Privacy Policy

AgileEnglish.tech ("we", "us", "our") is operated as a sole-trader business based in Cambridge, United Kingdom. This Privacy Policy explains what personal data we collect when you visit agileenglish.tech or submit an assessment, how we use it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who is the data controller?

The data controller is John H., trading as AgileEnglish.tech. You can contact us at john@agileenglish.tech for any privacy-related question or to exercise your rights.

2. What data we collect

• Assessment form: first name, optional surname, email address, current role, communication challenges, tech stack, agile frequency, language-support preferences and your main learning objective.
• Technical data: a hashed (one-way) version of your IP address, used solely for rate-limiting form submissions and preventing abuse. The raw IP is never stored.
• Analytics: aggregated, pseudonymised usage data via Google Analytics 4 (pages viewed, country, device type). We do not collect personally identifying analytics data.

3. Why we use your data (lawful basis)

• To respond to your assessment — lawful basis: performance of a contract / steps taken at your request prior to entering a contract.
• To prevent abuse of the form — lawful basis: legitimate interests (protecting our service).
• To understand how the site is used — lawful basis: legitimate interests, with anonymised analytics only.

4. Who we share data with

We do not sell your data. We share it only with the trusted processors required to operate the site:

• Supabase (managed database and backend hosting, EU region)
• Resend (transactional email delivery)
• Cloudflare / Lovable (site hosting and edge delivery)
• Google Analytics (anonymised usage statistics)

5. How long we keep it

Assessment submissions are kept for as long as you are a prospective or active client, and for up to 24 months after our last interaction, after which they are deleted. Hashed IP rate-limit records are retained for a maximum of 24 hours.

6. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or port your personal data, and to object to processing. To exercise any of these rights, email john@agileenglish.tech. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. International transfers

Some of our processors may transfer data outside the UK/EEA. Where this happens, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision.