Privacy Policy
Effective date: September 2, 2026. Last updated: October 30, 2026. This policy is part of the Terms of Service.
1. Who is responsible for your data
Natalie, independent Ukrainian language tutor, Florida, United States. Email: natalie.raylet@gmail.com. For the purposes of the GDPR and similar laws, I am the data controller.
2. What I collect and why
| Data | Where it comes from | Why I use it |
|---|---|---|
| Name, email address, time zone | Free trial form, the student cabinet, Stripe checkout, contact form, your messages | To create your student cabinet, confirm and run lessons, send the meeting link and reminders, and answer you. Your email is also your login to the cabinet. |
| Phone number | The older Cal.com booking form, while it is still on the website | A backup only: I use it if your email bounces or you miss a lesson and I cannot reach you by email. No marketing calls or texts. The free trial form and the cabinet do not ask for a phone number. |
| Free trial request: the time you picked, a hash of the confirmation code (the code itself is not stored), when you confirmed you are 19 or older, when you accepted the Terms and which version, whether you asked for tips | Free trial form | To hold the time for you, book the lesson after you confirm it, and keep a record of your consent |
| A one-way hash of your IP address, mixed with a secret value | Free trial form | To spot repeated or automated requests. Your IP address itself is not stored with the request, and the hash cannot be turned back into it. |
| Lesson schedule: booked times, reschedules, cancellations (on time or late), whether a lesson took place | The student cabinet, my Google Calendar, my lesson notes | To show your schedule, send reminders, and count the lessons used from your package |
| Payment record: amount, date, package bought, last four digits of the card, Stripe transaction ID, refunds | Stripe | To add the package to your cabinet, issue refunds, keep accounting records. Full card details never reach me. |
| Learning information: your goals, level, lesson plans, notes, workbooks, homework, progress statistics, packages bought and lessons left | Created by me during our work together | To prepare personal lessons and show your progress in the student cabinet |
| Short audio clips of you reading or speaking | Recorded during lessons with your knowledge | To compare your progress over time. Never published without your separate consent. |
| Messages you send me by email, Instagram, TikTok or the contact form | You | To reply and to keep track of our agreements |
| Reviews and feedback you give | You | To improve lessons and, with your first name only, to show on the website and social media unless you object |
| Basic technical data: IP address, browser type, pages visited | Hosting provider logs (Cloudflare) | Security, preventing abuse, and aggregated statistics of site visits. I do not use this to identify individual visitors. |
| How the website is used: pages viewed, how far you scroll, which buttons you click, screen size, country, an anonymised replay of the visit | Website analytics (PostHog) | To understand which parts of the website work and which do not, so I can improve it. Aggregated statistics only. I do not use this to identify individual visitors, and typed text is masked in replays. |
Legal bases where the GDPR or UK GDPR applies: performance of our contract (the free trial, booking, lessons, reminders, payments, the cabinet), my legitimate interests (security, preventing abuse of the trial form, keeping records, improving lessons, showing reviews), legal obligations (accounting records), and your consent (tips about learning Ukrainian, audio clips, publishing a review with your name). You can withdraw consent at any time.
3. How the free trial and the cabinet work with your data
On the free trial page you pick a time and leave your name and email. I hold that time for 20 minutes and email you a 6-digit code. You enter the code on the same page (or open the link in that email), and the lesson goes into my Google Calendar with you as a guest. Google sends you an invitation, and you get a confirmation email with a calendar file. Your cabinet is created at that moment; you sign in to it with a one-time code sent to the same email. If you pay for a package without a cabinet, it is created from the email you paid with.
The box "Send me short tips about learning Ukrainian" is optional and is not ticked for you. I keep your answer and the date. You can withdraw at any time by replying to any of my emails or writing to natalie.raylet@gmail.com.
4. Services I use to run the lessons
Your data is processed by these providers on my behalf. Each has its own privacy policy.
- Cloudflare — website hosting (Pages), the student cabinet and its database (D1), the login with a one-time code sent to your email (Access), the check that the trial form is sent by a person (Turnstile), and the scheduled job that sends lesson reminders.
- Google Calendar — the lesson schedule. Each lesson is an event in my calendar with your name and email as a guest. Google sends you the invitation and updates.
- Google Meet — the video lessons themselves. I do not record lessons in Meet.
- Stripe — payments, checkout and refunds.
- Resend — emails the website sends you: the email with the trial confirmation code, the trial confirmation, lesson reminders 24 hours and 15 minutes before a lesson, a notice when a lesson is cancelled late, and the confirmation after you buy a package.
- Cal.com — the older booking page, with its own confirmations and reminders. I am moving all booking to the student cabinet, and Cal.com will be removed.
- Web3Forms — delivery of the contact form on the website.
- PostHog — website analytics (visits, scrolling, clicks, anonymised session replay).
- Google (Gmail) — email correspondence.
I do not sell or rent your data. I do not share it with anyone else, except if the law requires it or to protect my rights, for example in a payment dispute.
5. Cookies
The website itself does not set advertising or tracking cookies. PostHog analytics runs in cookieless mode: it stores nothing in your browser, and visits are counted on the server from a daily-rotating anonymous hash. The student cabinet uses a login cookie so you stay signed in. The free trial page remembers the time zone you picked in your browser. Embedded services (Cloudflare Turnstile on the trial form, Cal.com booking popup, Stripe checkout, Google Fonts) may set their own cookies or load resources from their servers under their own policies.
6. Where your data is stored
I am based in the United States, and the services above store data in the United States and other countries. If you live in the EU, UK, Switzerland or another country with data transfer rules, your data is transferred to the US on the basis of the providers' standard contractual clauses or equivalent safeguards, and, for our own correspondence and lesson materials, because the transfer is necessary to perform our contract.
7. How long I keep your data
- Lesson materials, progress data and audio clips: while we work together and for up to 2 years after your last lesson, so that you can come back and continue where you stopped. Deleted earlier on request.
- Payment and refund records: 7 years, as required for accounting and tax purposes.
- Emails and messages: up to 2 years after our last contact.
- Contact form submissions that do not lead to lessons: up to 1 year.
- A free trial request that you do not confirm expires after 20 minutes and the time goes back to the calendar. The request itself (name, email, time zone, the IP hash) is deleted automatically 3 days later.
- Your consent records (age, Terms, tips): as long as your cabinet record exists.
8. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, Canada's PIPEDA, the Australian Privacy Act or US state privacy laws), you can ask me to:
- show you the personal data I hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, subject to records I must keep by law;
- restrict or object to certain processing;
- withdraw consent you gave earlier;
- receive your data in a portable format.
Write to natalie.raylet@gmail.com. I answer within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
9. Security
The website and the cabinet run over HTTPS. Cabinet access works through a one-time code sent to your email, so there is no password to leak. Payment data is handled entirely by Stripe. Lesson files and the database are accessible only to me and to you for your own data. No method is perfectly secure, and I will tell you without undue delay if a breach affects your data.
10. Children
I teach adult learners only (19 and older). I do not knowingly collect personal data from anyone under 19. If I learn that I have collected data from a minor, I delete it.
11. Changes
If I change this policy, I update the date at the top and, for active students, send an email. For an important change I write at least 14 days before it applies. Continuing to use the lessons after a change means you accept the updated policy.