Last updated: 25 July 2026
This Privacy Policy explains how we collect, use and protect your personal data when you visit https://lingello.com (the “Site”) or use the Lingello platform (the “Service”). We keep it as clear and jargon-free as possible — and if anything is unclear, you can always write to us.
1. Who we are (data controller)
The controller of your personal data is:
Bright Future Academy Spółka z ograniczoną odpowiedzialnością ul. Złota 75A/7, 00-819 Warszawa, Poland NIP (Tax ID): 5322089221 Email: info@lingello.com
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Polish law. Because we are based in the EU, GDPR standards apply to all our users worldwide.
2. What data we collect
Data you give us:
- Account data — name, email address and password (stored in encrypted form) when you register.
- Order and billing data — the plan you purchased, billing name, address, country, VAT number (for business customers) and transaction history.
- Payment data — payments are processed by Stripe; your full card details go directly to Stripe and are never stored on our servers. We receive only confirmation of payment and limited payment metadata (e.g. card type, last four digits).
- Newsletter and waitlist data — email address and, optionally, first name, when you sign up for our newsletter, waitlist or a free lesson plan.
- Correspondence — the content of messages you send us via email or contact forms.
Data collected automatically:
- Usage and log data — IP address, browser type and version, device type, pages visited, date, time and duration of visits, and referral source.
- Cookie data — see section 8.
We do not intentionally collect any special categories of personal data (such as health or religious data), and we ask you not to include such data in messages to us.
3. Why we process your data and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating and managing your account, providing access to lesson plans | Account data, usage data | Art. 6(1)(b) — performance of a contract |
| Processing payments and subscriptions | Order, billing and payment data | Art. 6(1)(b) — performance of a contract |
| Issuing invoices, accounting and tax obligations | Order and billing data | Art. 6(1)(c) — legal obligation |
| Responding to your messages and support requests | Correspondence, account data | Art. 6(1)(b) or 6(1)(f) — legitimate interest in handling enquiries |
| Sending newsletters and marketing emails | Newsletter data | Art. 6(1)(a) — your consent, which you may withdraw at any time |
| Analytics — understanding how the Site is used so we can improve it | Cookie and usage data | Art. 6(1)(a) — your consent (via the cookie banner) |
| Advertising measurement (Meta Pixel) | Cookie and usage data | Art. 6(1)(a) — your consent (via the cookie banner) |
| Ensuring security, preventing fraud and abuse, enforcing our Terms | Log data, account data | Art. 6(1)(f) — legitimate interest |
| Establishing, exercising or defending legal claims | Data relevant to the claim | Art. 6(1)(f) — legitimate interest |
Providing account and billing data is voluntary, but necessary to use the paid Service. Consent-based processing (marketing, analytics, advertising cookies) is always optional.
4. Who we share your data with
We share personal data only with service providers who help us operate Lingello, and only to the extent necessary:
- Stripe (Stripe, Inc. / Stripe Payments Europe Ltd) — payment processing.
- MailerLite — newsletter and email automation.
- Google (Google Ireland Ltd / Google LLC) — Google Analytics 4 site analytics (only if you consent to analytics cookies).
- Meta (Meta Platforms Ireland Ltd / Meta Platforms, Inc.) — Meta Pixel advertising measurement (only if you consent to marketing cookies).
- Hostovita — website and database hosting.
- Accounting and, where necessary, legal advisers, bound by confidentiality.
- Public authorities, where we are legally required to do so.
We do not sell your personal data, and we will never add you to our mailing list just because you contacted us with a question.
5. International data transfers
Some of our providers (e.g. Stripe, Google, Meta) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards: an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework, where the provider is certified) and/or Standard Contractual Clauses approved by the European Commission. You can contact us for more information about these safeguards.
6. How long we keep your data
- Account data — for as long as your account exists, and afterwards for the period needed to establish, exercise or defend legal claims (as a rule, no longer than the applicable limitation period).
- Billing and invoice data — 5 years from the end of the tax year in which the transaction took place, as required by Polish tax and accounting law.
- Newsletter data — until you withdraw your consent (every email includes an unsubscribe link).
- Correspondence — for as long as needed to handle your enquiry and for a reasonable period afterwards.
- Cookie data — for the lifetimes described in the cookie banner / section 8.
7. Your rights
Under the GDPR, you have the right to:
- access your data and receive a copy of it;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”), where there is no legal basis for us to keep it;
- restrict processing in the cases set out in Art. 18 GDPR;
- data portability — receive data you provided to us in a structured, machine-readable format;
- object to processing based on our legitimate interests, and to object at any time to direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email us at info@lingello.com. We will respond within one month.
If you believe we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl), or the authority in your EU country of residence.
8. Cookies and similar technologies
Cookies are small files stored on your device by your browser. We use them as follows:
- Essential cookies — required for the Site to function: login sessions, shopping cart, checkout, security, and remembering your cookie preferences. These do not require consent.
- Analytics cookies (Google Analytics 4) — help us understand how visitors use the Site (pages visited, time on page, approximate location at city level). Used only with your consent.
- Marketing cookies (Meta Pixel) — measure the effectiveness of our Instagram and Facebook campaigns and may be used to show you relevant ads on Meta platforms. Used only with your consent.
When you first visit the Site, a cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time via the cookie settings link on the Site, and you can also delete or block cookies in your browser settings. Blocking essential cookies may make parts of the Site (such as login and checkout) unavailable.
For more about how Google and Meta process data, see:
- Google: https://policies.google.com/privacy
- Meta: https://www.facebook.com/privacy/policy
9. Security
We use appropriate technical and organisational measures to protect your data, including TLS encryption of the connection to the Site, encrypted password storage, access controls, and reliance on established, certified providers for payments and infrastructure. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information and will notify you and the supervisory authority of any data breach where the law requires it.
10. Children
The Service is intended for adult professionals (English teachers) and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
12. Users outside the EU
We welcome teachers from all over the world. Wherever you are, we apply the GDPR standards described in this Policy to your data. Depending on where you live, you may have additional rights under your local privacy laws (for example, in the United States, the United Kingdom, Canada or Australia); to exercise them, contact us at info@lingello.com and we will honour applicable requests.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when we change providers or add new features. The current version, with its “Last updated” date, is always available on the Site. For significant changes, we will inform you by a notice on the Site or by email.
14. Contact
For anything related to your personal data:
Bright Future Academy sp. z o.o. ul. Złota 75A/7, 00-819 Warszawa, Poland Email: info@lingello.com