Privacy Policy

This Privacy Policy explains how Sole Proprietor Irina Permyakova (“we”, “us”, “our”), operating the language school New Roots, processes personal data when you use our website and contact forms.

1. Controller

Data controller: Sole Proprietor Irina Permyakova (ИП Пермякова Ирина).
Contact email: hello@newroots.school
Location: Prague, Czech Republic, Czech Republic / EU

2. What data we collect

When you submit a booking or contact form, we may process:

• Name
• Email address
• Preferred language and lesson format
• Self-reported language level
• Message / free-text comments you choose to send

We also process basic technical data that is typically collected by hosting providers (for example IP address, browser type, and request timestamps) for security and reliable delivery of the website.

3. Purposes and legal bases

• Responding to your enquiry / arranging lessons — Art. 6(1)(b) GDPR (steps prior to a contract) and/or Art. 6(1)(f) GDPR (legitimate interest in answering requests).
• Website security and operation — Art. 6(1)(f) GDPR (legitimate interest in keeping the service secure and available).
• Legal obligations — Art. 6(1)(c) GDPR, where applicable (for example accounting retention for paying customers).

4. How long we keep data

Contact-form data is kept only as long as needed to handle your request and any related follow-up, typically up to 12 months, unless a longer period is required by law or an ongoing student relationship.

5. Recipients and processors

We may use trusted service providers (hosting, email delivery) acting as processors under Art. 28 GDPR. Our website is intended to be hosted on Cloudflare infrastructure in accordance with their data processing terms. We do not sell your personal data.

6. International transfers

If a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses, where required.

7. Your rights

Under the GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, email us at hello@newroots.school. You may also contact the data protection authority in your EU member state.

8. Cookies

The marketing website aims to use only strictly necessary cookies (or equivalent storage) required for security and basic functionality. If we later introduce analytics or marketing cookies, we will update this Policy and request consent where required.

9. Children

Our services are directed to adults. If you believe we have collected data from a child incorrectly, contact us and we will delete it.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change accordingly.