Privacy policy
Last updated: September 2026
Thank you for reading this post, don’t forget to subscribe!1. Who is responsible for your data
The data controller for everything collected through catalanwithbet.com is:
Elisabet Cervera Roca
Tax ID (NIF): 47958910T
Postal address: Carrer Puigsacalm, 23 · 08580 Sant Quirze de Besora
Email: hola@catalanwithbet.com
This is a one-person project: no team, no sales department, nobody buying or selling contact lists. The email above is the fastest way to reach a human about anything on this page.
2. What we collect, and why
We only collect data when you actively give it to us. There is no hidden tracking. This is the full list:
| Where it comes from | Data | Purpose | Legal basis |
|---|---|---|---|
| Level test (free) | Name, email, your answers, the level obtained and the score. | Show you the result, send it to you by email, and tell you which classes would suit that level. | Your consent, given when you submit the test. |
| Booking a call or a class (Calendly) | Name, email, time zone and anything you write in the booking form. | Agree on a time, send you the reminder and the video call link. | Performance of the service you asked for. |
| Buying a class pack (Stripe) | Name, email and billing details. Card details go to Stripe only; we never see them. | Process the payment, issue the invoice and keep the accounting records. | Performance of the contract, and our legal obligation to keep tax records. |
| Your address and whatever you write to us. | Answer you. | Your consent, implicit in writing to us. | |
| Language preference | Which of the three languages you chose. It stays in your browser (cwb_lang) and never reaches us. |
Not showing you the welcome popup again. | Technical necessity. It is not personal data. |
3. Who else handles your data
To run the site we rely on external providers. They process data on our instructions, under a data processing agreement, and only for what they are contracted for:
| Provider | What for | Where the data sits |
|---|---|---|
| Supabase | Database that stores the level test results. | Supabase Inc. (United States), with the database hosted in the region configured for the project. Privacy policy. |
| Calendly | Booking calls and classes, reminders. | Calendly LLC (United States). Privacy policy. |
| Stripe | Card payments and fraud prevention. | Stripe Payments Europe Ltd. (Ireland) and Stripe Inc. (United States). Privacy policy. |
| DonDominio | Domain, website hosting and email inboxes. | Soluciones Corporativas IP, S.L.U. (Spain, European Union). Privacy policy. |
| Google Fonts | Serving the two typefaces used on the site. | Google Ireland Ltd. Your IP address reaches Google when the fonts load. Privacy policy. |
Transfers outside the European Union
Supabase, Calendly and Stripe are US companies. Those transfers are covered by the European Commission’s standard contractual clauses and, where the provider is certified, by the EU–US Data Privacy Framework. If you would rather not have your data go through them, you can take the level test or book a class by writing an email instead: it works just as well.
4. How long we keep it
- Level test: up to 2 years from the test, so we can pick the conversation back up. If you ask us to delete it, we delete it straight away.
- Bookings: while you are a student, and for 1 year afterwards.
- Invoices and payments: the period tax and accounting law requires, which in Spain means up to 6 years.
- Emails: as long as the conversation is useful, and then they are deleted.
5. Your rights
The GDPR gives you the right to access your data, correct it, delete it, object to a use of it, ask us to restrict that use, and receive a copy in a portable format. You can also withdraw a consent you gave at any time, without that affecting what happened before.
To exercise any of them, write to hola@catalanwithbet.com saying what you want. No forms and no formalities: you will get an answer within one month, as the GDPR requires. If you want the level test data deleted, one line is enough.
If you think we have handled your data badly and we have not sorted it out, you can complain to the Spanish Data Protection Agency, AEPD.
6. Security
The site is served over HTTPS, and the providers listed above keep the data encrypted in transit and at rest. No system is perfect: if a breach ever affected your data, we would tell you and the AEPD within the 72 hours the GDPR sets out.
7. Under-14s
Spanish law sets the age for consenting to data processing at 14. If you are younger, a parent or guardian has to take the level test and book the classes for you, and it is their data we will hold.
8. Changes to this policy
If we add a tool that handles personal data, or stop using one, this page and the date at the top get updated. Nothing gets moved to a new purpose without telling you.