1. Data Controller

 

In compliance with applicable data protection regulations in Mexico and best international privacy practices, the entity responsible for processing your personal data is:

​

Legal name of your business: Karen Ruby Aguayo Hernández
Address: Loma del Molino 4 int., Loma Dorada. Santiago de Querétaro, Querétaro. CP. 76060
Email: contact@thriveinspanish.com

​

If you have any questions, require clarification, or want to exercise your data rights, you may contact us using the email provided above.

​

2. Personal Data We Collect

 

Depending on how you interact with our website or services, we may collect the following types of personal data:

​​​

• Identification and contact information: name, email address, country of residence, preferred language, phone number (if applicable), and billing information.
   

• Service-related information: selected class package (private or group classes), class history, Spanish level, academic progress, invoices, payments, and schedules.
   

• Technical and usage data: IP address, browser type, operating system, device information, pages visited, session duration, navigation behavior, cookies, web beacons, and similar technologies.
   

• Voluntary information: preferences, comments, survey responses, support requests, and any additional information you choose to provide.

​

3. Purposes of Data Processing

​

Your personal data may be used for the following purposes:

​

• Managing your registration, class enrollment, and delivery of services (private or group lessons).
   

• Sending confirmations, reminders, invoices, and administrative notifications.
   

• Providing customer support, responding to inquiries, and maintaining communication with you.
   

• Enabling the technical operation of our website and class platform (login, session maintenance, functionality, security).
   

• Conducting statistical analysis and improving our services, classes, and website performance.
   

• Sending newsletters, updates, promotional information, or marketing content — only with your consent.
   

• Complying with legal, accounting, tax, or regulatory obligations.

​

4. Use of Cookies and Similar Technologies

​

Our website uses cookies and similar technologies for several purposes.

​

4.1 What are cookies?

​

Cookies are small text files stored on your device when you visit our website. We may also use web beacons and other tracking technologies for analytical or functional purposes.

​

4.2 Type of cookies we use

​

4.2.1 Strictly necessary cookies

​

Enable the website’s core functionality: account login, navigation, security, class access. Required to provide our services.

​

4.2.2 Functionality or preference cookies

​

Remember your settings (language, preferences) and enhance your user experience.

​

4.2.3 Analytics cookies

​

Collect anonymized information about how visitors use the site to improve features, performance, and user experience.

​

4.2.4 Third-party cookies

​

Installed by external services we use (analytics tools, payment processors, video platforms, marketing tools). These third parties may collect additional data according to their own privacy practices.

​

4.3 Cookie consent and management

​​

You can manage or delete cookies through your browser settings, although this may affect certain features or functionality.

​

5. Data Sharing and Third-Party Transfers

​

We may share your data only in the following cases:

​

• With service providers who help us deliver our classes and run our business (video conferencing platforms, hosting providers, payment processors, analytics tools, email service providers). These third parties are required to protect your data.
   

• To comply with legal or regulatory requirements, including tax or accounting obligations.
   

• With your explicit consent, for purposes not essential to the core service (e.g., marketing or partner programs).
   

We do not sell or rent your personal information to third parties.

​

7. Your Rights (ARCO Rights)

​

As the owner of your personal data, you have the right to:

​

• Access your personal data.
   

• Rectify inaccurate or incomplete data.
   

• Cancel your data when it is no longer necessary for the purposes collected.
   

• Object to specific processing activities (such as marketing or analytics).
   

To exercise any of these rights, please contact us at the email provided in Section 1.

​

8. Security Measures

​

We implement technical, administrative, and organizational safeguards to protect your personal data from unauthorized access, misuse, loss, alteration, or disclosure. Access to your data is limited to authorized personnel and trusted third-party providers operating under confidentiality agreements.

​

9. Consent and Withdrawal of Consent

 

By registering on our site, submitting your information, or purchasing any class package, you acknowledge that you have read and agree to this Privacy and Cookies Policy.

​

You may withdraw your consent at any time — for example, to unsubscribe from marketing communications or to disable non-essential cookies — through the mechanisms provided (email request, browser settings, or cookie preferences panel).

​

10. Changes to This Policy

​

We may update or modify this policy from time to time due to changes in our services, new technologies, or legal requirements.

​

Any updates will be published on this page, along with the date of the last revision. We suggest reviewing this policy periodically.

​

Date of update: December 11, 2025