Skip to main content

Privacy Policy

Last updated: July 26, 2026

1. Introduction

I run Ancient Greek School, a one-teacher online school, and I am committed to protecting your privacy. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website and use my services, including my newsletter and contact forms.

I comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy tells you what I do with your data and what rights you have over it.

2. Information I Collect

Personal Data You Provide

I may collect the following personal information when you voluntarily provide it to me:

  • Newsletter subscription: Email address
  • Contact form: Name, email address, an optional subject line, and message content. I also record the date and time you sent the form, together with the version of the data-use statement shown on it, so that I can tell you exactly what you were told about your data at that moment
  • Lesson inquiries: Name, email address, and any information you choose to share about your learning goals

Automatically Collected Data

When you visit my website, certain information may be collected automatically, including:

  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website
  • IP address (used for rate limiting of form submissions; not stored long-term)

Analytics Events

I use Vercel Web Analytics to understand how visitors interact with my site. In addition to standard page view data, I track the following custom events:

  • Button clicks: When you click a call-to-action button (e.g., “Book Your First Lesson”), I record which button was clicked and its location on the page
  • Form submissions: When you successfully submit the contact form or subscribe to the newsletter, I record the event (not your personal data)

Vercel Analytics is privacy-focused: it does not use cookies, does not track users across sites, and does not collect personally identifiable information. Analytics data is aggregated and cannot be used to identify individual users.

I also use Vercel Speed Insights to collect anonymous, cookieless real-user performance measurements (such as page load timing) so I can keep the site fast. Like Vercel Analytics, it does not use cookies and cannot identify individual users.

3. How I Use Your Information

I use the information I collect for the following purposes:

  • To send you my newsletter with updates on new content, learning tips, and course announcements (only if you have subscribed)
  • To respond to your inquiries and provide support
  • To communicate with you about lesson services
  • To improve my website and services
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the GDPR, I process your personal data based on the following legal grounds:

  • Consent (Article 6(1)(a)): When you subscribe to my newsletter, you give explicit consent for me to send it to you. You can withdraw that consent at any time, and every email carries an unsubscribe link.
  • Your request, and the contract that may follow (Article 6(1)(b)): When you write to me through the contact form or ask about lessons, I use your name, email address, and message to answer you. This does not run on consent: replying is the thing you asked me for. The same basis covers teaching you once lessons begin. The checkbox on the contact form is not a consent request; it records what you were told about your data at the moment you sent the form.
  • Legitimate interests (Article 6(1)(f)): For messages that are not about lessons, I rely on my legitimate interest in answering correspondence addressed to me. I also rely on legitimate interests to keep the site secure and to improve it. You can object to processing on this basis at any time.

5. Data Retention

I retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Newsletter subscribers: Until you unsubscribe
  • Contact form submissions: Up to 2 years after your last interaction
  • Student data: For the duration of the teaching relationship plus 3 years for record-keeping

6. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data I hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (“right to be forgotten”)
  • Right to restrict processing: Request that I limit how I use your data
  • Right to data portability: Request your data in a structured, machine-readable format
  • Right to object: Object to processing I carry out on the basis of legitimate interests
  • Right to withdraw consent: Where I rely on consent, as I do for my newsletter, withdraw it at any time
  • Right to lodge a complaint: Complain to your local data protection supervisory authority if you believe I have not handled your personal data in accordance with the law

To exercise any of these rights, please contact me using the information provided below.

7. Newsletter and Email Communications

When you subscribe to my newsletter, you explicitly consent to receive periodic emails about Ancient Greek learning, new content, and course updates. Every email includes an unsubscribe link, and you can opt out at any time.

I do not sell, rent, or share your email address with third parties for marketing purposes.

8. Third-Party Services

My website uses the following third-party services that may process your data:

  • Vercel (hosting and analytics): My website is hosted on Vercel, which collects server logs and provides privacy-focused web analytics. Vercel Analytics does not use cookies and does not track users across websites. Vercel Privacy Policy
  • Brevo (newsletter): Your email address is stored and processed by Brevo (formerly Sendinblue) when you subscribe to my newsletter. Brevo Privacy Policy
  • Apple iCloud Mail (contact form): Contact form messages are delivered as email to my mailbox using Apple’s iCloud Mail service. Your name, email address, and message content pass through Apple’s mail infrastructure in transit. Apple Privacy Policy
  • Embedded and linked content: I embed videos from YouTube. A YouTube player loads only after you choose to play a video, and videos are served through YouTube’s privacy-enhanced mode (youtube-nocookie.com), which sets no cookies until you play. I also link to my profiles on other platforms, such as Instagram, TikTok, and Facebook. Those are ordinary links, not embeds: following one takes you to that platform, which has its own privacy policy.

9. Cookies

My website does not set any first-party cookies. I do not use tracking cookies for advertising purposes. My analytics provider (Vercel Analytics) is cookieless and does not track users across websites. Embedded YouTube videos do not load, and therefore cannot set cookies, until you choose to play them; after that, YouTube (in privacy-enhanced mode) may set its own cookies according to its privacy policy. Links to other platforms, such as Instagram, TikTok, and Facebook, set no cookies on my site and only take you to those platforms if you click them.

10. Rate Limiting

To protect my services from abuse, I apply rate limiting to form submissions (contact form and newsletter signup). This uses your IP address temporarily in server memory to count requests within a short time window. IP addresses used for rate limiting are not stored persistently and are automatically cleared from memory.

11. Data Security

I implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

12. International Data Transfers

Your information may be transferred to and processed in countries outside of your residence. Some of my processors are located in the United States: Apple (email delivery) and Vercel (hosting and analytics). My newsletter provider, Brevo, processes data within the European Union. When I transfer data outside the European Economic Area, I rely on appropriate safeguards such as the processors’ participation in recognized transfer frameworks or EU Standard Contractual Clauses.

13. Children’s Privacy

My services are not directed to individuals under 16. I do not knowingly collect personal data from children. If you believe I have collected data from a child, please contact me immediately.

14. Changes to This Policy

I may update this Privacy Policy from time to time. I will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

15. Contact Me

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact me at:

  • Email: email available via our contact form
  • Contact form: /contact
Book Your First Lesson