This Privacy Policy outlines how Mondosol collects, uses, and protects Personal Data. We are committed to being transparent about our data practices and to protecting your privacy at every step.

Data Controller:

Depending on how you use Mondosol, we may collect the following categories of personal data:

• When you register: You provide your name, email, and create a password.
• When you use our courses: We automatically record your progress, completion rates, and quiz scores.
• When you purchase: Payment details are handled by Stripe under their own privacy policy.
• Through cookies and analytics: We use cookies to keep you logged in and understand site navigation.
• When you contact us: Messages sent to support@mondosol.com or via the contact form are stored to help us respond and improve.

• To create and manage your learner account
• To deliver language courses and track your progress
• To send you course-related notifications and updates (you can opt out)
• To process payments and prevent fraud
• To improve our platform based on aggregated, anonymised usage patterns
• To respond to support requests
• To comply with legal obligations (e.g. tax records, GDPR obligations)

We do not sell your personal data to third parties. Ever.

For users in the EEA, UK, and Switzerland, we process your data under the following legal bases:

• Contract: Processing your registration and course access
• Legitimate interest: Improving our platform, preventing abuse
• Consent: Marketing emails (you can withdraw at any time)
• Legal obligation: Tax records and compliance requirements

We share personal data only with trusted service providers, and only to the extent necessary:

• WordPress.com / Automattic — website hosting and infrastructure
• Stripe — secure payment processing
• Email service providers — newsletters (you can unsubscribe any time)
• Google Analytics — anonymised site analytics
• GamiPress — gamification points and achievements (stored on our own servers)

All processors are contractually bound to protect your data and may not use it for their own purposes.

We retain personal data for as long as your account is active, plus a maximum of 3 years after account deletion for legal compliance. After that, all personal data is permanently deleted or anonymised. You can request deletion at any time.

Our measures include:

• HTTPS encryption on all pages
• Passwords stored as salted hashes (never plaintext)
• Payment data processed entirely by Stripe (PCI-DSS compliant)
• Access restricted to authorised staff only
• Regular security audits and software updates

No system is 100% secure. If you suspect a breach, contact us immediately at support@mondosol.com.

Account registration requires users to be at least 13 years old. If you are under 13, please have a parent or guardian create an account on your behalf. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date. Significant changes will be communicated by email or via a notice on the site.

Material modifications: GDPR compliance — December 12, 2018.

For any privacy-related questions or to exercise your rights, please contact our Privacy Officer:

💬 Send us a message