Privacy Policy
City Language Hub ("we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
City Language School Ltd, trading as City Language Hub, is the data controller responsible for your personal information. Our registered office is at Ground Floor Unit H1, Moorfoot House, Meridian Gate, 221 Marsh Wall, London, E14 9FJ, United Kingdom. Company Registration Number: 16213856.
We collect and process the following categories of personal information:
We collect personal information through:
We process your personal data under the following legal bases:
When you enroll in a programme, we process your data to deliver teaching, provide platform access, track progress, and issue certificates.
We process data for marketing, business development, website improvement, fraud prevention, and network security where our interests do not override your rights.
We process data to comply with tax, accounting, regulatory requirements, and safeguarding duties.
We obtain explicit consent for marketing communications, testimonials, cookies (where required), and processing special category data.
We use your personal information for:
We may share your personal data with:
We may share relevant information with our network partners (City College Dublin, IES Business School, Innova Academy) when facilitating student progression or institutional collaboration, with your consent or where necessary for contract performance.
We may disclose information when required by law, court order, or to protect rights, safety, and property.
We share necessary information with assigned tutors to deliver personalized instruction.
We do not sell your personal data to third parties.
Your personal data is primarily stored and processed within the United Kingdom. Where we use service providers located outside the UK/EEA (such as Notion, which may store data in the US), we ensure appropriate safeguards are in place, including:
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.
Data retained for the duration of enrollment plus 6 years after completion (for educational records and certificates).
Data retained for 2 years from last contact, then deleted unless consent is renewed.
Data retained for the duration of contract plus 7 years (for tax and accounting requirements).
Analytics data retained for 26 months; cookie consent records for 12 months.
Retained until consent is withdrawn or contact becomes inactive for 3 years.
Retained for 6 months after recruitment process concludes, unless consent given for talent pool (retained for 2 years).
You have the following rights regarding your personal data:
Request a copy of the personal data we hold about you (Subject Access Request).
Request correction of inaccurate or incomplete data.
Request deletion of your data in certain circumstances.
Request that we limit how we use your data.
Receive your data in a structured, machine-readable format or request transfer to another organization.
Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw consent at any time where processing is based on consent (does not affect prior lawful processing).
Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.
We will respond to requests within one month (extendable by two months for complex requests).
We implement appropriate technical and organizational security measures:
While we take reasonable precautions, no internet transmission is completely secure. We cannot guarantee absolute security of data transmitted to our website.
In the event of a data breach that poses a risk to your rights and freedoms, we will:
Our website uses cookies and similar technologies. Cookies are small text files stored on your device.
Required for website functionality (login, security, preferences). These do not require consent.
Google Analytics tracks website usage to help us improve our site. You can opt out via cookie banner.
Track your activity across websites for targeted advertising (if applicable). Requires consent.
For more information, see our Cookie Policy
Our website may contain links to external websites not operated by us. We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing personal information.
Our programmes are designed for individuals aged 16 and over. For students under 18, we require parental or guardian consent before collecting personal data. Parents have the right to access, correct, or delete their child's information.
For our Junior Summer School (future offering), specific parental consent procedures will apply.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will notify you of significant changes by:
Your continued use of our services after changes indicates acceptance of the updated policy.
If you have questions, concerns, or wish to exercise your data protection rights, please contact:
Email: info@citylanguagehub.co.uk
Address: City Language Hub, Ground Floor Unit H1, Moorfoot House, Meridian Gate, 221 Marsh Wall, London, E14 9FJ
If you are not satisfied with our response to your privacy concerns, you have the right to complain to:
Website: www.ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF