1. Who is responsible for your data
Flikkit is responsible for the personal data processed to operate this website and provide our lessons. Business address: 312 W 2nd Street #1045, Casper, WY 82601 United States of America. For privacy enquiries or to exercise your rights, contact hello@flikkit.com. This notice explains our practices and the rights available under applicable privacy law, including the GDPR where it applies.
2. Information we process
- Contact and purchase information: your name, email address, selected lesson or package, order reference, payment status, and acceptance of purchase terms.
- Lesson information: bookings, time zone, attendance, package balance, learning goals and information you choose to share with your instructor. Video and audio are transmitted through Google Meet during a lesson.
- Communications: enquiries, booking requests, feedback, complaints and the information you include in them. Please avoid sending sensitive information that is not needed for your lessons.
- Technical information: information needed to deliver and protect the website, such as IP address, browser information and security or error logs. Your selected language is stored in your browser and can also appear in the page URL.
- Stripe processes card and payment information directly. We receive order and payment-confirmation references, but do not store your full card number or card security code.
3. Purposes and legal bases
We use contact, purchase and booking data to take steps at your request before purchase and to perform our contract: process orders, arrange and deliver lessons, manage balances, and provide service-related support. We process records where needed to comply with legal, accounting or tax obligations.
Where applicable, our legitimate interests support proportionate processing to protect the service, prevent fraud, investigate problems and handle legal claims, taking your rights into account. Optional marketing or non-essential tracking requires consent where the law requires it; consent can be withdrawn without affecting the lawfulness of earlier processing. We do not make decisions with legal or similarly significant effects based solely on automated processing.
5. International processing
Flikkit operates from the United States, and our providers may process information in the United States or other countries. Privacy laws in those countries may differ from those where you live. Where GDPR rules require a safeguard for a transfer outside the EEA, an applicable adequacy decision or another lawful transfer mechanism, such as standard contractual clauses, is required. Contact us for information about the destination and safeguards relevant to your data.
6. Retention and security
We retain personal information for as long as needed for the purposes described here. Purchase and payment records are kept for the periods required by applicable accounting, tax and legal rules. Booking and lesson records are retained to deliver purchased lessons, resolve issues and establish or defend claims. Correspondence and technical logs are retained only while needed for support, security or a relevant legal obligation. When no longer needed, information is deleted or anonymised, subject to necessary backup and legal-retention requirements.
We use reasonable technical and organisational measures to restrict access and protect information. No online service can guarantee absolute security. Keep your private order-confirmation link confidential, as it provides access to your order status, and tell us if you suspect it has been shared without your permission.
7. Your privacy rights
Depending on the applicable law, you may request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent. Email hello@flikkit.com to make a request. We may need to verify your identity and will respond within the applicable legal period; GDPR requests are normally answered within one month. Some rights have legal exceptions, including records we must retain.
You may complain to the data protection authority competent for your place of residence, work or the alleged infringement. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD). We encourage you to contact us about concerns, but you do not have to do so before contacting an authority.
9. Children and policy updates
Our website is intended for adults arranging language lessons. If a minor participates, a parent or legal guardian should arrange the purchase and contact us about any privacy concerns. We may update this notice to reflect changes to our service or legal requirements. The updated date appears above; material changes will be communicated where required.