Privacy

Your privacy, respected

What data we collect, why, and how you stay in control. GDPR compliant.

Start reading Ask a question

In short

Your data in four sentences.

What we collect

Only what we need to run your account and courses.

Why we use it

To teach, support you and improve Mondosol.

Your rights

See, correct, export or delete your data.

Cookies

You choose which cookies you accept.

Part 1 of 13

Introduction

How we look after your data — in plain language, no fine-print games.

Overview

This Privacy Policy outlines how Mondosol collects, uses, and protects Personal Data. We are committed to being transparent about our data practices and to protecting your privacy at every step.

Data Controller:

Mondosol
Attn: Privacy Officer
5 Nordre Torv, Honefoss 3513, Norway
Email: support@mondosol.com

Part 2 of 13

Types of Personal Data We Collect

Depending on how you use Mondosol, we may collect the following categories of personal data:

👤 Account Data

Name and email address
Username and password (hashed)
Profile photo (optional)
Language learning preferences

📊 Usage Data

Pages and lessons visited
Course progress and scores
Streak and achievement data
Browser type and device info

💳 Payment Data

Billing name and address
Payment processed via Stripe — we never store card numbers

💬 Communication Data

Emails and support messages you send us
Newsletter subscription status
Community forum posts

Part 3 of 13

How and When We Collect Personal Data

When you register: You provide your name, email, and create a password.
When you use our courses: We automatically record your progress, completion rates, and quiz scores.
When you purchase: Payment details are handled by Stripe under their own privacy policy.
Through cookies and analytics: We use cookies to keep you logged in and understand site navigation.
When you contact us: Messages sent to support@mondosol.com or via the contact form are stored to help us respond and improve.

Part 4 of 13

How We Use Your Data

To create and manage your learner account
To deliver language courses and track your progress
To send you course-related notifications and updates (you can opt out)
To process payments and prevent fraud
To improve our platform based on aggregated, anonymised usage patterns
To respond to support requests
To comply with legal obligations (e.g. tax records, GDPR obligations)

We do not sell your personal data to third parties. Ever.

Part 5 of 13

Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we process your data under the following legal bases:

Contract: Processing your registration and course access
Legitimate interest: Improving our platform, preventing abuse
Consent: Marketing emails (you can withdraw at any time)
Legal obligation: Tax records and compliance requirements

Part 6 of 13

How We Share Your Data

We share personal data only with trusted service providers, and only to the extent necessary:

WordPress.com / Automattic — website hosting and infrastructure
Stripe — secure payment processing
Email service providers — newsletters (you can unsubscribe any time)
Google Analytics — anonymised site analytics
GamiPress — gamification points and achievements (stored on our own servers)

All processors are contractually bound to protect your data and may not use it for their own purposes.

Part 7 of 13

Your GDPR Rights

Right of Access

You have the right to request a copy of all personal data we hold about you. Contact us at support@mondosol.com and we will respond within 30 days.

Right to Rectification

If any data we hold is inaccurate, you can update it in your account settings or by contacting us. We will correct it without delay.

Right to Erasure

You may request deletion of your account and personal data. We will comply within 30 days unless we are legally required to retain certain records (e.g. financial transactions).

View more rights

Right to Restrict Processing

You can ask us to suspend processing of your data while we verify its accuracy or while a complaint is being investigated.

Right to Data Portability

You can request your data in a machine-readable format (JSON or CSV) so you can transfer it to another service.

Right to Object

You have the right to object to processing based on our legitimate interests, including profiling. We will stop unless we have compelling grounds to continue.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

Part 8 of 13

Cookies & Tracking

Essential Cookies

These cookies are necessary for the site to function. They keep you logged in and remember your language preferences. They cannot be disabled.

Analytics Cookies

We use Google Analytics with IP anonymisation enabled. You can opt out via our Opt-Out Preferences page or the Google Analytics Opt-Out Add-On.

Marketing Cookies

Only set if you have consented to marketing emails. You can withdraw consent and delete these cookies from your account settings at any time.

Part 9 of 13

Data Retention

We retain personal data for as long as your account is active, plus a maximum of 3 years after account deletion for legal compliance. After that, all personal data is permanently deleted or anonymised. You can request deletion at any time.

Part 10 of 13

Security

Our measures include:

HTTPS encryption on all pages
Passwords stored as salted hashes (never plaintext)
Payment data processed entirely by Stripe (PCI-DSS compliant)
Access restricted to authorised staff only
Regular security audits and software updates

No system is 100% secure. If you suspect a breach, contact us immediately at support@mondosol.com.

Part 11 of 13

Children’s Privacy

Account registration requires users to be at least 13 years old. If you are under 13, please have a parent or guardian create an account on your behalf. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will delete it promptly.

Part 12 of 13

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date. Significant changes will be communicated by email or via a notice on the site.

Material modifications: GDPR compliance — December 12, 2018.

Part 13 of 13

Contact Us

For any privacy-related questions or to exercise your rights, please contact our Privacy Officer: