Privacy Policy

1. GENERAL INFORMATION

1.1. Data Controller Identification

• Owner: Luis Porras Wadley
• Tax ID (NIF): 25597415W
• Registered trademark: KSE Academy® (Spanish Patent and Trademark Office – OEPM)
• Address: c/ Ancha de Gracia 4, 18002 Granada, Spain
• Email: [email protected]
• Phone: +34 635 606 170
• Website: https://kseacademy.com

1.2. Applicable Legislation

This Privacy Policy is governed by:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR)
• Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD)
• Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE)

---

2. WHAT PERSONAL DATA DO WE COLLECT?

At KSE Academy, we may collect the following personal data depending on the type of interaction you have with our website:

2.1. Identification and Contact Data

• First and last name
• Email address
• Phone number

2.2. Browsing Data

• IP address
• Browser and device type
• Operating system
• Pages visited and time spent
• Referral source (referring URL)

2.3. Commercial Data

• Purchase history
• Product/service preferences

2.4. Location Data

• Approximate geographic location (through Payhip for purchases)

Important: All requested data is voluntary. However, failure to provide certain data may prevent us from providing you with some services.

---

3. WHAT DO WE USE YOUR DATA FOR? (PURPOSES AND LEGAL BASIS)

Purpose	Legal Basis	Data Processed
Managing your enquiry through the contact form	Consent of the data subject	Name, email, message
Sending newsletter and educational content	Consent of the data subject	Name, email
Sending commercial communications	Consent of the data subject	Name, email
Managing blog comments	Consent of the data subject	Name, email, website (optional), comment
Processing purchases of products/services	Performance of a contract	Name, email, billing data
Statistical analysis and website improvement	Legitimate interest	Browsing data (anonymous or pseudonymised)
Compliance with legal obligations	Legal obligation	Billing data

---

4. WHO DO WE SHARE YOUR DATA WITH?

KSE Academy does not sell, rent or transfer your personal data to third parties for commercial purposes.

We only share your data with the following data processors who help us provide our services:

4.1. Service Providers

Provider	Service	Location	Data Processed	Privacy Policy
Vultr	Hosting and servers	Madrid, Spain (server)	All website data	View policy
MXroute	Transactional email hosting	USA	Emails sent/received via @kseacademy.com	View policy
Google Drive	Cloud storage	USA (with safeguards)	Name, email (occasionally)	View policy
Vbout	Email marketing	USA (with DPF safeguards)	Name, email, IP	View policy
Pabbly Connect	Automation	India	Name, email (temporary processing)	View policy
Payhip	eCommerce (shop.kseacademy.com)	United Kingdom	Name, email, location, purchase data	View policy
Stripe	Payment processing	USA (with safeguards)	Card data (not accessible by KSE Academy)	View policy
PayPal	Payment processing	USA (with safeguards)	Payment data (not accessible by KSE Academy)	View policy
Taskade	Micro-apps (calculators)	Does not store data	None	View policy
Usermaven	Web analytics (cookieless)	Germany (Hetzner servers)	Pseudonymised browsing data	View policy
Google Analytics	Web analytics	USA (with safeguards)	Browsing data	View policy
Google Tag Manager	Tag management	USA (with safeguards)	Web event data	View policy
CookieYes	Cookie consent management	Ireland (EU)	Cookie preferences	View policy
Cloudflare	CDN, security and web performance	Global (with servers in the EU)	IP address, browsing data, device information	View policy
Akismet	Anti-spam protection for comments	USA (Automattic)	Name, email, IP, comment content, user agent	View policy

Important note: Neither KSE Academy nor Payhip have access to your bank or card details at any time. These are processed directly by Stripe or PayPal with full security.

4.2. International Transfers

Some of our providers are located outside the European Economic Area (EEA). In these cases, we ensure the protection of your data through:

• Standard Contractual Clauses approved by the European Commission
• Certification under the EU-US Data Privacy Framework (DPF) for US providers
• Adequacy decisions by the European Commission where applicable

---

5. HOW DO WE COLLECT YOUR DATA?

We collect your data through:

5.1. Contact Forms

Contact forms collect your name, email and message. This data is used exclusively to respond to your enquiry. You will not be automatically added to our subscriber list.

5.2. Newsletter Subscription

When you subscribe through subscription boxes (pop-ups, forms), your data (name and email) is added to our Vbout list to send you:

• Educational content about English and official exams
• News about courses and services
• Special offers

You can unsubscribe at any time using the link in each email.

5.3. Blog Comments

When commenting on our articles, we collect your name, email and website (optional). This data is used to publish and manage your comment.

