Last updated: 02-11-2025
At Lingua Learn Malta, we are committed to ensure confidentiality, accuracy and security of your personal information that we may collect as part of our day-to-day business. This Privacy Policy (“Policy”) explains how we collect, use, store, and safeguard personal information, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Chapter 586 of the Laws of Malta), as amended from time to time.
This Policy explains how we handle your personal information when you use our Services or interact with us in other ways, such as visiting our website (www.lingua-learn.mt) or contacting customer support. By using our Services or engage with us, you agree that we may collect and use your personal information as described in this Policy. “Personal information” means any data that can identify you, either on its own or when combined with other information, or that allows us to contact you. For the purposes of this Policy, “Services” refers to all language learning, training and educational programs, resources and related activities provided by us.
In some cases, our Services may be provided in partnership with trusted third parties. Any personal information you share through these Services will still be protected under this Policy.
Please read this Police carefully. By using this website and our services, you acknowledge that you have read, understand and agree to be legally bound by this Policy.
1. Who We Are
Lingua Learn Malta (the “Institution”, “we”, “us”, “our”) is the data controller for personal data processed in connection with our language and training services.
Details:
- Legal Entity: Lingua Learn Malta Ltd.(C112335)
- Registered Address: Sterling Building, Green Co-Space Floor 2 Office 235, Triq Enrico Mizzo, Ta Xbiex, XBX 1453, Malta
- Email: info@lingua-learn.mt
2. Scope of this Policy
This Policy applies to all individuals whose personal data is collected, processed, or stored by Lingua Learn Malta in connection with the provision of our Services. This includes, but is not limited to:
- Students and prospective students engaging with our Services
- Staff, freelance trainers, and job applicants
- Visitors to our website and users of our Services.
- Third parties who interact with Lingua Learn Malta in relation to our Services.
3. What Information We Collect
We may collect the following data:
- Identification and contact details: name, email, nationality, phone number, address.
- Educational and employment details: qualifications, CVs, teaching experience, employment history, professional licenses
- Student records: enrolment details, progress reports, attendance, assessments, certificates. • Financial data: payment and billing details for tuition such as your credit or debit number.
- Technical data: IP address, device/browser type, usage data on our website/virtual classroom platform.
- Support data: feedback, queries, complaints.
We do not collect unnecessary data and only process information required for legitimate purposes.
4. Why We Collect Your Data
4.1. We process data under the following lawful bases:
- Contractual necessity: to deliver language and training services, manage your enrolment, facilitate access to virtual classroom platformand ensure proper delivery of our Services
- Legal obligation: to comply with Maltese laws, regulatory requirements and record-keeping obligations.
- Legitimate interest: to improve the quality of our Services, protect and prevent fraud or misuse, maintain academic integrity and support the efficient operation of our business.
- Consent: for activities that are optional such as receiving marketing communications, the use of cookies or participation in additional services where you have given explicit permission.
4.2. We may also process your personal data in the context of recruitment and employment opportunities, including:
- Communicating with you throughout the recruitment process
- Scheduling and managing interviews with our team members
- Verifying your identify and qualifications
- Assessing your suitability for a role and determining eligibility for employment • Meeting legal and regulatory requirements relating to recruitment and employment
4.3. We may also process your personal data in connection with student assessments and the evaluation of learning outcomes. This includes, but is not limited to, the following purposes:
- Assessment Records: we collect and process data such as attendance records, coursework submissions, examination results, and issued certificates to accurately evaluate academic progress, ensure fair treatment, and confirm successful completion of courses.
- Examination Integrity: To uphold the credibility of our programs, final assessments are subject to specific integrity measures. These may include screen sharing, supervised breakout rooms, and both verbal and written examinations, in line with our Final Test Policy.
- Certification and Accreditation: Your assessment data is used to determine eligibility for certification and to maintain the academic standards required for accreditation.
