This Privacy Notice explains how Uspk by Professional English, with its registered address at Del Agronomo 5504 (“USPK Academy,” “we,” “us,” or the “controller”), collects, uses, shares, retains, and protects personal data when operating its website, applications, courses, and related services (the “Platform”).
We process personal data in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and other applicable Mexican provisions.
1. Personal data we process
Depending on how you use the Platform, we may process the following categories:
1.1 Identity and contact data
first and last name;
email address;
telephone number, where needed;
country, language, and time zone;
username, account identifiers, and profile picture if you choose to provide one; and
company, role, or relationship with an organization funding your access.
1.2 Account and authentication data
protected credentials or authentication identifiers;
registration and last-login dates;
account preferences; and
information used to prevent unauthorized access.
We do not store passwords in readable text.
1.3 Learning activity
enrolled courses, progress, and activity time;
answers, assignments, comments, and files;
scores, attempts, results, and completion;
certificates earned; and
interactions with instructors, support, or collaborative features.
1.4 Purchase and billing data
purchased product or plan;
price, currency, taxes, and payment status;
billing address or details where needed;
customer, subscription, and transaction identifiers; and
limited payment-method information, such as card brand and last digits, where provided by Stripe.
Stripe processes full payment-card details. USPK Academy does not store the full card number or security code.
1.5 Usage, device, and security data
IP address;
device type, operating system, and browser;
language, time zone, and settings;
pages, buttons, features, and courses used;
dates, duration, and approximate event sequence;
referring URL and technical parameters; and
error, security, and fraud-prevention logs.
1.6 Communications and marketing data
support requests and their content;
survey or form responses;
communication preferences; and
email delivery, open, and interaction data where provided by our email service and permitted by law.
2. Sensitive data and children’s data
The Platform does not intentionally request sensitive personal data. Please do not include health, biometric, religious, political, sexual, or other sensitive information in answers, assignments, or messages unless a feature expressly requests it and we provide the corresponding information and consent mechanism.
The Platform is not intentionally directed to minors acting without the authorization of a parent or guardian. If you believe we process a child’s data without the required authorization, contact [PRIVACY EMAIL] so we can review and, where appropriate, delete it.
3. How we obtain data
We obtain data:
directly from you when you register, purchase, study, submit content, or contact us;
automatically through cookies, local storage, logs, and similar technologies;
from Stripe and other providers needed to complete payments;
from a company or organization that purchases or assigns your access; and
from integrations you choose to connect or use.
4. Primary or necessary purposes
We use data to:
create, authenticate, administer, and protect accounts;
enroll users and provide courses, content, and features;
save progress, answers, scores, and certificates;
process purchases, subscriptions, billing, cancellations, and refunds;
send confirmations, renewal notices, security alerts, and essential service communications;
provide support and answer requests;
assign and administer enterprise access;
prevent fraud, abuse, incidents, and unauthorized access;
diagnose errors and maintain availability and security;
perform contracts and meet tax, accounting, and legal duties; and
respond to properly grounded requests from competent authorities.
These purposes are necessary to deliver the service or perform our legal relationship with you.
5. Secondary purposes
With your consent where required, we may use data to:
send news, promotions, recommendations, and marketing communications;
measure campaigns and communication interactions;
conduct surveys and product research; and
analyze usage patterns to improve content, experience, and features through PostHog or other tools disclosed on the Platform.
You may object to these purposes without affecting purchased services. Use the unsubscribe link in each marketing email, contact legal@uspkacademy.com.
Marketing opt-out does not prevent essential or transactional messages, such as purchase confirmations, renewal notices, security updates, account recovery, or information needed to deliver the service.
6. Cookies, local storage, and PostHog
We use cookies and similar technologies to:
maintain sessions and remember preferences;
protect accounts and prevent fraud;
preserve privacy choices; and
understand Platform usage and improve it.
Depending on our configuration, PostHog may receive account identifiers or pseudonyms, IP address, device information, and usage events. We do not intentionally send PostHog full card data, passwords, or the content of fields designated as sensitive.
