PRIVACY POLICY

Last updated: October 2025
Company: GELVION LIMITED
Registered in England and Wales

SUMMARY OF OUR COMMITMENTS
• We collect only what is necessary.
• We never sell your personal data.
• We apply strong security and encryption.
• We give you full control over your information.
• We comply with UK GDPR and respect your privacy rights.

INTRODUCTION
This Privacy Policy explains how GELVION LIMITED (“we”, “our”, “us”) collects, uses, stores, and protects your personal data when you use our website and online learning services, including language courses, digital materials, and related products (“Services”).
We are committed to protecting your privacy and handling your personal data transparently and responsibly, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing or using our Services, you agree to the terms of this Privacy Policy.

DATA CONTROLLER
The Data Controller responsible for your personal information is:
GELVION LIMITED
Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom
Email: privacy@gelvion.online

DATA WE COLLECT
We collect the following categories of personal data, depending on how you interact with our platform:

3.1. Account Information
• Full name
• Email address
• Password (securely hashed)
• Country of residence
• Selected study language, level, and goals
• Profile photo (optional)

3.2. Payment Information
• Payment method details (processed via secure third-party providers such as Stripe or PayPal)
• Billing address and tax information
We do not store full card numbers or CVV codes on our servers.

3.3. Learning and Activity Data
• Enrolled courses, lessons completed, progress reports
• Certificates, grades, and activity logs
• Messages, comments, and uploaded assignments
• Session data (IP address, device type, time zone)

3.4. Communication Data
• Correspondence with our support team
• Reviews or testimonials you submit
• Optional feedback forms or surveys

3.5. Technical Data
• Cookies and similar technologies (see our [Cookies Policy])
• Browser type, operating system, referral URLs, and usage analytics
We do not intentionally collect sensitive personal data (such as health, religion, or ethnicity) unless you voluntarily provide it and consent to its use.

LEGAL BASIS FOR PROCESSING
We process your personal data on one or more of the following lawful bases:

  • Contractual necessity — to provide and manage your access to our online courses and materials.
  • Consent — for specific purposes such as marketing communications or promotional use of testimonials.
  • Legitimate interests — to improve our services, ensure platform security, and prevent fraud.
  • Legal obligations — to comply with accounting, tax, or regulatory requirements.

HOW WE USE YOUR DATA
We use your personal data to:
• Register and manage your user account.
• Deliver and personalize your courses, materials, and certificates.
• Process payments and issue invoices.
• Communicate important updates about your classes or account.
• Provide customer support and respond to requests.
• Improve the functionality and content of our platform.
• Send marketing messages (only with your explicit consent).
• Prevent misuse, fraud, or unauthorized access.
• Comply with applicable legal and regulatory obligations.

DATA SHARING AND DISCLOSURE
We may share limited personal data with trusted third parties strictly for legitimate business purposes:

  • Payment Processors – e.g., Stripe, PayPal.
  • Hosting and Cloud Providers – for secure data storage and platform operation.
  • Teachers and Academic Partners – access limited to course management and student progress.
  • Analytics and Email Providers – for service optimization and communication (e.g., Google Analytics, MailerLite).
  • Professional Advisors – accountants, legal consultants, and auditors.
  • Regulatory Authorities – when required by law or legal process.


All third parties are bound by data protection agreements and cannot use your data for their own purposes.
We never sell or rent your personal data to other companies.

INTERNATIONAL DATA TRANSFERS
Some of our service providers may be located outside the United Kingdom or European Economic Area (EEA).
When transferring personal data internationally, we ensure an adequate level of protection through:
• Standard Contractual Clauses (SCCs) approved by the UK ICO.
• Transfers to countries with an official adequacy decision.
• Other lawful safeguards under the UK GDPR.

YOUR RIGHTS
Under the UK GDPR, you have the following rights regarding your personal data:
• Access – request a copy of your personal data.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion (“right to be forgotten”).
• Restriction – limit processing in certain circumstances.
• Data portability – receive data in a structured, machine-readable format.
• Objection – object to processing based on legitimate interests or marketing.
• Withdraw consent – revoke previously given consent at any time.
To exercise these rights, contact us at privacy@gelvion.online
We respond to verified requests within one month, unless extended as allowed by law.
You also have the right to file a complaint with the Information Commissioner’s Office (ICO) at.

DATA SECURITY
We apply strong technical and organizational measures to safeguard your information, including:
• Encrypted communication (HTTPS/TLS)
• Secure password hashing and authentication
• Restricted staff access to user data
• Regular security audits and monitoring
• Incident response procedures
In the unlikely event of a personal data breach that may affect your rights, we will notify you and the ICO as required by law.

COOKIES AND TRACKING
Our website uses cookies to operate efficiently, remember user preferences, and analyze performance.
Non-essential cookies are used only with your consent.
You can manage or disable cookies in your browser settings.
For full details, see our Cookies Policy.

MARKETING COMMUNICATIONS
With your consent, we may send you newsletters or promotional updates about our courses and learning materials.
You can unsubscribe anytime using the “unsubscribe” link in any email or by contacting us directly.
We will still send essential service communications (e.g., payment confirmations, course reminders).

CHILDREN’S PRIVACY
Our Services are intended for individuals aged 16 and above.
We do not knowingly collect personal data from children under 16.
If we become aware that such data has been provided without parental consent, it will be deleted promptly.

AUTOMATED PROCESSING
We may use limited automated tools (e.g., for course recommendations or analytics).
These processes do not make legal or significant decisions about you without human involvement.
You may request human review of any automated decision affecting you.

THIRD-PARTY LINKS
Our website may include links to third-party websites or services.
We are not responsible for their privacy practices or content.
We recommend reviewing their own privacy policies before sharing any information.

CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations.
The updated version will be posted on this page with a new “Effective Date.”
Continued use of our Services after changes take effect constitutes your acceptance of the revised Policy.

CONTACT US
For privacy questions, data requests, or complaints, please contact:
GELVION LIMITED
Email: privacy@gelvion.online
Registered office: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, United Kingdom