Effective Date: September 16, 2026
1. Introduction and Company Information
Luna Spanish Learning Inc. (“Luna Spanish Learning Inc.”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information we collect, use, disclose, and retain in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy legislation.
This Privacy Policy explains how Luna Spanish Learning Inc. handles personal information in connection with our Spanish-learning services, including online lessons, courses, educational content, assessments, customer support, newsletters, and related communications.
Contact details:
Luna Spanish Learning Inc.
412 Front Street East, Suite 206
Toronto, ON M5A 1H3
Canada
Email: [email protected]
Phone: +1 (416) 789-4625
2. Data Collection and Processing
We may collect personal information directly from you, automatically when you use our website or services, and from certain third parties where permitted by law.
The types of personal information we may collect include:
- Identity and contact information: name, email address, phone number, mailing address, and account details.
- Account and profile information: login credentials, language level, course preferences, learning goals, and profile settings.
- Educational and service information: lesson participation, progress records, assessments, feedback, recordings of sessions where applicable and disclosed, and communication history.
- Payment information: billing details, transaction records, and limited payment data processed by third-party payment providers. We do not intentionally store full payment card details unless necessary and securely handled by our providers.
- Technical and usage information: IP address, browser type, device identifiers, operating system, log data, pages viewed, session activity, and cookies or similar technologies.
- Marketing preferences: subscription choices, communication preferences, and responses to promotional materials.
We collect personal information only to the extent reasonably necessary for the purposes identified in this Privacy Policy or otherwise permitted or required by law.
3. Purpose of Data Processing
We use personal information for the following purposes:
- to provide, administer, and improve our Spanish-learning services;
- to create and manage user accounts and registrations;
- to schedule and deliver lessons, tutoring, assessments, and related support;
- to personalize learning experiences and track progress;
- to process payments, invoices, refunds, and subscription management;
- to communicate with you regarding your account, services, updates, and support requests;
- to send marketing communications where permitted and subject to your preferences;
- to analyze service performance, usage, and trends to improve our offerings;
- to maintain security, prevent fraud, and detect unauthorized activity;
- to comply with legal, regulatory, tax, accounting, and recordkeeping obligations; and
- to enforce our terms, policies, and contractual rights.
4. Legal Basis for Processing
Under Canadian privacy law, we generally collect, use, and disclose personal information with your knowledge and consent, unless otherwise permitted or required by law. Depending on the circumstances, our processing may be based on one or more of the following:
- Consent: where you have given express or implied consent for specific purposes.
- Contractual necessity: where processing is necessary to provide the services you requested or to perform our agreement with you.
- Legitimate interests / reasonable purposes: where processing is necessary to operate and secure our business, provided such processing is appropriate and permitted by applicable law.
- Legal or regulatory obligations: where processing is required to comply with applicable laws, court orders, regulatory requirements, or lawful requests.
Where required by law, we will obtain your express consent before collecting, using, or disclosing personal information for certain purposes, including for marketing communications or the use of specific cookies and similar technologies.
5. Data Sharing and Third Parties
We may share personal information with third parties only as necessary and in accordance with applicable law. These third parties may include:
- Service providers: vendors that support hosting, cloud infrastructure, analytics, email delivery, customer support, lesson platforms, scheduling, and IT/security services.
- Payment processors: third-party payment services used to process transactions securely.
- Professional advisors: lawyers, accountants, auditors, insurers, and similar advisors bound by confidentiality obligations.
- Authorities and regulators: government bodies, law enforcement, courts, or other parties where disclosure is required or permitted by law.
- Business transaction parties: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable legal protections.
We require our service providers to handle personal information in a manner consistent with applicable privacy obligations and to use it only for the services they provide to us.
6. Data Transfer to Third Countries
Some of our service providers or technology platforms may process or store personal information outside of Canada, including in other provinces, the United States, or other foreign jurisdictions.
When your personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions and may be accessible to foreign courts, law enforcement, or regulatory authorities. We take reasonable steps to ensure appropriate contractual, technical, and organizational safeguards are in place to protect personal information transferred internationally.
By using our services or providing us with personal information, you acknowledge that your information may be processed outside of Canada as described in this Policy, subject to applicable legal requirements.
7. Storage Duration
We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal, accounting, tax, and reporting obligations, to resolve disputes, and to enforce our agreements.
The retention period may vary depending on:
- the nature and sensitivity of the information;
- the purpose for which it was collected;
- legal, regulatory, or contractual requirements;
- whether a matter is subject to a dispute, investigation, or audit; and
- operational and security requirements.
When personal information is no longer required, we will delete, destroy, anonymize, or securely de-identify it in accordance with our retention practices and applicable law.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal information:
- Access: to request confirmation of whether we hold personal information about you and to receive access to that information.
- Rectification: to request correction of inaccurate, incomplete, or outdated personal information.
- Erasure: to request deletion of personal information where permitted or required by law.
- Restriction: to request limitations on certain processing in appropriate circumstances.
- Data portability: to request a copy of certain information in a structured, commonly used, machine-readable format where applicable.
- Objection: to object to certain processing, including where processing is based on legitimate interests or for direct marketing, subject to legal limitations.
To exercise any of these rights, please contact us using the details in the “Contact Information” section below. We may need to verify your identity before responding to your request. We will respond within the time required by applicable law or, if no specific period applies, within a reasonable time.
9. Withdrawal of Consent
Where our processing relies on your consent, you may withdraw that consent at any time, subject to legal or contractual restrictions and reasonable notice.
Please note that withdrawing consent may affect our ability to provide certain services or features. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You may withdraw consent by contacting us at [email protected] or by using any unsubscribe or account preference mechanisms we make available.
10. Right to Complain
If you have concerns about our privacy practices, we encourage you to contact us first so that we can address your concerns promptly.
You may also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or with a provincial privacy regulator, depending on the circumstances and applicable law.
Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca/
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, and misuse.
These measures may include:
- access controls and role-based permissions;
- encryption in transit and, where appropriate, at rest;
- secure hosting and network protections;
- staff confidentiality obligations and privacy training;
- monitoring and logging of system activity; and
- procedures for managing privacy incidents and security breaches.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Contact Information
If you have any questions, requests, or concerns about this Privacy Policy or our handling of personal information, please contact:
Luna Spanish Learning Inc.
412 Front Street East, Suite 206
Toronto, ON M5A 1H3
Canada
Email: [email protected]
Phone: +1 (416) 789-4625
We will make reasonable efforts to respond to privacy-related inquiries in a timely manner.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or other operational reasons. Any revised Privacy Policy will be posted on our website with an updated effective date.
Where required by law, we will notify you of material changes by email, website notice, or another appropriate means before the changes take effect. Your continued use of our services after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms to the extent permitted by law.
Last updated: September 16, 2026