Privacy Policy
Last updated: 28 August 2026
1. Who is responsible for your data?
The person responsible for processing personal data through this website is:
Joe Robert Tuckwell
English with Ideas
Munich, Germany
Email: joesellearning@gmail.com
No data protection officer has been appointed because there is no legal requirement for this small independent business to appoint one.
2. About this policy
This privacy policy explains what personal data may be processed when you visit the English with Ideas website, contact me, watch an embedded video, follow an external link, or book an English lesson.
Personal data means information that relates to an identified or identifiable person, such as a name, email address, telephone number, IP address, or booking information.
3. Website hosting and technical data
This website is hosted by WordPress.com, a service provided by Automattic Inc.
When you visit the website, WordPress.com may automatically process technical information including:
- Your IP address
- Browser and device information
- Operating system
- Date and time of access
- Pages visited
- Referring website
- Technical log and security information
- Approximate geographical information derived from your IP address
This information is processed to deliver the website, maintain its security and stability, prevent misuse, and produce basic website statistics.
The legal basis is Article 6(1)(f) GDPR. The legitimate interests are providing a functional and secure website, identifying technical problems, and understanding the general use of the website.
Automattic may process information on servers located within and outside the European Economic Area. According to WordPress.com, appropriate contractual safeguards are used where legally required.
More information is available in Automattic’s privacy notice for visitors:
4. WordPress.com statistics
WordPress.com provides built-in visitor statistics. These statistics help me understand information such as how many people visit the website, which pages they view, the country from which visits originate, and how visitors found the website.
WordPress.com states that site statistics are collected using a tracking pixel. IP addresses may be processed to calculate these statistics. I use these statistics only in an aggregated form and do not use them to identify individual visitors.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is understanding and improving the usefulness and performance of the website.
I do not currently use Google Analytics, Meta Pixel, or another independently installed analytics service.
5. Cookies
WordPress.com may use cookies or similar technologies to provide website functionality, maintain security, remember visitor preferences, and produce website statistics.
Where consent is legally required for a non-essential cookie or similar technology, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn through the cookie settings or by deleting or blocking cookies in your browser.
Blocking cookies may affect the operation of certain website features.
Further information about WordPress.com cookies is available at:
https://wordpress.com/support/cookies
6. Embedded YouTube videos
This website contains videos embedded from YouTube. YouTube is a service provided in the European Economic Area by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When a page containing an embedded YouTube player is loaded or when you interact with the player, your browser may connect to YouTube’s servers. YouTube may receive information including your IP address, browser and device information, the page visited, and your interaction with the video. If you are signed in to a Google or YouTube account, Google may associate the interaction with your account.
YouTube may also use cookies, local storage, or similar technologies. Where consent is legally required, the legal basis is Article 6(1)(a) GDPR. Where no consent is required, the processing is based on Article 6(1)(f) GDPR and my legitimate interest in presenting relevant educational video content.
You can find more information in Google’s privacy policy:
https://policies.google.com/privacy
7. Contact by email
If you contact me by email, I process the information you provide, which may include your:
- Name
- Email address
- Message
- Lesson requirements
- Other information you choose to include
This information is used to respond to your enquiry and, where applicable, to arrange or provide English lessons.
Where your message concerns a possible or existing lesson agreement, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR and my legitimate interest in responding to messages concerning English with Ideas.
Email communication is handled using Gmail, a service provided by Google. Google may process technical and communication data in accordance with its privacy policy:
https://policies.google.com/privacy
Please avoid sending particularly sensitive personal information by ordinary unencrypted email.
8. Contact through WhatsApp Business
The website includes a link through which you can contact me using WhatsApp Business. Simply viewing this website does not send information to WhatsApp through this ordinary link. Data is transmitted when you choose to open WhatsApp and send a message.
If you contact me through WhatsApp, I may process your telephone number, profile name, profile picture, message content, attachments, and communication metadata.
This information is used to respond to your enquiry and, where applicable, arrange or provide English lessons. The legal basis is Article 6(1)(b) GDPR where the communication concerns a lesson agreement. For other enquiries, the legal basis is Article 6(1)(f) GDPR.
For users in the European Region, WhatsApp is provided by WhatsApp Ireland Limited. WhatsApp processes information independently in accordance with its own privacy policy. WhatsApp states that personal messages and calls are protected by end-to-end encryption.
You are not required to use WhatsApp and may contact me by email instead.
