Privacy Policy

Last updated: March 2026

Starbrown Kft. ("we", "us", "our") operates EnglishCEFR.com. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

Starbrown Kft., Hungary, 9730, Kőszeg, Festetich utca 15. For data protection inquiries, contact hello@englishcefr.com.

2. Data We Collect

Personal data: first name, last name, email address (provided by you during the assessment).
Assessment data: quiz responses, CEFR level result, score percentage.
Payment data: processed by Stripe — we do not store credit card details.
Technical data: IP address, browser type, device information, cookies.

3. Purpose of Processing

To deliver the assessment service and generate your certificate.
To send your results and certificate via email.
To process payments via Stripe.
To analyze website usage and improve our service.
To run advertising campaigns via Meta (Facebook) Pixel.

4. Legal Basis

Contract performance — delivering the service you purchased.
Legitimate interest — analytics, service improvement.
Consent — cookies, marketing tracking via Facebook Pixel.

5. Data Sharing

We share data with the following third-party processors:

Stripe — payment processing
Resend — email delivery
Supabase — data storage
Meta/Facebook — advertising pixel and Conversions API (hashed email only)

We do not sell your personal data to third parties.

6. Data Retention

Assessment data and certificates are retained for the duration of the verification period selected (2 years or lifetime). If no verification was purchased, data is retained for 2 years. You may request deletion at any time by contacting us.

7. Your Rights (GDPR)

You have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Restrict processing
Data portability
Object to processing
Withdraw consent

To exercise these rights, contact hello@englishcefr.com. We will respond within 30 days.

8. International Transfers

Your data may be processed in the United States (Supabase, Stripe, Resend infrastructure). These transfers are protected by Standard Contractual Clauses.

9. Cookies

See our Cookie Policy for details on cookies used on this website.

10. Changes

We may update this policy. Changes will be posted on this page with an updated date.

11. Contact

hello@englishcefr.com