Privacy Policy

At Holaesp Ltd. (hereinafter referred to as "we", "us", or "our"), we take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your information when you use the holaesp.com website and our services in accordance with the General Data Protection Regulation (GDPR).

1. What data we collect

We may collect the following categories of personal data:

• Identification data: first name, last name, email address, phone number (Telegram/WhatsApp).
• Technical data: IP address, browser type, time zone, device data, cookies.
• Educational data: test results, learning progress, class recordings (exclusively with your consent for quality control purposes), balance of virtual "pesos".
• Financial data: we DO NOT store your bank card details. All payments are processed through secure third-party payment gateways with PCI DSS certification.

2. How we use your data

Your data is used exclusively to provide and improve the quality of educational services:

• To create and manage your personal account.
• To select a teacher and create an individual schedule.
• To process payments and refunds.
• To contact you regarding organizational matters (schedule changes, lesson links).
• To protect the platform against fraud and ensure security.

3. Data transfer to third parties

We do not sell or rent your personal data. Your data may only be transferred to a strictly limited group of third parties:

• Teachers (only name, language level, and time zone for conducting the lesson).
• Payment providers (for secure transaction processing).
• IT infrastructure providers (cloud servers with secure encryption).
• In cases expressly provided by law (at the request of law enforcement agencies).

4. Your rights (under GDPR)

In accordance with European data protection legislation, you have the right to:

• Request access to your personal data that we hold.
• Request the correction of inaccurate or outdated data.
• Exercise the right to be "forgotten" (deletion of all your data and account from our systems).
• Withdraw consent for data processing (e.g., unsubscribe from email newsletters).

5. Data security

We use modern encryption protocols (SSL/TLS) to protect data transfer between your browser and our servers. Access to user databases is restricted to authorized employees using strict authentication.

6. Contact information

If you have any questions regarding our Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer (DPO):
Email: info@holaesp.com