🍵
Lucy's plain-English summary: I collect the minimum data necessary to run this site. I don't sell your data to anyone. I use it to help you find a job or hire a teacher. That's it. The legalese below says the same thing in more words.
1. Who we are
LucyESL is operated by Lucy Hartwell, a sole trader registered in England & Wales. Our address is available on request. For data enquiries, contact: privacy@lucyesl.com
2. What data we collect
We collect the following information when you use LucyESL:
- Account registration: name, email address, nationality, teaching qualifications, preferred countries.
- Job applications: name, email, cover letter, CV content, qualifications, experience details.
- Job postings (schools): school name, contact details, job information, billing information.
- Newsletter: name and email address.
- Contact form: name, email, message content.
- Technical data: IP address, browser type, pages visited, time spent on site (via anonymised analytics).
3. How we use your data
- To operate and improve the LucyESL service
- To forward job applications to the relevant schools
- To send the newsletter (with your consent)
- To respond to contact form enquiries
- To process school payments securely
- To detect and prevent fraud
4. Who we share data with
We do not sell your data. We share data only in these circumstances:
- Schools: When you apply for a job, your application is forwarded to the relevant school.
- Payment processor: Stripe processes payments securely. We do not store card details.
- Email provider: We use Mailchimp for newsletters and Postmark for transactional emails.
- Analytics: We use privacy-first Plausible Analytics (no cookies, no personal data).
- Legal requirements: If required by law or to protect the rights of LucyESL or others.
5. Data retention
Account data is retained for as long as your account is active. Job applications are retained for 12 months then deleted. Newsletter subscriptions are retained until you unsubscribe. Contact messages are retained for 24 months.
6. Your rights (UK GDPR)
You have the right to: access your data, correct inaccurate data, request deletion of your data, object to processing, and data portability. To exercise these rights, email privacy@lucyesl.com.
7. Cookies
LucyESL uses only essential session cookies required for the site to function (login state, form security). We do not use advertising cookies or third-party tracking cookies. Our analytics provider (Plausible) is cookieless.
8. Security
All data is transmitted over encrypted HTTPS connections. Passwords are hashed using bcrypt. We conduct regular security reviews. No system is perfectly secure, but we take your data seriously.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to registered users. The "last updated" date at the top of this page reflects the most recent revision.
10. Contact
For any privacy enquiries: privacy@lucyesl.com or use the contact form.