaction processing).
  • IT infrastructure providers (cloud servers with secure encryption).
  • In cases expressly provided for by law (at the request of law enforcement authorities).

4. Your rights (under GDPR)

In accordance with European data protection law, you have the right to:

  • Request access to the personal data we hold about you.
  • Request the correction of inaccurate or outdated data.
  • Exercise the "right to be forgotten" (deletion of all your data and account from our systems).
  • Withdraw your consent to data processing (for example, unsubscribe from email newsletters).

5. Data security

We use modern encryption protocols (SSL/TLS) to protect the transmission of data between your browser and our servers. Only authorized employees have access to user databases, using strong authentication.

6. Contact information

If you have questions regarding our Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer (DPO):
Email: [email protected]