Privacy Policy

1. Who We Are

Butter Language School is an online English language school operated by Morgan Butterfield, based in Bogota, Colombia. This policy explains how we collect, use, and protect your personal data when you use our website and services.

2. Data We Collect

We collect the following information:

• Account information: name, email address, and password (or magic link authentication).
• Profile information: your timezone and CEFR language level.
• Assessment results: if you take our placement test, we store your answers and estimated level.
• Booking data: class bookings, cancellations, and attendance history.
• Payment data: payment records are stored in our system, but your card details are handled entirely by Stripe — we never see or store your card number.
• Guest information: if you invite friends to a private class, we collect their name, email, and self-reported CEFR level to send them the meeting link.
• Contact messages: any messages you send through our contact form.

3. How We Use Your Data

• To create and manage your account.
• To process bookings and deliver classes.
• To process payments through Stripe.
• To send you booking confirmations, class reminders, and important account notifications by email.
• To recommend suitable classes based on your CEFR level.
• To respond to your contact messages.
• To improve our services.

4. Third-Party Services

We use the following third-party services to operate:

• Supabase — authentication and database hosting.
• Stripe — secure payment processing.
• Resend — transactional email delivery (confirmations, reminders).
• Vercel — website hosting.
• Zoom / Google Meet — video call delivery for classes.

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Cookies

We use the following cookies:

• Essential cookies: required for authentication and keeping you logged in. These cannot be disabled.
• Preference cookies: to remember your cookie consent choice.

We do not use advertising or tracking cookies. We do not use Google Analytics or any third-party analytics service.

6. Data Retention

We keep your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g., payment records for tax purposes).

7. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access your personal data — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Deletion — ask us to delete your personal data.
• Portability — request your data in a portable format.
• Objection — object to certain processing of your data.

To exercise any of these rights, please contact us.

8. Children

Our services are not directed at children under 16. If a minor wishes to use our services, a parent or guardian must create and manage the account on their behalf.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

10. Contact

If you have questions about this privacy policy or how we handle your data, please contact us.