Privacy notice

Who is responsible

Peppe Education Company, Pasaje Cortijo 5, 29017 Málaga, Spain, is the controller for the details you send through this website. CIF/NIF — to be completed with Peppe’s verified details before publishing

What we collect and why

Free introduction form: your name, email address, time zone, Spanish level, lesson format of interest, preferred days and times, and optionally what you want to use Spanish for. We use this to answer your request, plan your free introduction conversation and prepare a personal lesson plan.

Contact form: your name, email address, chosen topic and message. We use this to handle your question, schedule change, notice to stop lessons or privacy request.

Technical safeguards: to limit spam and repeated submissions we store a one-way hashed value derived from your IP address and browser user agent, plus the time your request was received. The hash is not used to identify you or to build a profile.

We do not ask for payment details, identity documents or your date of birth on this website, and there is no newsletter or marketing consent checkbox.

Processing basis

Handling your enquiry is pre-contractual: you contact us to explore lessons, and we respond to plan an introduction and, if you wish, send a written offer. The spam and rate-limiting measures protect the service against abuse. Once you enrol, customer, invoicing and complaint records follow their own basis and retention. Final legal-basis wording — to be completed with Peppe’s verified details before publishing

Who can see your request

Requests are stored privately in the website’s hosted database. Website visitors cannot list or read stored requests; only Peppe staff with access to the private administration can. Credentials stay server-side.

Named hosting, database and email providers, their locations and any international transfer safeguards — to be completed with Peppe’s verified details before publishing

How long we keep it

Operating policy: enquiries that do not lead to lessons are deleted six months after the last interaction, unless a documented need justifies keeping them longer. Customer, contractual, financial and complaint records follow separate retention periods appropriate to each type. Our deletion practice matches what this notice says.

Cookies and tracking

This website contains no advertising pixels and no non-essential analytics. Fonts and graphics are served from the site itself. If you book your free introduction, the booking calendar is provided by Google Calendar, which processes the details you enter there under its own privacy policy. If you open the chat, it is provided by Crisp, which processes your messages under its own privacy policy; it only loads after you click the chat button. Any technical storage set by the hosting platform is documented here once the deployment is verified, rather than claimed to be absent.

Your rights

You can ask for access to your data, correction, deletion, restriction, objection and data portability where those rights apply. Use the contact form and choose “Privacy request”, or email intake@peppe.eu. You can also complain to the competent data protection authority. Supervisory authority — to be completed with Peppe’s verified details before publishing

Paid enrolment

Requesting an introduction is not an enrolment. If you decide to enrol after your introduction, you receive the applicable pre-contractual and withdrawal information in writing together with your offer.