You can manage non-essential technologies through your browser settings. Blocking essential technologies may prevent certain features from working.
7. Service providers and processors
We may permit providers acting on behalf of USPK Academy to process data solely to deliver contracted services and subject to confidentiality and security obligations. These providers include:
Stripe, for payment processing, billing, and fraud prevention;
PostHog, for product analytics;
Resend, for transactional and marketing email;
hosting, database, security, support, and infrastructure providers; and
professional advisers where necessary.
Some providers may also act as independent controllers for certain operations, such as meeting their legal obligations, preventing fraud, or handling disputes. Their own privacy notices apply to those activities.
We do not sell personal data.
8. Transfers and enterprise access
We may transfer data:
to a company or organization funding your access, regarding enrollment, licenses, progress, results, and completion, where needed to administer the program and disclosed to you;
to payment, infrastructure, communication, security, and support providers required for our legal relationship;
to affiliates or successors as part of a reorganization, merger, or business transfer, subject to this Notice; and
to authorities where a valid legal obligation or request applies.
Some recipients may be located outside Mexico. In those cases, we will adopt applicable contractual, organizational, and security measures and communicate the relevant purposes and restrictions.
Subject to the exceptions under applicable law, by accepting this Notice you authorize the transfers described in this section. You may refuse or withdraw consent for transfers that are neither necessary to deliver the service nor legally exempt by contacting legal@uspkacademy.com. Refusal will not affect transfers required to perform our legal relationship or comply with legal duties.
9. Retention
We retain data only for as long as needed for the purposes described, considering:
the duration of the account, subscription, or contractual relationship;
the period needed to maintain progress, certificates, and learning records;
tax, accounting, fraud-prevention, and legal limitation periods;
the handling of claims and disputes; and
current preferences or consents.
At the end of the applicable period, we will delete, anonymize, or block data unless it must be retained for legal responsibilities. Anonymized statistical information that no longer identifies an individual may be retained longer.
10. Security
We maintain reasonable administrative, technical, and physical measures proportionate to the risk to protect personal data from damage, loss, alteration, destruction, or unauthorized use or access.
No system is completely infallible. If a breach materially affects your economic or moral rights, we will notify you immediately as required by applicable law so that you can take appropriate action.
11. ARCO rights and consent withdrawal
You may exercise the rights of:
Access: learn what data we hold and the conditions of processing;
Rectification: request correction of inaccurate or incomplete data;
Cancellation: request blocking and subsequent deletion where appropriate; and
Objection: ask us to stop processing data for specific purposes.
You may also withdraw consent or ask us to limit the use or disclosure of your data.
Send your request to legal@uspkacademy.com with:
your name and a means to receive notices;
documents proving your identity and, where applicable, representation;
a clear description of the relevant data;
the right you wish to exercise or your specific request; and
any information that helps us locate the data.
For rectification, include the requested correction and supporting documents. We may ask for additional information only where needed to authenticate you or process the request.
We will communicate our decision within twenty days after receiving a complete request. If approved, we will act within the following fifteen days. Each period may be extended once for an equal period where circumstances justify it. Exercising ARCO rights is free, except for reproduction or delivery costs permitted by law.
Closing an account or cancelling certain data may prevent us from providing some services and does not require deletion of information we must legally retain.
12. Changes to this Privacy Notice
We may update this Notice because of legal, technological, or operational changes. We will publish the current version at https://uspkacademy.com/en/privacy and state its update date.
If a change is material or requires renewed consent, we will notify you through the Platform, email, or another appropriate means before it takes effect.
13. Contact
Controller: Uspk by Professional English
Address: Del Agronomo 5504, Zapopan, Jalisco, Mexico.
Person or team responsible for personal data: legal@uspkacademy.com
Privacy and ARCO rights email: legal@uspkacademy.com
Website: https://uspkacademy.com
The Spanish version prevails over any translation to the extent permitted by law.