Privacy Policy

Last updated: May 6, 2026
Effective date: May 6, 2026

This Privacy Policy describes how English with Christinah ("we," "us," or "our"), operated by Christinah Mulder as a sole proprietor, collects, uses, shares, and protects personal information about you when you visit englishwithchristinah.com (the "Site"), apply for our courses or workshops via our online application form, or otherwise interact with us (collectively, the "Services").

We've tried to write this in plain English. If anything is unclear, please email us at privacy@englishwithchristinah.com.

Plain-English Summary

• We collect your name, email, country, time zone, English proficiency self-assessment, and what you tell us about your goals — through an application form hosted on Google Forms.
• We use that information to evaluate your application, run the course, and (if you opt in) email you about future courses and workshops.
• If you opt in, we may also use your email to find similar learners through advertising platforms (Meta, Google).
• We do not sell your personal information for money.
• You have rights to access, correct, delete, export, or opt out — including specific rights under GDPR (EEA/UK) and the CCPA/CPRA (California). Email us to exercise them.

The full details follow.

1. Who We Are (Data Controller)

For purposes of the EU and UK General Data Protection Regulation ("GDPR"), the data controller is:

Christinah Mulder, d/b/a English with Christinah 138 E 12300 S, Ste C-1087 Draper, UT 84020 United States Email: privacy@englishwithchristinah.com

If you are in the European Economic Area (EEA) or the United Kingdom and have questions about our processing, please contact us at the email above. We are not currently required to appoint a Data Protection Officer or EU/UK representative under Article 27 GDPR, but we will respond promptly to data subject inquiries.

2. Personal Information We Collect

Information you provide directly via our application form:

• Identity and contact data: name, email address.
• Location data: country of residence, time zone (used for class scheduling).
• Educational background and self-assessment: years studying English, and ACTFL self-assessed proficiency in listening, speaking, reading, and writing.
• Application context: your main English-learning goal, your reasons for interest in the program, whether you can commit to attending sessions, your readiness to enroll in an 8-week program, how you heard about the course, and any free-text responses you provide.
• Marketing consent: whether you opted in via the form's marketing checkbox to receive future course and workshop communications.

Payment information (if you enroll in a paid course):

• If we set up a third-party payment processor, it will collect your payment details on its behalf. We will receive only confirmation of payment, the last four digits of your card, billing country, and transaction ID. We do not store full card numbers.

Information collected automatically when you visit the Site:

• Device and usage data: IP address, browser type, operating system, referring URL, pages visited, time on site.
• Cookies and similar technologies: see Section 7.

Information from third parties:

• Aggregated audience insights from advertising platforms (does not personally identify you to us).

How signups are collected: When you click "Apply" or register for a workshop, you will be redirected from this Site to an application form hosted on Google Forms (a Google service). Submitting that form sends your information to Google's servers, where it is stored in our Google Workspace account on our behalf. Google's own privacy practices apply during your interaction with the form; once submitted, your data is governed by this Privacy Policy.

We do not intentionally collect "sensitive personal information" as defined under the CPRA (e.g., precise geolocation, racial or ethnic origin, biometric data, health information). If you voluntarily share such information in correspondence with us, we use it only to respond to you.

3. How We Use Your Information (Purposes and Legal Bases)

We use your personal information for the purposes below. Where GDPR applies, we identify our legal basis for each.

• Evaluate your application and place you in an appropriate course or workshop — Performance of a contract; legitimate interests (matching learners to suitable courses).
• Deliver the workshop or course you signed up for — Performance of a contract.
• Process payments and prevent fraud — Performance of a contract; legal obligation.
• Send transactional emails (application confirmations, course reminders, course materials) — Performance of a contract.
• Send marketing emails about future courses, workshops, and resources — Consent (you opt in via the form checkbox).
• Build advertising "Custom Audiences" and "Lookalike Audiences" on Meta and Google to find similar learners — Consent.
• Improve the Site and Services through analytics — Legitimate interests, or consent for non-essential cookies.
• Comply with legal obligations (tax, accounting, responding to lawful requests) — Legal obligation.
• Defend legal claims — Legitimate interests.

