Privacy Policy

Last updated: September 2026

This Privacy Policy explains how VerbaViva collects, uses, stores, and protects your personal data when you enrol your child in our online Polish heritage language programme.

Who We Are

Our website address is: https://verbaviva.org. VerbaViva is the trading name under which this course is operated. For any privacy-related question or request, you can contact us at privacy@verbaviva.org.

What Personal Data We Collect and Why We Collect It

Account & Enrolment Data

When a parent/guardian registers and enrols a child, we collect:

• Parent/Guardian Information: full name, email address, phone number, billing address.
• Student Information: child’s first name, age/date of birth, and approximate Polish proficiency level.

This is collected on the basis of your consent, given at enrolment, and is necessary to perform our contract with you (providing the course you have signed up for).

Course, Quiz & Interactive Content Data (Masteriyo & H5P)

Our site uses the Masteriyo LMS plugin to run courses. When you register, enrol in a course, or take a quiz, Masteriyo stores your account details, course enrolment and progress, quiz attempts and answers, order/billing information linked to enrolment, and any consent given on our forms.

We also use H5P for some interactive content (e.g. in-lesson quizzes and exercises). H5P may process and store data about your interactions — for example your score, the maximum score possible, when you started and finished an activity, and how long you took. We use this only to give feedback on learning progress and to improve how the material is designed; it is not used to make any automated decision that has a legal or similarly significant effect on you or your child.

Payment Data

Payment and billing information is processed securely by our payment provider, Stripe, and currency conversion is handled via Wise. We do not store full card details ourselves.

Comments

Comments are disabled on this site. We do not collect data through a comments feature.

Media

Students and visitors cannot upload images or files to the site.

Contact Forms

We do not currently have a contact form on this site. If we add one in the future, this Policy will be updated to describe what data it captures and how long we keep it.

Cookies

If you visit our login page, we set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in (e.g. to access your child’s course on Masteriyo), we also set cookies to save your login information and screen display choices. Login cookies last for two days, and screen-options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out, login cookies are removed.

Beyond these functional login cookies, this website does not use advertising, tracking, or analytics cookies.

Embedded Content

Some interactive content built with H5P may embed video or other content from third-party websites (for example YouTube). Embedded content from another website behaves exactly as if you had visited that website directly — it may set its own cookies, collect data about you, and track your interaction with it, particularly if you are logged into an account with that provider. We recommend reviewing the relevant third party’s own privacy policy (e.g. Google’s, for YouTube) if this is a concern.

Analytics

We do not use any analytics or tracking software on this site.

Who We Share Your Data With

We do not sell or rent your personal data. We share data only with the following trusted third-party providers, each acting as a data processor for the purpose stated:

• Masteriyo / H5P: course delivery, enrolment records, quiz and interaction data.
• Google Meet: hosting live video classes.
• Stripe / Wise: payment processing and currency conversion.

If you request a password reset, your IP address will be included in the reset email, as is standard WordPress behaviour.

How Long We Retain Your Data

We retain personal data for as long as your child is actively enrolled, and for up to 5 years afterwards where required for tax and accounting purposes under Polish law. Quiz and course-progress data held in Masteriyo/H5P is retained for the same period, after which it is securely deleted. For registered site users, you can see, edit, or request deletion of your personal information at any time (except your username, which cannot be changed).

What Rights You Have Over Your Data

You have the right to request an exported copy of the personal data we hold about you or your child, and the right to request that we erase it. This does not include data we are obliged to keep for administrative, legal, tax, or security purposes. You also have the right to lodge a complaint with a data protection supervisory authority — in Poland, this is the Office for Personal Data Protection (Urząd Ochrony Danych Osobowych, UODO) — or with the equivalent authority in your own country of residence.

Children’s Privacy & Parental Consent

Our courses are designed for children, and we collect a limited amount of personal data about the enrolled child, as described above. By enrolling a child, the parent/guardian confirms they are the child’s parent or legal guardian and, by completing enrolment, gives permission for the child to attend the course and consents, on the child’s behalf, to the processing of the child’s data as described in this Policy.

Where Your Data Is Sent

We operate from Poland, and our families are based in a number of countries, including the UK, Australia, and the US. Some of our service providers (Stripe, Wise, Google Meet, and the servers used by Masteriyo/H5P) may process data outside of Poland or the European Economic Area (EEA). Where this happens, we rely on the safeguards those providers have in place — such as Standard Contractual Clauses, an adequacy decision, or equivalent measures — to ensure your data is protected to a standard consistent with EU data protection law.

How We Protect Your Data

We rely on the security measures built into our trusted providers (WordPress, Masteriyo, Stripe, Wise, Google Meet) — including encrypted connections and secure payment handling — and we limit access to personal data to what is necessary to run the course.

Data Breach Procedures

In the event of a data breach affecting your personal data, we will assess the risk and, where required by law, notify affected parents/guardians and the relevant supervisory authority without undue delay.

Automated Decision-Making

We do not use your data for any automated decision-making or profiling that produces legal or similarly significant effects. Quiz and interaction scores from Masteriyo/H5P are used solely to give learning feedback.

Contact Information

For any privacy-related question, request, or concern, contact us at privacy@verbaviva.org.