This page brings together the legal notice, the privacy policy and the cookie policy of kseacademy.com. I explain what personal data I process, what I use it for, who I share it with, how long I keep it and what rights you have.
1. Who is responsible for your data
| Owner | Luis Porras Wadley |
| Tax ID (NIF) | 25597415W |
| Trade name | KSE Academy®, trademark registered with the Spanish Patent and Trademark Office (OEPM) |
| Address | c/ Ancha de Gracia 4, 18002 Granada, Spain |
| [email protected] | |
| Phone and WhatsApp | +34 635 606 170 |
| Website | kseacademy.com |
KSE Academy is me: nobody else has access to your data, apart from the providers listed in section 4.
Applicable legislation. This policy follows:
- Regulation (EU) 2016/679 (GDPR);
- Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD);
- Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
2. What personal data I process
Depending on how you use the website, I may process:
- Identification and contact data: name, email and phone number (if you call me or write to me on WhatsApp).
- Purchase data: products bought, amount, country and billing details, and the payment method used. I never see your card details or your PayPal account details.
- Download data: when you download a file from your customer dashboard, the date and time, the file, your IP address, approximate country, operating system and browser.
- Your Writing tasks: if you buy a correction, the file with your text, the exam and level, and any comments you add.
- Browsing data: pages visited, where the visit came from and type of device, pseudonymised, through my analytics tool.
- Blog comments: name, email, website (optional), comment and IP address.
The data marked as required in each form is necessary for the stated purpose: without it I cannot, for example, deliver a purchase or reply to you.
3. What I use your data for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your questions through the contact form, email, phone or WhatsApp | Consent (GDPR art. 6.1.a) |
| Sending you the free PDFs you download and, if you subscribe, my newsletter with content about English and exams, news and offers | Consent (GDPR art. 6.1.a) |
| Publishing and moderating blog comments | Consent (GDPR art. 6.1.a) |
| Managing your orders, delivering your products, giving you access to your customer dashboard and helping you | Performance of a contract (GDPR art. 6.1.b) |
| Correcting the Writing tasks you send me and sending you the report and corrections | Performance of a contract (GDPR art. 6.1.b) |
| Issuing invoices and meeting my tax and accounting obligations | Legal obligation (GDPR art. 6.1.c) |
| Logging shop downloads to protect my materials from unauthorised use, prevent fraud and resolve problems or claims | Legitimate interest (GDPR art. 6.1.f) |
| Reminding you, up to three times, about a purchase you started and did not finish. You can avoid this in the checkout form itself («No thanks») or with the link in each email | Legitimate interest (GDPR art. 6.1.f) |
| Asking you to review a product after buying it | Legitimate interest (GDPR art. 6.1.f) |
| Analysing how the website is used to improve it, without cookies | Legitimate interest (GDPR art. 6.1.f) |
| Protecting the website from attacks and spam | Legitimate interest (GDPR art. 6.1.f) |
I do not make automated decisions or build profiles that affect you.
4. Who I share your data with
I do not sell or pass on your data for commercial purposes. I only share it with the providers that help me offer my services, who act as data processors. Each one has its own privacy policy:
| Provider | What I use it for | Data it processes | Where | Privacy policy |
|---|---|---|---|---|
| Vultr | Hosting of the website server | All the website’s data | Madrid, Spain (server) | View policy |
| Cloudflare | Website security and performance | IP address and browsing data | Global network, with servers in the EU | View policy |
| SureCart | Online shop: cart, orders, customer accounts, downloads and shop emails | Name, email, billing and order details | USA (company) | View policy |
| Stripe | Card payments | Card details (not accessible to me) | USA (company) | View policy |
| PayPal | PayPal payments | Payment details (not accessible to me) | Luxembourg (EU) | View policy |
| MXroute | Email for my domains | Emails I send and receive | USA (company) | View policy |
| Google (Gmail, Drive and Docs) | Delivering Writing corrections and storing documents | Name, email, your Writing tasks and their corrections | USA (company) | View policy |
| YouTube (Google) | Videos embedded on the website, in privacy-enhanced mode (the cover image is downloaded from YouTube when the page opens; the player only loads if you press play) | IP address when the page opens (cover image) and interaction with the videos, only if you play them | USA (company) | View policy |
| Heyzine | Book samples as flipbooks, which open when you click «Look inside» in the shop | IP address and interaction with the sample, only if you open it | Spain | View policy |
| Vbout | Newsletter | Name, email and IP address | USA (company) | View policy |
| Pabbly Connect | Automations between tools (for example, adding a subscriber to the newsletter) | Name and email | India (company) | View policy |
| Reoon | Checking that an email address exists before adding it to the newsletter | Email address (kept for a few days on their server) | Not stated by the company | View policy |
| Switchy | Short links in the QR codes of my printed books (kdp.kseacademy.com) | Technical visit data (IP address, device and approximate country), only if you open one of those links | France (EU) | View policy |
| WhatsApp (Meta) | Conversations if you write to me on WhatsApp | Phone number, name and messages | Ireland (EU) | View policy |
| Usermaven | Cookieless website analytics | Pseudonymised browsing data | Germany (servers) | View policy |
| GetTerms | Cookie banner and consent management | Your cookie preferences | Australia (company) | View policy |
| Akismet (Automattic) | Spam filter for comments | Name, email, IP address and comment content | USA (company) | View policy |
| Payhip | My previous shop (payhip.kseacademy.com). It keeps the data of purchases made there, so those customers keep their downloads | Name, email, location and purchase data | United Kingdom | View policy |
Some of these providers are outside the European Economic Area. In that case, the transfer is covered by the standard contractual clauses approved by the European Commission or by adequacy decisions in force.