5.4. Shop Purchases (shop.kseacademy.com)

When making a purchase through Payhip, we collect the data necessary to process the order and send you the digital product you have purchased.

5.5. Cookies and Similar Technologies

We use cookies and tracking technologies to analyse website usage and improve your experience. You can manage your preferences through the CookieYes banner.

5.6. Website Security and Performance

We use Cloudflare as a content delivery network (CDN) and to protect our website against malicious attacks (DDoS, bots, etc.). Cloudflare may process your IP address, browser information, and browsing data to optimise performance and ensure website security.

5.7. Anti-spam Protection

We use Akismet to protect blog comments against spam. When you leave a comment, Akismet may collect your name, email, IP address, comment content, and browser user agent to verify whether it is spam. This data is retained for a short period (between two weeks and ninety days) and is then automatically deleted.

---

6. HOW LONG DO WE KEEP YOUR DATA?

Type of Data	Retention Period
Contact forms	Deleted after resolving your enquiry (max. 1 year)
Newsletter subscribers	Until you request to unsubscribe
Blog comments	As long as the article is published or you request deletion
Purchase data	10 years (legal tax obligation)
Analytics data	Up to 37 months (Usermaven) / 14 months (Google Analytics)

Once these periods have elapsed, your data will be deleted or anonymised.

---

7. MINORS

Our services are aimed at people over 14 years of age. If you are under 14, you need the consent of your parents or guardians to provide us with your personal data.

If we discover that we have collected data from a minor without the required consent, we will delete that data as soon as possible.

---

8. YOUR RIGHTS

According to data protection regulations, you have the right to:

• Access: Know what data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure («right to be forgotten»): Request the deletion of your data
• Restriction: Request that we limit the use of your data
• Portability: Receive your data in a structured and readable format
• Objection: Object to the processing of your data
• Withdraw consent: At any time, without affecting the lawfulness of prior processing
• Not be subject to automated decisions: Including profiling

How to exercise your rights?

You can exercise your rights free of charge by:

Email: [email protected] (indicating in the subject line the right you wish to exercise)

Phone: +34 635 606 170

You will need to verify your identity by providing a copy of your ID card or equivalent document.

Right to lodge a complaint with a supervisory authority

If you believe we have not properly addressed your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD):

• Website: www.aepd.es
• Address: C/ Jorge Juan, 6, 28001 Madrid
• Phone: 901 100 099 / 912 663 517

---

9. SECURITY MEASURES

At KSE Academy, we take the security of your data very seriously. We have implemented appropriate technical and organisational measures, including:

• ✅ SSL Certificate (https): All communication is encrypted
• ✅ Secure hosting: Servers in Spain with physical and logical security measures
• ✅ Restricted access: Only authorised personnel can access your data
• ✅ Strong passwords: Robust password policies
• ✅ Backups: Regular backups of information
• ✅ Updates: Regularly updated software

However, no system is 100% secure. We recommend that you keep your passwords confidential and use secure connections.

---

10. COOKIE POLICY

KSE Academy uses cookies and similar technologies. You can find detailed information in our Cookie Policy and manage your preferences through the CookieYes consent banner.

Types of cookies we use:

• Technical cookies: Necessary for the website to function
• Analytics cookies: To understand how you use the website (Usermaven, Google Analytics)
• Preference cookies: To remember your settings

---

11. THIRD-PARTY LINKS AND AFFILIATE PROGRAMME

11.1. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy policies of these sites. We recommend that you read their policies before providing them with personal information.

11.2. Amazon Affiliate Programme

KSE Academy participates in the Amazon Affiliate Programme. Some links on our website lead to Amazon products. If you make a purchase through these links, we may receive a small commission at no additional cost to you.

We always clearly indicate when an article contains affiliate links. Amazon’s Privacy Policy can be found here.

---

12. UPDATES TO THIS POLICY

We reserve the right to modify this Privacy Policy to adapt it to legislative, jurisprudential or service changes.

Any substantial change will be communicated at least 10 days in advance of its effective date by:

• A prominent notice on the website
• Email to subscribers (if applicable)

The date of the last update appears at the beginning of this document.

---

13. CONTACT

For any questions about this Privacy Policy or the processing of your personal data, you can contact us at:

Email: [email protected]
Phone: +34 635 606 170
Address: c/ Ancha de Gracia 4, 18002 Granada, Spain

---

14. ACCEPTANCE AND CONSENT

By using our website and services, you declare that you have read and accepted this Privacy Policy.