Privacy & Cookie Policy
Protecting the privacy of our students and guardians.
Wanderlust English Language Center is committed to protecting the privacy of our students and their legal guardians. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation () and Cyprus Law 125(I)/2018.
Data Controller
Data We Collect
Because access to this portal is by invitation only, we only process personal data necessary to provide language education and manage school administration:
- Identification: First name, last name, date of birth.
- Contact Information: Email address, telephone number.
- Academic Data: English proficiency level, assigned course group/class, attendance, and progress notes.
- Technical Data: Login timestamps and session security identifiers.
Legal Basis & Purpose
We process your personal data under Article 6(1)(b) of the (performance of an educational contract) and Article 6(1)(f) of the (our legitimate interest in managing school operations and securing our services).
*Where students are under 16 years old, personal data is collected and managed with the explicit authorization of their legal guardian.
Data Storage & Infrastructure
- Database: Your data is stored securely using Turso DB (libSQL), encrypted both in transit () and at rest.
- Data Isolation: The architecture enforces strict tenant isolation. No student or parent has access to the records of any other user.
- We do not sell, rent, or share your data with advertisers or third-party marketing companies.
Essential Cookies & Local Storage
Under the EU ePrivacy Directive and , we only use strictly necessary functional cookies and tokens. We do not use tracking or advertising cookies; therefore, no consent banner is required.
The cookies and storage items used include:
- Better Auth Session Cookie: Authenticates your login status and maintains your secure session.
- Language Preference Cookie: Stores your selected interface language.
- Notification State: Remembers read/unread status for internal school announcements.
Data Retention
We keep personal records for the duration of the student's enrollment at Wanderlust, plus any statutory retention period required by Cyprus law for tax and educational administrative purposes. After this period, data is securely deleted.
Your Rights under GDPR
As a resident of Cyprus / the EU, you have the following rights:
- Access to the personal data we hold about you.
- Rectification of inaccurate or outdated information.
- Erasure ("Right to be Forgotten") of your data, subject to legal record-keeping obligations.
- Restriction or Objection to the processing of your personal data.
- Data Portability to receive your personal data in a structured, commonly used format.
To exercise any of these rights, email us directly at:
Supervisory Authority
If you believe your data has been handled improperly, you have the right to lodge a complaint with the Cyprus supervisory authority:
- Office of the Commissioner for Personal Data Protection (Cyprus)
- Website: www.dataprotection.gov.cy