Privacy Policy

Language Travel UK is the data controller for personal data collected through this platform. Our contact address is admin@languagetravel.co.uk.

We collect the following categories of personal data:

• Account data: name, email address, role (guest/host)
• Booking data: nationality, dates, student age and gender, English level, special requirements
• Identity verification data: government-issued ID documents, selfies with ID, proof of address
• DBS certificate data (hosts only): certificate number, issue and expiry dates
• Payment data: transaction records (card details are processed by Stripe and never stored by us)
• Communications: messages sent via the platform messaging system
• Usage data: pages visited, search queries, device and browser information

Where bookings involve minors, we may collect data about children including name, age, gender, nationality, and dietary or medical requirements. This data is collected with the explicit consent of the parent or guardian and is used solely to facilitate the placement and ensure the child's welfare during their stay.

DBS certificate data constitutes criminal records data under UK GDPR Article 10. We process this data under our legitimate interests in safeguarding and child protection.

We rely on the following legal bases under UK GDPR:

• Contract: to process bookings, manage accounts, and facilitate payments
• Legal obligation: to conduct identity and safeguarding checks
• Legitimate interests: to improve the platform, prevent fraud, and maintain platform security
• Consent: for marketing communications (you may withdraw consent at any time)

We use your personal data to:

• Create and manage your account
• Process and confirm bookings
• Verify host identity and safeguarding compliance
• Facilitate communication between guests and hosts
• Send booking confirmations, updates, and support communications
• Comply with legal and regulatory obligations
• Improve the platform through analytics

We share personal data only where necessary:

• Stripe: for secure payment processing
• Resend: for transactional email delivery
• Hosts: guest booking details are shared with the relevant host upon booking confirmation
• Guests: host contact details are shared upon booking confirmation
• Law enforcement: where required by law or to protect the safety of individuals

We do not sell your personal data to third parties.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected:

• Account data: until account deletion + 12 months
• Booking records: 7 years (for tax and legal purposes)
• Identity verification documents: 3 years from last booking
• DBS records: until certificate expiry + 6 months
• Communications: 2 years

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (where no overriding legal obligation exists)
• Restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email admin@languagetravel.co.uk. We will respond within 30 days.

We implement appropriate technical and organisational security measures to protect your data against unauthorised access, loss, or disclosure. All data is encrypted in transit using TLS. Identity documents are stored in a private, access-controlled storage environment.

We use cookies and similar technologies. Please see our Cookie Policy for full details.

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as UK adequacy decisions or Standard Contractual Clauses).

If you believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We may update this policy from time to time. We will notify you of significant changes by email. The "last updated" date at the top of this page reflects the most recent revision.