Privacy & Cookie Policy

Travelling Languages — Think Ahead Ltd T/A Travelling Languages — Last updated: March 2026

This Privacy & Cookie Policy explains what personal data we collect when you use this website, how we use it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

1. Who We Are

This website (www.tl.ie) is operated by Think Ahead Ltd T/A Travelling Languages, a private limited company registered in Ireland (Company Registration Number: [INSERT COMPANY REGISTRATION NUMBER]), trading as Travelling Languages.

We are an English language education provider based in Dublin, Ireland.

We are the Data Controller for all personal data collected through this website. Our Data Protection Officer is Salvatore Fanara, contactable at sf@tl.ie.

2. What Personal Data We Collect and Why

2.1 Enquiry and Contact Forms

When you submit an enquiry or contact form on our website, we collect your name, email address, phone number (if provided), your message, and your nationality or country of residence (if relevant to your enquiry). We use this to respond to your enquiry and follow up with information about our programmes. Your enquiry data may also be entered into our marketing platform (Mautic) to manage follow-up communications.

2.2 Course Purchases

When you purchase a course through our website, we collect your name and billing address, email address, phone number, payment information, and your order details. Payment card details are processed directly by PayPal and are never stored on our website or servers. Order data is stored in WooCommerce and transferred to our internal management system (MYTL) to process your enrolment.

2.3 Marketing Communications

If you submit an enquiry or sign up for information, your contact details may be added to our self-hosted marketing platform (Mautic, hosted on a dedicated EU server). Initial enquiries may also receive an initial response from an AI-assisted service (Buongiorno Marya, operated by Buongiorno Docklands Ltd on EU infrastructure). We use Mautic to send follow-up information, newsletters (where you have consented), and to manage unsubscribe requests. You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing sf@tl.ie.

2.4 Automatic Data Collection

When you visit our website, certain data is collected automatically — including your IP address, browser type, operating system, pages visited, time spent on pages, and referring website. See section 4 (Cookies) for full details.

2.5 Summary table

3. Legal Bases for Processing

Under GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:

4. Cookies

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Some are essential for the website to function; others analyse how visitors use the site or deliver targeted advertising. Under Irish and EU law (the ePrivacy Regulations), we must obtain your consent before placing non-essential cookies on your device.

4.2 Cookies We Use

4.3 Managing Cookies

You can control and manage cookies in the following ways:

• Cookie consent banner: when you first visit our website, you will be asked for your consent for non-essential cookies. You can change your preferences at any time by clicking the cookie settings link in the footer of our website.
• Browser settings: most browsers allow you to refuse or delete cookies. Disabling cookies may affect site functionality. For guidance, visit www.aboutcookies.org.
• Google Analytics opt-out: install the opt-out add-on at tools.google.com/dlpage/gaoptout.
• Facebook ad preferences: manage at facebook.com/ads/preferences.

5. Third Parties We Share Data With

We do not sell your personal data. We share data with the following third parties only where necessary to operate our website and deliver our services:

6. International Data Transfers

Our own systems — including our website server, Matomo analytics, and Mautic marketing platform — are hosted on servers within the European Union (Hetzner, Germany). Personal data you submit to us is stored and processed within the EU.

Some third-party services we use may transfer data outside the EEA:

• Google (Analytics, Fonts, Maps, YouTube) may transfer data to the United States, relying on Standard Contractual Clauses approved by the European Commission.
• Meta (Facebook Pixel) may transfer data internationally. Meta Ireland acts as the EU data controller and relies on Standard Contractual Clauses for transfers to the US.
• PayPal may process data in the United States, relying on Standard Contractual Clauses and applicable transfer frameworks.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

7. How Long We Keep Your Data

When data reaches the end of its retention period it is deleted or anonymised. You may also request earlier deletion — see section 8.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

To exercise any of these rights, please contact us at sf@tl.ie. We will respond within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

9. How We Protect Your Data

Our security measures include:

• All data transmitted between your browser and our website is encrypted using TLS (HTTPS). Plain HTTP connections are redirected to HTTPS.
• Our website and servers are hosted with Hetzner (EU), which operates ISO 27001-certified data centres with physical access controls.
• Access to our website’s administrative backend is restricted to authorised staff only, protected by strong passwords.
• Our internal systems are protected by firewall controls, SSH key authentication, and mandatory two-factor authentication for all staff users.
• We do not store payment card details on our systems. All payment processing is handled by PayPal.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify affected individuals without undue delay.

10. Children’s Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe a child under 16 has provided us with personal data without appropriate consent, please contact us at sf@tl.ie and we will delete the data promptly.

Adults enrolling on behalf of a minor student should contact us directly rather than completing an online form.

11. Links to Other Websites

Our website may contain links to third-party websites. This privacy policy applies only to www.tl.ie. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies before providing any personal data.

12. Changes to This Policy

We review this Privacy & Cookie Policy at least annually and whenever we make significant changes to how we collect or process personal data. The current version and its effective date are shown at the top of this page. Where changes are material, we will take reasonable steps to bring them to your attention — for example by displaying a notice on our website or, where we hold your email address, by sending you a notification.

13. Contact Us and How to Complain

13.1 Contact

If you have any questions about this policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please contact:

13.2 Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish supervisory authority:

Travelling Languages — Think Ahead Ltd, Docklands Innovation Park, Unit U14, 128–130 East Wall Road, Dublin, D03 A0X4 — Version 1.0 — March 2026