Privacy Policy

1. Data Controller

The data controller responsible for your personal data is: Educational Center Next Level ul. Pano Mudarov 12 Kavadarci 1430, Republic of North Macedonia Email: nextlevel_edu@yahoo.co.uk Phone: +389 70 208 206

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity Data: full name, age/grade level
• Contact Data: email address, phone number, postal address
• Parent/Guardian Data: contact information for students under 18
• Account Data: email, encrypted password, user role
• Enrollment Data: chosen language, course level, schedule preference, course type, how you heard about us
• Educational Data: test submissions, quiz results, essay responses, skill scores, progress records
• Payment Data: records of your payments (amount, date, payment method). We do not store card numbers.
• Communication Data: contact form messages, newsletter preferences
• Technical Data: IP address, browser type, pages visited (collected automatically via server logs)

3. How We Use Your Data

We process your personal data for the following purposes:

• Course enrollment and administration: processing applications, scheduling classes, managing records of users of our services
• Educational services: conducting language assessments, grading submissions, and tracking progress
• Communication: responding to inquiries, sending enrollment confirmations, course updates, and scheduled reminders
• Payment processing: facilitating course fee payments through our authorized payment processor
• Marketing: sending newsletters and promotional materials (only with your explicit consent)
• Legal obligations: maintaining accounting records and fulfilling regulatory requirements
• Website improvement: analyzing usage patterns to enhance our services and user experience

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): processing necessary for enrollment, course delivery, and payment administration
• Consent (Art. 6(1)(a)): newsletter subscriptions, marketing communications, and use of non-essential cookies
• Legitimate interest (Art. 6(1)(f)): website security, fraud prevention, service improvement, and responding to inquiries
• Legal obligation (Art. 6(1)(c)): tax and accounting record keeping as required by law

5. Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

• Resend: for delivering transactional and marketing emails (email address and name only)
• Cloudinary: for storing images and documents uploaded to the platform

We do not sell, rent, or trade your personal data. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

6. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Active records of users of our services: retained for the duration of enrollment plus 3 years after the last course ends
• Enrollment inquiries and leads: retained for 2 years from the date of inquiry
• Payment records: retained for 10 years as required by Macedonian tax law
• Newsletter subscriptions: retained until you unsubscribe
• Account data: retained until you request deletion or the account is inactive for 5 years
• Website analytics: aggregated data retained indefinitely; personal data purged after 26 months

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15): request a copy of the personal data we hold about you
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion of your personal data ('right to be forgotten')
• Right to restrict processing (Art. 18): request limitation of how we process your data
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format
• Right to object (Art. 21): object to processing based on legitimate interest or direct marketing
• Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at nextlevel_edu@yahoo.co.uk. We will respond within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with the Agency for Personal Data Protection of the Republic of North Macedonia (www.dzlp.mk).

8. Children's Data

We provide language courses for children and minors. For students under the age of 18, we require parental or guardian consent before collecting and processing their personal data. The enrollment form collects parent/guardian contact information for this purpose. Parents and guardians may exercise the data rights outlined above on behalf of their children.

9. Cookies and Tracking

Our website uses essential cookies necessary for the proper functioning of the site (session management, authentication, and language preference). In addition, we use Google Analytics for anonymous, aggregate visit statistics (which pages are visited, where visitors come from, and which actions are taken, e.g. submitting a form) — this data does not identify you personally and is used solely to improve our website and services. We do not use advertising cookies.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encrypted data transmission (HTTPS/TLS), encrypted password storage (bcrypt hashing), access controls and role-based permissions, secure third-party payment processing (PCI DSS compliant), and regular review of security practices. While we strive to protect your data, no method of transmission over the Internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on our website. The "Last updated" date at the top indicates the latest revision.

12. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us: Educational Center Next Level ul. Pano Mudarov 12, Kavadarci 1430 Email: nextlevel_edu@yahoo.co.uk Phone: +389 70 208 206

13. Free Online Level Test

When you take our free online level test, we collect your first and last name, email address, phone number, city, chosen language, your answers and your result. This data is processed on the basis of your consent, given by ticking the agreement box before submitting the test, and is used to: deliver your result by email, contact you about your result and suitable courses, and inform you about official certification, promotions and special offers. You may withdraw this consent at any time by contacting us — we will then stop contacting you and delete your test data on request.