Legal

Privacy Policy

Short version: this website does not use tracking cookies and does not collect your name or email itself. Below are the details, in plain English.

Last updated:

1. Who is responsible for your data

The data controller is Derek Zardus, running a sole proprietorship under the Bizz English brand.

Address: ul. Romualda Mielczarskiego 10/17, 02-798 Warszawa, Poland
NIP (tax ID): 1231375953 · REGON: 368750687
Email: derekzardus@bizzenglish.com

In this policy, "I", "me", and "Bizz English" mean Derek Zardus. "You" means any visitor to bizzenglish.com.

2. What happens when you visit this website

The website is hosted by Cloudflare. When you open a page, Cloudflare's servers automatically process technical information, such as your IP address, browser type, and the page you requested. This is needed to show you the website and to protect it from attacks and abuse.

I use Cloudflare Web Analytics to count visits. It does not use cookies and does not identify you personally. It shows me numbers like how many people visited a page and which country they came from.

Legal basis: my legitimate interest in running a secure website and understanding how it is used (Article 6(1)(f) GDPR).

3. Cookies

This website does not use advertising or tracking cookies. Cloudflare may set strictly necessary security cookies, for example to tell real visitors apart from automated bots. These cookies do not track you across websites, and the law does not require your consent for them. That is why you do not see a cookie banner here.

The fonts on this website are stored on this website itself, so your browser does not contact any font service when you visit.

4. When you email me

If you write to me, I receive your email address, your name if you include it, and the content of your message. I use this only to reply to you and, if you wish, to prepare our cooperation.

Legal basis: steps you ask me to take before a contract (Article 6(1)(b) GDPR), or my legitimate interest in answering your message (Article 6(1)(f) GDPR).

5. When you book a free intro call

The "Book a free call" buttons take you to my booking page on TidyCal, an external scheduling service. There you enter your name, your email address, and your chosen time. TidyCal sends these details to me so that we can hold the call. TidyCal's own privacy policy also applies on its page.

Legal basis: steps you ask me to take before a possible contract (Article 6(1)(b) GDPR).

6. When you sign up for the weekly lesson

The newsletter sign-up buttons take you to my sign-up page on SendFox, an external email service. If you subscribe, SendFox stores your email address (and your name if you give it) and sends you my weekly lesson and occasional news about classes and products. SendFox's own privacy policy also applies on its page.

You can unsubscribe at any time with the link at the bottom of every email, or by writing to me.

Legal basis: your consent (Article 6(1)(a) GDPR). Withdrawing your consent does not affect anything that happened before.

7. If you become a client

If we work together, I process the data needed to provide the coaching and to issue invoices, for example your name, contact details, and billing details or your company's details.

Legal basis: performing our contract (Article 6(1)(b) GDPR) and my legal duties under tax and accounting law (Article 6(1)(c) GDPR).

8. Who else receives your data

I do not sell your data. I share it only with services that help me run my business, and only as far as needed:

  • Cloudflare (website hosting, security, and visit statistics)
  • TidyCal (booking calls)
  • SendFox (newsletter)
  • my email provider (receiving and sending email)
  • my accountant (invoices and tax records)

Some of these companies are based in the United States or may process data there. In these cases, the transfer is protected by the safeguards required by GDPR, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

9. How long I keep your data

  • Emails and booking details: as long as needed to answer you and arrange our cooperation, and no longer than 2 years after our last contact if we do not work together.
  • Newsletter: until you unsubscribe.
  • Client and invoice records: as long as Polish tax law requires, normally 5 years from the end of the year in which the tax was due.
  • Technical website data: for the short periods Cloudflare uses to deliver and protect the website.

10. Your rights

Under GDPR, you have the right to:

  • see the data I hold about you and get a copy
  • correct data that is wrong
  • ask me to delete your data
  • ask me to limit how I use your data
  • receive your data in a format you can take elsewhere
  • object to processing based on my legitimate interest
  • withdraw your consent at any time, where processing is based on consent

To use any of these rights, email me at derekzardus@bizzenglish.com. I will answer within one month.

You also have the right to complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

11. Links to other websites

This website links to other sites, such as LinkedIn, YouTube, TidyCal, and SendFox. Their own privacy policies apply when you visit them.

12. Changes to this policy

I may update this policy when my website or services change. The date at the top shows the latest version.