Privacy Policy

Who we are

This is the website of Nondas Pettas, a native English teacher and business English coach based in Krakow, Poland, operating at www.nondas.eu (“we”, “us”, “our”). This Privacy Policy explains what personal data we collect, why we collect it, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR).

You can contact us about any privacy matter at englishrocks@nondas.eu.

What personal data we collect and why

Contact form

When you use our contact form (powered by WPForms), we collect the name, email address, and message you provide so that we can respond to your enquiry. This data is sent to our email inbox and is not used for any other purpose without your consent.

Newsletter and email opt-ins

If you subscribe to our newsletter or to free resources (powered by MailPoet), we collect your name and email address so we can send you the content you signed up for and occasional related updates. You can unsubscribe at any time using the link included in every email.

Vocabulary test and other interactive resources

If you complete the vocabulary test or request results or feedback from any interactive exercise, we may collect your name and email address in order to send you your results.

Lesson bookings

If you book a lesson or consultation through our booking system (FluentBooking), we collect your name, email address, time zone, and any details you provide about your scheduling preferences, in order to arrange and manage your lesson.

Purchases

If you purchase a course, product, or membership through our online store (WooCommerce), we collect billing details (such as name, email, and address) needed to process your order. Payments are handled by our payment providers (such as Stripe or PayPal); we do not store your full card details ourselves.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, plus the visitor’s IP address and browser user agent string to help with spam detection. An anonymised string created from your email address (a “hash”) may be sent to the Gravatar service to check whether you use it. The Gravatar service’s privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public alongside your comment.

Media

If you upload images to the website, please avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can download and extract location data from images on the website.

Cookies and analytics

Like most websites, this site uses cookies and similar technologies. These fall into the following categories:

  • Essential cookies – required for the site, our forms, booking system, and online store to function correctly.
  • Analytics cookies – we use Google Analytics (via Site Kit by Google and/or MonsterInsights) to understand how visitors use the site, so we can improve it. This may involve sharing data with Google. You can find out more about how Google uses this data at https://policies.google.com/technologies/partner-sites.
  • Advertising cookies – where applicable, Google services (such as AdSense) may use cookies to serve relevant advertising.

Where required by law, we ask for your consent before non-essential cookies are set, via the cookie consent banner shown when you first visit the site. You can change your cookie preferences at any time using that banner, or by adjusting your browser settings to refuse cookies (note that some parts of the site may not work as intended if you do so).

Embedded content from other websites

Articles and pages on this site may include embedded content (e.g. videos, maps, or social media posts). Embedded content from other websites behaves in exactly the same way as if you visited that other website directly, and those websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

Who we share your data with

We use a number of trusted third-party services to run this website and only share the minimum data necessary with each of them:

  • Google (Site Kit, Google Analytics, AdSense) – website analytics and, where applicable, advertising.
  • MailPoet – sending newsletters and email updates to subscribers.
  • WPForms – processing contact form submissions.
  • FluentBooking – managing lesson bookings and appointments.
  • WooCommerce, Stripe and/or PayPal – processing orders and payments.
  • Our hosting provider – storing the website and its data securely.

We do not sell your personal data to third parties.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely so we can recognise and approve any follow-up comments automatically. Contact form submissions, newsletter subscriptions, booking details, and order records are kept for as long as necessary to provide our services, comply with legal/tax obligations, and resolve disputes, after which they are deleted or anonymised.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you, except where we must keep that data for administrative, legal, or security purposes.

Under the GDPR, you also have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • object to or restrict certain processing;
  • withdraw consent at any time (e.g. unsubscribe from emails or change cookie preferences);
  • lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at englishrocks@nondas.eu.

Where your data is sent

Visitor comments may be checked through an automated spam detection service. Some of the third-party services listed above may process or store data outside the European Economic Area (e.g. in the United States); where this happens, those providers maintain their own safeguards (such as Standard Contractual Clauses) to protect your data in line with GDPR requirements.

Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes to the tools and services we use. Any changes will be posted on this page with an updated revision date.

Last updated: 15 June 2026.