You can withdraw consent at any time by emailing privacy@englishwithchristinah.com or using the unsubscribe link in any marketing email. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

4. Marketing, Custom Audiences, and Lookalike Audiences

If you opt in via our application form's marketing checkbox, we may upload your email address (in hashed form, where supported) to:

• Meta (Facebook/Instagram) Custom Audiences and Lookalike Audiences
• Google Ads Customer Match and Similar Audiences

These platforms use your information to (a) show you relevant ads and (b) identify other users who share characteristics with our existing learners so we can advertise to them. We do not receive personally identifiable information about lookalike users from these platforms.

This activity may constitute "sharing" of personal information for "cross-context behavioral advertising" under California law (see Section 12) and "profiling" under GDPR (Section 11). You can opt out at any time using the methods in Section 13.

5. How We Share Your Information

We share personal information only with the categories of recipients listed below, and only as needed:

Service providers (processors):

• Form collection and intake: Google Forms / Google Workspace (Google LLC) — hosts the application form and stores submitted responses.
• Email forwarding (inbound): Cloudflare Email Routing (Cloudflare, Inc.) — routes mail addressed to our domain to our personal inbox.
• Website host: Carrd — hosts the Site itself.
• Privacy policy host: Cloudflare Pages (Cloudflare, Inc.) — hosts this Policy document.

Other third parties (only if and when we engage them):

• A payment processor for paid course enrollment.
• A class delivery platform for live online sessions.
• An analytics provider to measure Site performance.
• An email marketing platform to deliver newsletters to subscribers who have opted in.

We will update this Policy when any of these services are added.

Advertising partners: Meta, Google — only if you have opted in (see Section 4).

Legal/safety recipients: law enforcement, regulators, or other parties when required by law, to protect rights, or to investigate fraud.

Successors: a buyer or successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information for monetary consideration.

6. International Data Transfers

We are based in the United States. If you access the Services from outside the US, your personal information will be transferred to, stored, and processed in the US and other countries where our service providers operate.

For transfers from the EEA, UK, or Switzerland to the US:

• Where our service providers are certified under the EU-US Data Privacy Framework, UK Extension, or Swiss-US Data Privacy Framework, we rely on those certifications. Google LLC and Cloudflare, Inc. are participants in the Data Privacy Framework.
• Otherwise, we rely on the European Commission's Standard Contractual Clauses (SCCs) or the UK's International Data Transfer Agreement (IDTA) with our processors, supplemented by additional safeguards as needed.

You may request a copy of the relevant transfer mechanism by emailing privacy@englishwithchristinah.com.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Make the Site work (essential cookies).
• Remember your preferences (functional cookies).
• Measure traffic and improve the Site (analytics cookies, when enabled).
• If you opt in: deliver and measure advertising (advertising cookies).

If you are in the EEA, UK, or another jurisdiction requiring prior consent, we will request your consent via a cookie banner before any non-essential cookies are set. You can change your preferences at any time via the cookie settings link in our footer or by clearing cookies in your browser.

Note: our application form is hosted on Google Forms at a separate URL. When you click through to the form, Google's own cookies and privacy practices apply at that point.

8. Data Retention

We keep personal information only as long as necessary for the purposes described in this Policy:

• Application form responses: for as long as needed to evaluate and follow up on your application, plus 3 years thereafter for tax, accounting, and legal-defense purposes.
• Course participants: for the duration of your enrollment plus 3 years.
• Marketing list subscribers: until you unsubscribe or request deletion, plus a short suppression-list period to honor your opt-out.
• Payment records: 7 years to comply with US tax law.
• Website analytics: 14 months in aggregated form, when analytics are enabled.
• Backups: rolling 30–90 day cycle, after which records are overwritten.

When a retention period ends, we delete or anonymize the information.

9. Security

We use industry-standard technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), access controls, vendor due diligence, and limited internal access on a need-to-know basis. No system is perfectly secure; we cannot guarantee absolute security.

If we learn of a personal data breach affecting your information, we will notify you and applicable regulators as required by law.