- Data Security and Purpose Limitation: All personal data related to assessments is stored securely, handled with strict confidentiality, and used exclusively for academic evaluation, progression and certification purposes.
5. How We Use Your Information
We process your personal information only for purposes that are necessary, lawful, and relevant to the delivery of our Services. Specifically, we use your data to:
- Deliver and enhance educational services: provide, manage, and continuously improve our teaching, training, and learning services.
- Manage the student lifecycle: administer admissions, enrolments, attendance, academic progression, assessments and certification
- Recruit and support staff: facilitate the recruitment, contracting and professional development of support teachers, trainers and administrative staff.
- Maintain quality and compliance: ensure adherence to the applicable regulatory standards, accreditation requirements, audits, and other applicable regulatory requirements.
- Provide support and communication: respond to queries, deliver technical and academic support and communicate important updates regarding courses, schedules or institutional policies.
- Marketing and optional services: send you information about our Services or opportunities where you have given explicit consent to receive such communications.
We do not sell or share your data with third parties for marketing purposes. Any information shared with third-party service providers (e.g. payment processors or virtual classroom platform) is strictly limited to what is necessary to provide our Services and is always handled in accordance with this Policy.
We may use aggregated or anonymised information i.e. data that has been processed so it can no longer reasonably identify an individual – for any legitimate business purpose. Examples of such uses include:
- Improving our Services – analysing course participation, learning outcomes, performance metrics, enhance program quality
- Research and development – developing new programs, tools, or learning resources based on general insights
- Trend analysis and reporting – generating reports on overall usage patterns, performance metrics or demographic insights.
6. Information of Others (Third-Party Data)
If you share personal information relating to other individuals (such as employees, dependents or colleagues), you are responsible for ensuring that you have a lawful basis to provide such data. You must also ensure that these individuals have been appropriately informed about the disclosure and have been made aware of this Policy.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, regulatory, and contractual requirements. Once the applicable retention period has expired, data will be securely deleted, anonymised, or archived, unless further retention is legally required. Retention periods are as follows:
- Student Records: retained up to five (5) years after course completion to support academic verification, certification, and audit requirements.
- Teacher and Staff Records: retained for the duration of the contractual relationship and for an additional five (5) years thereafter to comply with contractual, legal and audit obligations.
- Financial and Accounting Records: retained for ten (10) years, in accordance with Maltese tax and financial reporting regulations.
- Marketing Data (Consent-based): retained until you withdraw your consent or request deletion, after which it will be promptly erased from our systems.
In exceptional circumstances, certain data may be retained for longer periods where necessary, including:
- To establish, exercise, or defend legal claims
- To comply with investigations, regulatory inquiries, or dispute resolution processes • Where retention is required or permitted by applicable law
We apply the principle of data minimisation by ensuring that only information necessary for the stated purpose is retained, and we regularly review our retention practices to remain aligned with legal and regulatory obligations.
8. International Transfers
As part of the Lingua Learn global franchise, your personal data may, in limited circumstances, be accessed by affiliated entities or trusted partners located outside the European Economic Area (EEA), such as in the United Arab Emirates.
Whenever personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place to protect your rights and maintain compliance with the General Data Protection Regulation (GDPR). These safeguards may include, but are not limited to:
- The use of Standard Contractual Clauses (SCCs) approved by the European Commission
- Implementing additional technical and organisational measures to protect data confidentiality and integrity
- ensuring that recipients are subject to equivalent data protection obligations.
All such transfers are carried out only where necessary for the provision of our services and are carefully assessed to ensure that your personal data remains secure and protected at all times.
9. Data Security
We take the security of your personal data very seriously and implement industry-standard technical, administrative and organisational measures to protect it against unauthorised access, loss, disclosure, alteration, or destruction. These measures include, but are not limited to:
- Encrypted storage and backups to safeguard data both at rest and in transit;
- Role-based access controls ensuring that only authorised personnel can access personal data necessary for their duties;
- Secure cloud-based virtual classroom platformand IT systems that meet recognised security standards
- Regular security monitoring, testing and updates to prevent vulnerabilities and maintain data integrity
- Employee training and awareness programs to ensure all staff understand their responsibilities in protecting personal information
10. Cookies and Tracking
We use cookies and similar technologies on our website to improve your browsing experience, provide our Services and analyse website usage.
