Privacy Policy
Wolo English is an online English and Portuguese teaching service operated by Eduardo Barbosa de Oliveira, the controller responsible for the personal data described here. For privacy questions or requests, email contato@woloeng.com.
1. Registration and teacher approval
The registration form collects details for your teacher to review. It creates an inactive student record; it does not enrol you, reserve a place, take payment or give access to lessons. Your teacher decides whether to approve your account and separately arranges any course with you. Decisions are made by a person, not by automated profiling.
2. Information we use
- Your first name, surname and email to identify your registration and communicate with you.
- Your date of birth to check registration eligibility.
- Your phone number, only if you choose to provide it, for registration or teaching communications. Leaving it blank does not prevent registration.
- A protected password hash, registration time, and the version of the terms accepted and privacy notice shown. Your chosen password will be used for login after activation.
- After approval, account activity, last login, course assignments, submitted work, results and progress as you use the learning area.
- Messages you send and technical information needed to operate and protect the service, such as session identifiers and server logs.
Required fields are marked on the form. Without them we cannot review a registration or provide account access. Do not submit identity documents, payment-card details, health information or other sensitive information through this form.
3. Purposes and legal grounds
We use registration and contact details to consider your request and discuss possible teaching, taking steps at your request before a contract (UK GDPR Article 6(1)(b); LGPD Article 7(V)). If you become a student, we use the details needed to provide the agreed service on the same contractual grounds. We use limited account-security data for our legitimate interests in preventing misuse and keeping accounts secure, subject to your rights (UK GDPR Article 6(1)(f); LGPD Article 7(IX)). Where law requires records to be kept or disclosed, we rely on the applicable legal obligation.
Accepting the terms is not blanket consent to use your information. Registration does not subscribe you to advertising. Any future consent-based marketing must have a separate choice; you may withdraw that consent without affecting teaching or earlier lawful processing.
4. Access, providers and overseas processing
Your teacher and service providers supporting hosting, email and technical operation may handle information needed for those tasks. We do not sell registration details. Information may also be disclosed when legally required or necessary to establish or defend legal rights.
The site loads some fonts, icons and scripts from external providers, including Google Fonts and content delivery networks. Those requests disclose technical connection details, including your IP address, to the provider. The login and registration pages omit the external script integrations used elsewhere on the site.
Operating between the UK and Brazil, or using overseas providers, can involve international transfers. Applicable UK and Brazilian transfer requirements must be met, including a valid adequacy decision or appropriate contractual safeguards where required. Contact us for details of the providers, destination countries and safeguards relevant to your information, and how to obtain a copy.
5. How long information is kept
Registration information is needed while your teacher reviews the request and completes related follow-up. If no teaching arrangement proceeds, it should be deleted when that purpose ends unless a specific legal obligation or dispute justifies retaining limited records. Approved student records are needed while teaching and account support continue; afterwards retention depends on applicable tax, accounting and legal-claims requirements. These criteria also apply when you ask to close your account. Deletion is handled on request and through record review; it is not an instant automated account-deletion feature. Backups and legally required records may need a separate deletion cycle.
6. Your privacy rights
Depending on applicable law, you can request confirmation and access, correction, deletion, restriction or blocking, portability, details of sharing, and object to certain processing. You can withdraw consent where consent is the legal ground. Some rights have legal conditions or exceptions. We may ask only for proportionate information needed to verify your request.
Email the privacy contact above. UK requests are normally answered within one month, subject to lawful extensions. Under the LGPD, confirmation/access may be given immediately in simplified form or by a complete statement within 15 days; other requests follow applicable legal deadlines. Requests are normally free.
You can complain to the UK Information Commissioner’s Office (ICO) or Brazil’s Autoridade Nacional de Proteção de Dados (ANPD), as applicable. You may also have consumer-protection and court remedies.
7. Cookies, security and changes
Necessary session cookies support sign-in, security and temporary messages. The wolo_consent cookie stores your cookie choice for 180 days. If you accept optional preferences, wolo_language remembers your interface language for 180 days, and administration can remember the collapsed sidebar in local storage. These preferences are off until you accept them. Choose “Reject optional” to use the site without them, or reopen “Cookie settings” at any time to change or withdraw your choice; withdrawing removes these saved preferences. You can still change the current page’s language without saving it. Editor drafts kept in the current browser tab support the editing function you request. We do not add advertising or analytics cookies through these controls. You can also manage cookies in your browser; blocking necessary session cookies prevents sign-in from working.
New passwords are hashed and form submissions are checked on the server. No internet service can promise absolute security. Use a unique password, log out on shared devices and report suspected misuse to us. If a registration does not meet the eligibility requirements, we will stop that registration and remove unnecessary information, subject to legal requirements.
We will date changes to this notice and explain significant changes affecting you. A new purpose or a change requiring consent needs the appropriate information and legal ground before it begins.