Privacy policy

Who we are

ESL Hub (“we”, “us”) offers English language training from Almere, Netherlands. We are responsible for the personal data collected through esl-hub.com, as the “controller” under the EU General Data Protection Regulation (GDPR). For any question about your data, email us at info@esl-hub.com.

What we collect and why

When you register or book a consultation

The registration form asks for your first and last name, email address and phone number, and your course choices: course, module, program length, English level, preferred schedule, start time, target IELTS band (if you chose one) and any message you add.

We use these details to contact you, arrange your free consultation and level assessment, and plan your course. The legal basis is that you have asked us to take these steps before you enrol (GDPR Article 6(1)(b)).

When you contact us

The contact form asks for your name, email address, phone number and message. If you email us directly, we receive your email address and whatever you write. We use this only to answer you. The legal basis is our legitimate interest in replying to people who get in touch (Article 6(1)(f)), or Article 6(1)(b) if you ask about joining a course.

Fields marked * are required. Without them we can’t reply to you or arrange a consultation; the other fields are optional.

We don't keep form submissions in a database. Each one is sent as an email to our inbox, and we send you a confirmation email. We don't add you to a mailing list or send you marketing.

When you take a course

Once you book a course, we also keep your schedule, attendance, level assessment, marked work, progress notes and invoices. We use them to teach your course and keep our accounts. The legal basis is our agreement with you (Article 6(1)(b)), and for invoices our legal obligation to keep financial records (Article 6(1)(c)). Online lessons take place on a video-call service, which we name in your course confirmation.

Spam protection

Our forms use Cloudflare Turnstile to tell people from automated spam. When you start filling in a form, Turnstile checks signals from your browser, and when you submit, your IP address is sent to Cloudflare with the check. This is in our legitimate interest in keeping the forms free of abuse.

Website statistics

We count visits with Umami, a privacy-friendly analytics tool. It records the page you visit, the site that referred you, your browser, operating system, device type, screen size, language and approximate location (country, region and city). Your location is worked out from your IP address, which is not stored. Umami uses no cookies, doesn't follow you across other websites, and gives us only overall numbers, not a profile of you. This is in our legitimate interest in understanding which pages are useful.

Hosting and technical logs

This website runs on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes your IP address and technical details of each request, such as the page requested and your browser. We keep short-lived technical logs to fix problems. They are deleted automatically after a few days. This is in our legitimate interest in running a secure, working website.

Cookies

We don’t use cookies for analytics, advertising or tracking. Cloudflare may set strictly necessary security cookies to protect the site from bots.

Who we share your data with

We never sell your data or share it for advertising. We use these service providers, who handle data only on our behalf:

• Cloudflare — website hosting, security and spam protection (Turnstile)
• Resend — sending form submissions and confirmation emails
• Our email hosting provider — storing the emails in our inbox
• Umami — website statistics, without personal data
• A video-call service — online lessons, if you take them
• Our bank and accountant — payments and bookkeeping, if you take a course

Some of these providers are based in the United States. When your data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep your data

• Enquiries and registrations that don’t lead to a course: deleted within 12 months of our last contact.
• Students: kept for the length of your course and as long as needed afterwards to answer questions about it. Invoices and payment records are kept for 7 years, as Dutch tax law requires.
• Technical logs: a few days.
• Website statistics: kept as overall numbers that can’t identify you.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data;
• limit how we use your data;
• send the data you gave us to you or another organisation in a machine-readable format.

Your right to object: where we use your data on the basis of legitimate interest, you can object at any time for reasons relating to your situation. We will then stop, unless we have compelling grounds to continue.

Email info@esl-hub.com to use any of these rights. We will answer within one month. We may ask you to confirm your identity first.

If you’re unhappy with how we handle your data, please tell us. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in the EU country where you live.

We don’t make decisions about you by automated means, and we don’t profile you.

Children

If you are under 16, please ask a parent or guardian to fill in our forms or contact us for you.

Security

The website is served only over an encrypted connection (HTTPS). We collect only what we need, don’t keep submissions on the website itself, and limit access to our inbox to the people who need it.

Changes to this policy

If we change how we use personal data, we will update this page and the date at the top.