We use cookies and similar technologies across our digital platforms—including our main website (built on WordPress), our online shop (powered by WooCommerce), and our Virtual classroom platform(Zoom)—to provide our Services, improve your experience, and analyze usage.
What are Cookies?
Cookies are small text files that are placed on your computer, smartphone or other device when you access our website, to store information if your browser allows it. Each cookie is unique to your web browser. Cookies enable a site to remember bits of information between pages or visits. Cookies may be:
– First-party cookies: set directly by us
– Third-party cookies: set by trusted partners, such as analytics or advertising providers How We Use Cookies
Our use of cookies varies across our platforms:
- On our Main Website (WordPress):
o Essential cookies are used for basic operations like navigation and security. o Analytics cookies (with your consent) help us collect anonymous data on website usage to improve our services.
o Functionality cookies (with your consent) remember your preferences to enhance your browsing experience.
- In our Online Shop (WooCommerce):
o Essential cookies are necessary for the shopping cart and checkout process to work. For example, they keep track of the courses you have added to your cart.
- On our Virtual Classroom Platform (Zoom):
o Essential cookies for session management, security, and login authentication (e.g., to keep a meeting host or participant signed in).
o Functional cookies to remember user preferences, like language or meeting view options.
o Analytics cookies for product usage analytics, performance metrics, and service improvement (often through tools like Google Analytics).
Third-party Cookies
Some cookies are placed by trusted third-party providers to perform specific functions. • Google Analytics: We use this service on our main website to analyze traffic and user behavior.
- Revolut (Payment Gateway): When you make a payment through our WooCommerce shop, you will be redirected to Revolut. Revolut uses its own essential cookies to securely process your transaction.
We require that all third parties comply with GDPR and respect your privacy.
Managing and Withdrawing Consent
Under GDPR, you have the right to give, manage, or withdraw consent at any time. You can:
- Use our cookie banner or website settings to manage your preferences
- Adjust your browser settings to block or delete cookies
- Control third-party cookies through browser or platform settings.
Please note that disabling certain cookies may affect the website’s functionality or your access to certain features.
11. Your Rights
Under the GDPR, you have certain rights regarding your personal data. These rights include:
- Right of Access – You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
- Right to Rectification – You may request that any inaccurate or incomplete personal data be corrected
- Right to Erasure (“Right to be Forgotten”) – You can request the deletion of your personal data where permitted by law.
- Restrict to Restrict Processing – You may request that we limit the processing of your personal data in certain circumstances.
- Right to Object – You can object to the processing of your personal data on grounds relating to your particular situation, including for direct marketing purposes.
- Right to withdraw consent – Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint – If you believe your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta (https://idpc.org.mt)
To exercise any of these rights, please contact us using the contact details provided in the Contact Us section. We will respond to your request in accordance with applicable legal requirements.
12. Changes to the Privacy Policy
We may update this Policy from time to time to reflect the changes in our practices, legal obligations, or Services. When we make updates:
- We will revise the “Last Updated” data at the top of this Policy
- Significant changes that materially affect how your personal data is processed will be communicated to you through appropriate channels, such as email notifications or announcements on our Website.
- We encourage you to review this Policy periodically to stay informed about how we protect your data.
13. Contact Us
If you have any questions, concerns, or requests regarding this Policy or the way we process your personal data, you can contact us using the details below:
Email: info@lingua-learn.mt
WhatsApp: +356 7712 6492
Address: Sterling Building, Green Co-Space Floor 2 Office 235, Triq Enrico Mizzo, Ta Xbiex, XBX 1453, Malta