WhatsApp’s privacy policy is available at:
https://www.whatsapp.com/legal/privacy-policy-eea
9. Booking lessons through TidyCal
The website contains an external link to my booking page on TidyCal. The booking form is hosted by TidyCal and is not embedded directly into this website.
If you follow the link and make a booking, TidyCal may collect information including:
- Your name
- Email address
- Postal or billing address
- Time zone
- Selected lesson and appointment time
- Answers to booking questions
- Payment and transaction information
- Technical information such as your IP address and browser
I receive the information necessary to administer the booking, communicate with you, provide the lesson, maintain appropriate business records, and meet legal accounting and tax obligations.
The legal basis is Article 6(1)(b) GDPR for arranging and performing the lesson agreement and Article 6(1)(c) GDPR for information that must be retained to meet legal obligations.
TidyCal is operated by Sumo Group Inc. in the United States. TidyCal states that it uses appropriate safeguards for international transfers of personal data.
TidyCal’s privacy policy is available at:
https://tidycal.com/privacy-policy
10. Payments through Stripe
Payments made through the TidyCal booking page are processed by Stripe. Stripe may process information including your name, email address, billing address, payment method, transaction amount, transaction date, device information, and information used for payment security and fraud prevention.
I do not receive your complete payment-card details. I receive the information required to confirm and administer your payment.
The legal basis is Article 6(1)(b) GDPR for processing payment under the lesson agreement and Article 6(1)(c) GDPR for applicable accounting and tax obligations.
Stripe’s privacy policy is available at:
https://stripe.com/en-de/privacy
11. Google Calendar
TidyCal is connected to Google Calendar to manage appointment availability and create calendar bookings. Booking information such as your name, email address, lesson date, lesson time, and relevant appointment details may therefore be processed through Google Calendar.
This processing is necessary to organise and provide booked lessons. The legal basis is Article 6(1)(b) GDPR.
Google’s privacy policy is available at:
https://policies.google.com/privacy
12. External and social-media links
This website contains ordinary links to external services such as YouTube, Instagram, Facebook, WhatsApp, TidyCal, and other social-media platforms.
No information is intentionally sent to these services merely because an ordinary text or image link appears on the website. When you select a link, you leave this website and the external provider may process information according to its own privacy policy.
I am not responsible for the content or privacy practices of external websites.
13. How long information is retained
Personal data is retained only for as long as necessary for the purpose for which it was collected.
General enquiries are normally deleted when the enquiry has been resolved and no further communication is reasonably expected. Information connected with lessons, bookings, invoices, and payments may be retained for longer where required by German commercial, accounting, or tax law.
Information processed independently by WordPress.com, YouTube, Google, WhatsApp, TidyCal, Stripe, or social-media providers is retained according to those providers’ respective policies.
14. Sharing of personal data
I do not sell personal data.
Information is shared only where necessary to operate the website, respond to communications, administer bookings, process payments, provide lessons, comply with legal obligations, or protect legitimate legal interests.
Relevant recipients may include WordPress.com and Automattic, Google and YouTube, WhatsApp, TidyCal, Stripe, banks and payment providers, professional advisers, and public authorities where disclosure is legally required.
15. International data transfers
Some service providers used by this website are based in, or process information in, countries outside the European Economic Area, including the United States.
Where required, these providers state that they use recognised legal safeguards for international data transfers, such as adequacy decisions, the EU–US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission.
16. Your data-protection rights
Subject to the conditions established by the GDPR, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data
- Request restriction of processing
- Receive certain information in a portable format
- Object to processing based on legitimate interests
- Withdraw consent at any time, without affecting processing carried out before withdrawal
- Lodge a complaint with a data-protection supervisory authority
To exercise these rights in relation to information that I control, contact:
17. Right to object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.
If your personal data is ever processed for direct marketing, you have the right to object to that processing at any time. I do not currently operate an email newsletter or use website visitor information for direct marketing.
18. Supervisory authority
You have the right to complain to a data-protection authority if you believe that your personal data has been processed unlawfully.
The supervisory authority responsible for many private organisations and self-employed people based in Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
You may also contact another competent supervisory authority, particularly in the EU member state where you live or work.
19. Automated decision-making
I do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
Third-party providers such as Stripe may use automated systems for fraud prevention and payment security under their own responsibility.
20. Changes to this privacy policy
This privacy policy may be updated when the website, services, or legal requirements change. The current version and its most recent revision date will remain available on this page.
englishwithideas.com 