Privacy and Cookie Policy

Last updated: 11 October 2026.

1. Who is responsible for your data

ΛΑΜΠΙΡΗ ΕΛΕΝΗ ΠΡΕΚΑΣ ΠΑΝΑΓΙΩΤΗΣ Ο Ε (Greek general partnership / Ο.Ε.), trading as Greek Lessons for You, is the controller for our website, course administration, learner support and marketing communications. Registered office: Leoforos Vasilissis Olgas 83, Thessaloniki 54642, Greece. VAT: 803382957. GEMI: 195743506000.

For privacy requests, email info@greeklessons4u.com. Telephone: +30 690 611 1187 or +30 697 626 8885, Monday–Thursday, 09:30–13:00, Greece local time (Europe/Athens).

2. What we collect and why

• Course purchases and learning: your name, email, account details, order information, enrolment, progress and course-related submissions, to supply and support your purchased course. The legal basis is performance of the contract or steps you request before purchasing.
• Contact and support: the information you provide in forms, email or social messages, to answer your enquiry. We rely on contract necessity for purchase-related support and legitimate interests for other enquiries, subject to your rights.
• Accounting: transaction, receipt and invoice information required by tax and accounting law. The legal basis is compliance with legal obligations.
• Marketing: your email, any name you provide, subscription preferences and evidence of consent, to send Greek expressions, learning tips, cultural discoveries, course updates and offers when you have opted in. Consent is optional and can be withdrawn at any time.
• Website analytics: online identifiers and information about pages and interactions, through Google Analytics when you allow analytics. We use this to understand and improve the website.
• Security and administration: proportionate technical logs and information necessary to prevent abuse, maintain the service and address disputes, on the basis of legitimate interests where those interests are not overridden by your rights.

We receive data directly from you, from your interactions with the website and course platform, and from providers reporting orders and enrolment. Required purchase details are needed to provide the course or meet legal obligations; optional marketing is not a purchase requirement. Please do not send full payment-card details, passwords or sensitive personal information in support messages.

3. Providers and recipients

We use Thinkific to host and administer courses and learner accounts. Payments are processed through Thinkific Payments and the payment infrastructure identified at checkout. Payment providers handle card details and may act independently for payment, fraud-prevention and legal obligations.

Our public website uses WordPress and Papaki hosting services. MailerLite processes email subscriptions and delivers our optional marketing emails on our behalf. CookieYes manages website cookie choices. Google Analytics, implemented through Google Site Kit, provides website usage measurements. Technical support providers, email providers, professional advisers and authorities may receive information necessary for their roles or required by law. Course activities and links may direct you to external services, such as Wordwall, whose own notices apply to their independent processing.

Provider information: Thinkific privacy and data processing terms; MailerLite privacy and data processing terms; Google privacy. A link to an external service does not itself subscribe you to our marketing.

4. Processing outside the EEA

Some providers and their subprocessors operate outside the European Economic Area, including in Canada and the United States. Thinkific and MailerLite describe their international transfer arrangements in the data processing terms linked above. Depending on the recipient and transfer, applicable safeguards include adequacy decisions or European Commission standard contractual clauses. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

5. How long information is kept

Retention depends on the purpose. Learner account, enrolment and progress information is needed while your account and purchased access remain active, including lifetime access, unless you request deletion and applicable conditions are met. Support correspondence is kept while resolving your enquiry and for any relevant complaint or claim period. Accounting records are kept for the legally required period and longer where an audit or legal hold requires it.

Marketing subscription information is kept while the subscription is active. After unsubscribe, limited suppression information and consent records may be retained to honour your choice and demonstrate compliance; unsubscribe does not require keeping unnecessary profile information. Technical logs are retained according to security and troubleshooting needs, and backups cycle according to the relevant service's backup arrangements. Data needed for a dispute is limited to what is necessary for that dispute and applicable limitation periods. You may ask us about retention for a particular record.

6. Your choices and rights

Subject to applicable legal conditions, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You can object to direct marketing at any time. Use the unsubscribe link in marketing emails or email us; withdrawal of consent does not affect earlier lawful processing or cancel your course.

We may need proportionate verification of your identity. We normally respond to a rights request within one month and explain any lawful extension. You can complain to the Hellenic Data Protection Authority or another competent supervisory authority.

7. Cookies and external content

Cookies can support security, sign-in, preferences and analytics. Use the CookieYes consent button on our WordPress website to accept, reject or revisit optional cookie choices. The preference panel lists the categories and declared cookies. Necessary cookies remain active to support essential functions. Optional consent is separate from acceptance of purchase terms and email subscriptions.

Google Analytics cookies include _ga and related _ga_* identifiers used to distinguish visits and maintain measurement state. Google's default expiry is up to two years and may be refreshed by subsequent visits. CookieYes stores your consent preferences; the site's configured consent period is 365 days. WordPress sign-in cookies apply when you sign in, and their duration depends on the login and remember-me option.

MailerLite forms and popups may use technology to deliver forms and remember display preferences. Thinkific checkout and the learning platform use their own essential technologies. Embedded content and external activities can involve third-party data processing; opening an external link takes you to that provider's service. Consult the relevant service's notice and choices.

8. Security, children and publication

Access to personal information is limited to those who need it to provide the service or meet legal obligations. We use appropriate technical and organisational measures with our providers. No online system is completely risk-free. Our self-paced offer is intended for adult purchasers. Any agreed enrolment of a minor requires appropriate information and any consent required by law. Identifiable student work, photographs or testimonials are published only on an appropriate lawful basis and with separate permission where necessary.

9. Changes to this notice

We update this notice when our processing or services change, show the update date and provide additional notice of material changes where required. A policy update does not retrospectively authorise a new purpose or remove your rights.