10. Your Rights — Everyone

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information (subject to our legal obligations to retain certain records).
• Withdraw consent where we rely on consent (e.g., marketing, advertising audiences).
• Object to processing based on legitimate interests.
• Receive a copy of your information in a portable format.
• Lodge a complaint with a supervisory authority (see Sections 11 and 12).

To exercise any right, email privacy@englishwithchristinah.com. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under the CCPA/CPRA, extendable once).

11. Additional Rights for EEA, UK, and Swiss Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have the rights described in Section 10 plus:

• Right to restriction of processing in certain circumstances.
• Right to object to direct marketing at any time.
• Right not to be subject to solely automated decisions producing legal or similarly significant effects. Our use of Custom and Lookalike Audiences (Section 4) involves profiling but does not produce legal or similarly significant effects on you. You may still object at any time.
• Right to lodge a complaint with your local supervisory authority. A list of EEA authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office at ico.org.uk.

12. Additional Rights for California Residents (CCPA/CPRA)

This section supplements the rest of this Policy and applies only to California residents.

Categories of personal information collected in the past 12 months:

• Identifiers (name, email, IP address)
• Customer records (payment confirmation data, if you enroll in a paid course)
• Internet/network activity (cookies, page views, referring URLs)
• Geolocation data (country and time zone you provide, plus approximate location derived from IP)
• Education information (years studying English, self-assessed ACTFL proficiency, learning goals)
• Commercial information (courses or workshops you express interest in or enroll in)
• Inferences (interests inferred from your interaction with marketing communications, if you opt in)

Sources, business purposes, and recipients for each category are described in Sections 2, 3, and 5.

Sale or sharing of personal information: We do not sell personal information for money. We share identifiers with advertising partners (Meta, Google) to perform cross-context behavioral advertising — only if you opt in. We do not knowingly sell or share the personal information of consumers under 16.

Your California rights:

• Right to know the categories and specific pieces of personal information we have collected about you.
• Right to delete personal information we have collected.
• Right to correct inaccurate personal information.
• Right to opt out of "sharing" for cross-context behavioral advertising.
• Right to limit use of sensitive personal information (we do not use sensitive personal information for purposes that would trigger this right).
• Right to non-discrimination for exercising any of these rights.

How to exercise:

• Email privacy@englishwithchristinah.com with the subject line "California Privacy Request."
• Or use our "Do Not Sell or Share My Personal Information" link in the website footer to opt out of sharing.

We will verify your request by matching the email and other identifying information you provide against our records. Authorized agents may submit requests on your behalf with proof of authorization and your verification.

13. How to Exercise Your Rights

To submit any privacy request — access, correction, deletion, opt-out, or otherwise — email privacy@englishwithchristinah.com. Please include:

• Your full name and the email address you used to interact with us.
• The right you wish to exercise.
• Any relevant context (e.g., date of workshop or course application).

We will acknowledge receipt within 10 days and respond within the timeframes required by applicable law.

14. Children's Privacy

Our Services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, please contact us at privacy@englishwithchristinah.com and we will delete it.

15. Email Marketing (CAN-SPAM)

If we send you marketing emails, every such email will include:

• A clear identification of the sender.
• A valid physical mailing address: 138 E 12300 S, Ste C-1087, Draper, UT 84020, United States.
• A working unsubscribe link that we honor within 10 business days.

You can also email privacy@englishwithchristinah.com to be removed from all marketing communications. Transactional emails about a course you have enrolled in or applied to will continue until your involvement ends.

16. Third-Party Links

The Site may contain links to third-party websites (e.g., Google Forms for our application, social media, course platforms). We are not responsible for their privacy practices. Please review their policies separately.

17. Changes to This Policy

We may update this Policy from time to time. We will post the new version on this page and update the "Last updated" date. If changes are material, we will notify you by email or a prominent notice on the Site at least 30 days before the changes take effect, where required by law.

18. Contact Us

For any privacy-related questions, requests, or complaints:

English with Christinah Christinah Mulder, Sole Proprietor 138 E 12300 S, Ste C-1087 Draper, UT 84020 United States Email: privacy@englishwithchristinah.com