top of page

Our Privacy Policy

Effective Date: November 28, 2025
Last Updated: November 28, 2025

Global Goose Languages respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who We Are:
Global Goose Languages is the data controller responsible for your personal data.

If you have any questions about this policy or how your data is handled, you may contact us using the email address above.

2. What Personal Data We Collect:
We collect only the personal data that you voluntarily provide to us, including:

  1. Name

  2. Email address

  3. Information submitted through contact forms, class interest forms, and class registration forms

  4. We do not collect or store payment card details, bank information, or billing addresses.


3. How and Why We Use Your Data (Lawful Basis):
Under GDPR, we must have a lawful reason to process your data. We rely on the following lawful bases:

a. Consent:

We process your data when you:

  • Submit a contact form

  • Request information about classes

  • Subscribe to our email newsletters
     

You may withdraw your consent at any time.


b. Contractual Necessity:

When you register for a class, we process your data as necessary to:

  • Enroll your student

  • Communicate about the class

  • Provide the educational services you requested


c. Legitimate Interest:

We may use your contact information to:

  1. Send class-related updates and reminders

  2. Improve our courses and services

  3. Send a brief optional survey after a class is completed
     

We only use your data in ways that you would reasonably expect and that do not override your privacy rights.


4. Email Communications:
We send the following types of emails:

  1. Class-related communications (required)

  2. Email reminders and updates

  3. Optional newsletters and announcements
     

You may unsubscribe from non-essential emails (such as newsletters) at any time by using the unsubscribe link included in those emails or by contacting us directly.


5. Who Processes Your Data (Third Parties):
We use trusted third-party service providers to operate our business. These providers process data only on our behalf and under appropriate safeguards.

  1. Website Hosting: Wix

  2. Payment Processing: PayPal (we do not access or store payment details)

  3. Email Services: Google (Google Workspace / Gmail)


These providers may process data outside the European Union. When this occurs, appropriate safeguards are in place to protect your data, such as standard contractual clauses.

6. How Long We Keep Your Data:
We retain personal data only for as long as necessary for its intended purpose:

  1. Inquiry and interest form data: retained for a limited period to plan future classes and notify you of availability

  2. Enrollment data: retained for the duration of the class and a reasonable period afterward for administrative and communication purposes

  3. Survey responses: retained only for internal evaluation and improvement


Data may be retained longer if required by legal or accounting obligations.

7. Your Rights Under GDPR:
If you are located in the European Union (or where GDPR applies), you have the right to:

  1. Access your personal data

  2. Request correction of inaccurate data

  3. Request deletion of your data

  4. Restrict or object to certain processing

  5. Request data portability

  6. Withdraw consent at any time

  7. Lodge a complaint with a data protection authority in your country


You may exercise any of these rights by contacting us at summer@globalgooselanguages.com. We will respond in accordance with GDPR requirements.

8. Data Security:
Your personal data is securely stored within databases hosted on our service providers’ servers. We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

9. Data Breach Notification:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the appropriate supervisory authority within 72 hours, as required by GDPR. Affected individuals will be informed without undue delay when required.

10. Changes to This Policy:
We may update this Privacy Policy from time to time to reflect legal or operational changes. The effective date at the top of this page will always indicate the most recent update.

11. Contact Us:
If you have questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

Square Logo Transparent BG Small.png
bottom of page