The Privacy Policy describes how we process information about you, including personal data and cookies.


1. General Information

  1. This policy applies to the website operating at: myenglishstory.com
  2. The website operator and Data Controller is: Nursuraya binti Mohd Fadzil 24 JALAN BELANGKAS DUA, KAMPUNG PANDAN 55100 WP KUALA LUMPUR
  3. Operator's contact email address: info@myenglishstory.com
  4. The Operator is the Controller of your personal data voluntarily submitted to the Website.
  5. The Website uses personal data for the following purposes:
    • Operating online chat
    • Handling form inquiries
    • Delivering ordered services
    • Presenting offers or information
  6. The Website collects information about users and their behavior in the following ways:
    1. Through data voluntarily entered in forms, which is then stored in the Operator's systems.
    2. Through cookie files stored on end devices.

2. Selected Data Protection Methods Used by the Operator

  1. Login and personal data entry points are protected by transmission layer security (SSL certificate). This ensures that personal and login data entered on the site are encrypted on the user's computer and can only be read on the destination server.
  2. Personal data stored in the database is encrypted so that only the Operator with the key can read it. This protects the data in case of database theft from the server.
  3. User passwords are stored in hashed form. The hashing function works one-way - it cannot be reversed, which is the current standard for storing user passwords.
  4. The Operator periodically changes administrative passwords.
  5. The Operator regularly performs data backups for protection.
  6. An important element of data protection is regular updates of all software used by the Operator to process personal data, particularly regular updates of programming components.

3. Hosting

  1. The Website is hosted (technically maintained) on seohost.pl servers.

4. Your Rights and Additional Information on Data Usage

  1. In certain situations, the Controller may transfer your personal data to other recipients if necessary to perform a contract with you or fulfill the Controller's obligations. This applies to the following groups of recipients:
    • hosting company under data processing agreement
    • postal operators
    • banks
    • payment operators
    • online chat solution operators
    • authorized employees and collaborators who use data to achieve the website's purpose
  2. Your personal data will be processed by the Controller no longer than necessary to perform related activities specified by separate regulations (e.g., accounting). For marketing data, processing will not exceed 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to processing indicated in point 3.3 c) regarding personal data processing for legitimate interests pursued by the Controller, including profiling, although this right cannot be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms, particularly for establishing, exercising or defending legal claims.
  5. You can lodge a complaint against the Controller's actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary but necessary to use the Website.
  7. Automated decision-making, including profiling, may be applied to you to provide services under the contract and for the Controller's direct marketing purposes.
  8. Personal data is not transferred to third countries as defined in data protection regulations. This means we don't send it outside the European Union.

5. Information in Forms

  1. The Website collects information voluntarily provided by users, including personal data if submitted.
  2. The Website may record connection parameters (timestamp, IP address).
  3. In some cases, the Website may save information facilitating linking form data with the email address of the user completing the form. In such cases, the user's email address appears within the URL of the page containing the form.
  4. Data provided in forms is processed for purposes resulting from the specific form's function, such as handling service requests or business contact, service registration, etc. Each form's context and description clearly indicates its purpose.

6. Administrator Logs

  1. User behavior information on the website may be logged. This data is used for website administration.

7. Important Marketing Techniques

  1. The Operator uses statistical analysis of site traffic through Google Analytics (Google Inc. based in USA). The Operator doesn't transfer personal data to this service provider, only anonymized information. The service relies on cookies on the user's end device. Regarding user preferences collected by Google's advertising network, users can view and edit cookie-based information using: https://www.google.com/ads/preferences/

8. Cookie Information

  1. The Website uses cookies.
  2. Cookies are computer data, particularly text files, stored on the Website User's end device and intended for use with the Website's pages. Cookies typically include the website name they come from, storage duration on the end device, and a unique number.
  3. The Website operator is the entity placing cookies on the Website User's end device and accessing them.
  4. Cookies are used for:
    1. maintaining Website User sessions (after login), so users don't need to re-enter login and password on each subpage;
    2. achieving purposes described in the "Important Marketing Techniques" section above;
  5. The Website uses two main types of cookies: "session" cookies and "persistent" cookies. "Session" cookies are temporary files stored on the User's end device until logging out, leaving the website, or disabling software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in cookie parameters or until deleted by the User.
  6. Web browsing software (web browser) usually allows cookie storage on the User's end device by default. Website Users can change these settings. Web browsers allow cookie deletion or automatic blocking. Detailed information is available in the browser's help or documentation.
  7. Cookie restrictions may affect some functionalities available on the Website.
  8. Cookies placed on the Website User's end device may also be used by entities cooperating with the Website operator, particularly: Google (Google Inc. based in USA), Facebook (Facebook Inc. based in USA), Twitter (Twitter Inc. based in USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

  1. If users don't want to receive cookies, they can change browser settings. We note that disabling cookies necessary for authentication, security, and user preferences may make website usage difficult or impossible in extreme cases.
  2. To manage cookie settings, select your web browser from the list below and follow the instructions:

    Mobile devices: