Privacy Policy
Last updated: 20 April 2026
1. Who we are
Fast Italian Learning is operated by LAPEGIS LTD, a company registered in England and Wales under company number 15808981, with registered office at 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom ("we", "us", "our").
For any privacy-related request, contact us at [email protected].
2. Scope
This policy explains how we collect, use, store and protect your personal data when you visit fastitalianlearning.com (the "Site"), create an account, take lessons, subscribe to our newsletter or contact us. It applies to all users worldwide and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are in the EEA, the EU GDPR also applies where relevant.
3. What data we collect
- Account data: email address, hashed password, display name (optional).
- Learning progress: exercises attempted, scores, streaks, lessons completed — linked to your account.
- Payment data: if you book a lesson, payment is processed directly by Stripe. We receive only your email and a transaction reference — we never see or store your card details.
- Communication data: emails you send us, email preferences, unsubscribe status.
- Technical data: IP address, browser type, pages visited, referrer, timestamps — collected via server logs and analytics.
- Cookies: see our Cookie Policy.
4. Why we collect it (legal basis)
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| Provide the learning service and save your progress | Performance of a contract |
| Process payments for lessons | Performance of a contract |
| Send transactional emails (account, booking confirmations, password reset) | Performance of a contract |
| Send educational email drip / newsletter | Consent (you can unsubscribe anytime) |
| Analytics and service improvement | Legitimate interest |
| Fraud prevention and security | Legitimate interest |
| Legal obligations (tax, accounting) | Legal obligation |
5. Who we share it with
We only share your data with service providers strictly necessary to run the Site:
- Hetzner Online GmbH (Germany) — hosting and database storage. Data stays in the EU.
- Stripe Payments Europe Ltd. (Ireland) — payment processing. Stripe privacy policy.
- Resend, Inc. (USA) — transactional and drip email delivery. Data transfer protected by Standard Contractual Clauses.
- Google LLC — Google Analytics 4 (anonymised), YouTube embeds, Google Fonts. Google privacy policy.
We never sell your data. We never share it for advertising purposes.
6. International transfers
Where data is transferred outside the UK/EEA (e.g., to Resend in the USA), we rely on the UK International Data Transfer Agreement or Standard Contractual Clauses approved by the UK ICO, ensuring an equivalent level of protection.
7. How long we keep it
- Account and learning progress: until you delete your account, or after 3 years of inactivity (automatic deletion).
- Payment records: 7 years (UK tax law requirement).
- Newsletter subscribers: until you unsubscribe.
- Server logs: 30 days, then rotated.
8. Your rights
Under UK GDPR you have the right to:
- Access your data (right of access)
- Correct inaccurate data (rectification)
- Delete your data (right to erasure, "right to be forgotten")
- Restrict or object to processing
- Data portability (receive a copy in machine-readable format)
- Withdraw consent at any time
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at [email protected]. We respond within 30 days.
9. Security
We use industry-standard encryption (HTTPS/TLS) for all traffic, bcrypt for password hashing, and HSTS headers. Access to production systems is restricted. However, no method of transmission over the internet is 100% secure.
10. Children
The Site is intended for users aged 16 and above. We do not knowingly collect data from users under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy. The "Last updated" date at the top reflects the latest revision. Substantial changes will be notified via email to registered users.
12. Contact
LAPEGIS LTD
27 Old Gloucester Street, London, WC1N 3AX, United Kingdom
Company Number: 15808981
Email: [email protected]