I only pass on data to third parties outside this list when the law requires me to (for example, to the Spanish Tax Agency).
5. How I collect your data
Contact form, email, phone and WhatsApp. I only use your data to reply to you. I do not add you to the newsletter.
Free PDFs and newsletter. When you download a PDF or subscribe through a form on the website, your name and email go to my Vbout list so I can send you the PDF and, if you subscribe, my emails. You can unsubscribe at any time with the link in each email. The website also keeps a copy of the form submission (with your IP address, browser and the page you sent it from).
Shop purchases. When you buy, SureCart collects the data needed for the order and creates your customer account, which you access without a password, with a link or a code sent to your email. Payments are processed by Stripe or PayPal. Purchases are governed by the terms of purchase.
Downloads. Every download from your customer dashboard is logged with the data listed in section 2.
Writing corrections. You send me your tasks with the submission form. I receive them in my email, correct them in Google Docs and send you the report and corrections from [email protected].
Blog comments. When you comment, I collect your name, email, website (optional) and comment. Akismet checks them to filter spam.
Cookies. See section 10.
6. How long I keep your data
| Type of data | Period |
|---|---|
| Contact messages | Until your question is resolved and, at most, 1 year |
| Copies of PDF download form submissions | 6 months |
| Newsletter subscription | Until you unsubscribe |
| Blog comments | While the comment is published or until you ask me to delete it |
| Orders and invoices | 10 years |
| Customer account | While you have purchases or until you ask me to delete it; order data is kept for the period above |
| Download log | 2 years; then it is deleted automatically |
| Writing tasks sent for correction and their corrections | 1 year from submission |
| Reminders about unfinished purchases | Until the reminders are sent or until you decline them |
| Website analytics | Pseudonymised, without identifying you individually |
After these periods, I delete the data or anonymise it.
7. Minors
To give me your data you must be at least 14 years old; if you are younger, you need your parents’ or guardians’ consent. To buy in the shop you must be of legal age or have their authorisation. If I find out that I hold data from a child under 14 without that consent, I will delete it.
8. Your rights
You can, free of charge and at any time:
- access your data: find out what information I hold and how I use it;
- rectify inaccurate or incomplete data;
- erase your data (the «right to be forgotten»);
- restrict how I process it;
- object to processing based on my legitimate interest, such as purchase reminders or review requests;
- request the portability of your data in a structured format;
- withdraw your consent, without affecting the lawfulness of the processing carried out before.
Email me at [email protected] saying which right you want to exercise. If I have reasonable doubts about your identity, I will ask you for some information to confirm it. I will reply within one month at most.
If you think I have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security measures
I apply technical and organisational measures to protect your data:
- encrypted connection (HTTPS) across the whole website;
- server in Spain and restricted access, protected with strong passwords;
- regular backups;
- regularly updated software.
No system is one hundred per cent secure, but I work to minimise the risks and respond quickly to any incident.
10. Cookies
A cookie is a small file saved on your device when you visit a website, used to make the site work properly or to remember your preferences. I treat similar technologies, such as the browser’s local storage, in the same way.
| Type | What for | Do they need your consent? |
|---|---|---|
| Technical or necessary | Making the website work: the shop cart and checkout, access to your customer dashboard, fraud prevention in payments (Stripe and PayPal), website security (Cloudflare), remembering your cookie preferences and whether you prefer light or dark mode | No |
Right now I only use technical cookies: no advertising or tracking cookies. Analytics (Usermaven) works without cookies, and YouTube videos load in privacy-enhanced mode, which does not set cookies unless you play the video.
When you visit the website, a panel lets you accept, reject or choose non-essential cookies, should I ever use any. You can change your choice at any time from that same panel.
You can also block or delete cookies in your browser settings, although the cart, the checkout or your customer dashboard may then stop working.
11. Legal notice
In compliance with article 10 of Spanish Law 34/2002 (LSSI-CE), this website is owned by me, with the identification details in section 1.
Use of the website. By browsing this website you agree to use its content lawfully, without introducing viruses, trying to access unauthorised data or copying the content in bulk or by automated means.
Intellectual property. The content of this website (texts, exercises, guides, images, illustrations, videos, audio and design) and the KSE Academy® trademark belong to me or are used with the corresponding authorisation. You may view, download and print them for your personal use, but you may not reproduce, distribute or use them for commercial purposes without my written permission. You may link to any page of the website and quote short extracts, citing the source. Shop products also have their own licence, described in the terms of purchase.
Official exams. The names of the exams (Cambridge, IELTS, LanguageCert, the Spanish Official Language Schools and others) belong to their owners and I only use them to identify the exams; I have no connection with those institutions. Exam formats and requirements may change: always check the official information on the website of the institution that runs your exam.
Links and Amazon affiliate programme. This website contains links to third-party sites, whose content and policies I am not responsible for. I take part in the Amazon Associates Programme: some links lead to Amazon products and, if you buy through them, I receive a small commission at no extra cost to you.
Governing law. This legal notice is governed by Spanish law. Any legal dispute will be resolved before the courts of Granada (Spain), without prejudice to your right, as a consumer, to go to the courts where you live.
12. Updates to this policy
I may update this policy to adapt it to legal changes or changes in the services I offer. Any important change will be published on this same page, showing the date of the last update.
Last updated: 2 October 2026.
13. Contact
For any question about this policy or about how your data is processed:
- Email: [email protected]
- Phone and WhatsApp: +34 635 606 170
- Address: c/ Ancha de Gracia 4, 18002 Granada, Spain
