Privacy policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation, GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), the data controller for the personal data collected through this website is:

Name: Richard Peter Geraghty

Address:

Email: info@rgenglishlab.com

2. What Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with our website and services:

Identification data: full name, ID/passport number.
Contact data: email address, telephone number, postal address.
Academic data: English level, course preferences, learning objectives.
Browsing data: IP address, browser type, operating system, pages visited, cookies (see our Cookie Policy).
Financial data: bank account or payment details (only when necessary for invoicing or payment processing).

3. Purposes, Legal Basis, and Retention Periods

Your personal data may be processed for the following purposes:

Purpose	Data Processed	Legal Basis	Retention
Responding to enquiries	Name, email, phone, message content	Consent (Art. 6.1.a GDPR)	Until resolved + 1 year
Provision of English teaching services	Name, ID, contact data, academic data, payment data	Performance of contract (Art. 6.1.b GDPR)	Duration of contract + legal retention periods
Invoicing and accounting	Name, ID, address, payment data	Legal obligation (Art. 6.1.c GDPR)	6 years (Spanish Commercial Code)
Sending commercial communications	Name, email	Consent (Art. 6.1.a GDPR)	Until consent is withdrawn
Website analytics	Browsing data, IP address	Consent (Art. 6.1.a GDPR)	See Cookie Policy

You are not obliged to provide your personal data; however, failure to provide certain data may prevent us from responding to your enquiry or providing our services.

4. Recipients of Personal Data

Your personal data will not be transferred to third parties except in the following circumstances:

When required by law or by a competent judicial or administrative authority.
To service providers who process data on our behalf (data processors), such as web hosting providers, payment processors, or email marketing platforms, with whom appropriate data processing agreements are in place.
Where you have given your explicit consent.

Some of these service providers may be located outside the European Economic Area (EEA). In such cases, appropriate safeguards will be applied in accordance with Articles 46 and 49 of the GDPR, such as Standard Contractual Clauses approved by the European Commission.

5. International Data Transfers

Where we use third-party services that may transfer data outside the EEA (for example, Google Analytics or email marketing platforms based in the United States), we ensure that adequate safeguards are in place, including EU Standard Contractual Clauses or an adequacy decision by the European Commission, as applicable.

6. Your Rights

Under the GDPR and LOPDGDD, you have the following rights in relation to your personal data:

Right	Description
Access	You have the right to obtain confirmation as to whether your personal data is being processed and to access such data.
Rectification	You may request the correction of inaccurate personal data or the completion of incomplete data.
Erasure	You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Restriction	You may request that processing be restricted in certain circumstances, such as when you contest the accuracy of your data.
Data portability	You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Objection	You may object to the processing of your personal data in certain circumstances, including direct marketing.
Withdrawal of consent	Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please send a written request to info@rgenglishlab.com or to our postal address, including a copy of your ID or equivalent document to verify your identity.

We will respond to your request within one month. In complex cases, this period may be extended by a further two months, in which case you will be informed accordingly.

7. Right to Lodge a Complaint

If you believe that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD):

Website: https://www.aepd.es

Address: C/ Jorge Juan 6, 28001 Madrid, Spain

8. Security Measures

Richard Peter Geraghty has implemented appropriate technical and organisational measures to ensure the security of your personal data and to prevent its unauthorised alteration, loss, processing, or access, taking into account the state of the art, the nature of the data, and the risks to which it is exposed.

These measures include, among others, the use of SSL/TLS encryption for data transmission, access controls, regular security reviews, and secure data storage practices.

9. Data of Minors

This website is not directed at children under the age of 14. We do not knowingly collect personal data from children under 14 without the consent of a parent or legal guardian. If we become aware that personal data has been collected from a minor without proper consent, we will take steps to delete such data.

For students aged 14 to 17, we may process their personal data with their consent, although we recommend that parents or guardians supervise the provision of personal data on this website.

10. Social Media

RG English Lab may maintain profiles on social media platforms such as Facebook, Instagram, or LinkedIn. If you follow or interact with our profiles, the processing of your data will be governed by the privacy policies of each social media platform. We recommend that you review the privacy settings and terms of use of each platform.

11. Changes to this Privacy Policy

This Privacy Policy may be updated at any time to reflect changes in legislation, case law, or our data processing practices. Any modifications will be published on this page with an updated revision date. We encourage users to review this policy periodically.

12. Contact

If you have any questions or wish to exercise your data protection rights, you may contact us at: