Spanish Decoded
Last updated: 11 September 2026
This Privacy Notice explains how Spanish Decoded collects, uses and protects personal information in connection with enquiries, taster sessions, adult courses including Foundations and Extension, and related communications. Spanish Playgroup involves additional information about children and families and has additional privacy requirements.
Spanish Decoded is run by Flying Duck Studio Lab in West Yorkshire, UK.
For questions about this notice or your personal information, contact:
Email: contact@flyingduckstudiolab.co.uk
Phone: 07517 060213
For the purposes of UK data protection law, Spanish Decoded/Flying Duck Studio Lab is responsible for deciding how personal information collected through Spanish Decoded is used.
Depending on how you interact with Spanish Decoded, we may collect:
• your name, email address and phone number;
• information you provide when enquiring, booking or enrolling;
• the course, taster or event you are interested in or attending;
• information about your previous Spanish learning or learning goals;
• accessibility, learning or support information that you choose to share with us;
• booking and payment records. Full card details are not stored by Spanish Decoded where payment is handled by a third-party payment provider;
• communications between you and Spanish Decoded;
• attendance and relevant administrative records;
• feedback you choose to provide;
• your preferences regarding optional marketing communications; and
• photographs, video or recordings where these are taken lawfully and, where required, with your consent.
Please only provide health, accessibility or other sensitive information where you feel it is relevant to supporting your participation.
We may use personal information to:
• respond to enquiries;
• manage taster bookings, enrolments, payments and attendance;
• provide the course or service you have requested;
• communicate with you about dates, venues, changes and other course administration;
• provide course resources and learning information;
• understand participants’ previous experience and support learning appropriately;
• make reasonable accessibility or learning adjustments where requested;
• maintain appropriate financial and business records;
• improve Spanish Decoded through feedback and evaluation; and
• send optional marketing communications where we have an appropriate lawful basis to do so.
Under UK data protection law, we rely on different lawful bases depending on the information and purpose.
Contract: where processing is necessary to take steps at your request before you book or to provide a course or service you have booked.
Legitimate interests: where reasonably necessary to operate, administer, evaluate and improve Spanish Decoded, provided those interests are not overridden by your rights and interests.
Legal obligation: where information must be retained or used to comply with legal, tax, accounting or other regulatory requirements.
Consent: where we ask for your consent, for example for certain marketing communications or particular uses of photographs or video. You can withdraw consent at any time.
Special category information: if you voluntarily provide health or other special category information so that we can support accessibility or safe participation, we will only use it where there is an appropriate lawful condition under data protection law and will limit its use to what is necessary.
Messages needed to administer a course you have enquired about or booked are service communications and are not treated as optional marketing.
Where required, promotional emails about future courses, events or Spanish Decoded news will only be sent with an appropriate lawful basis. If you have consented to marketing, you can withdraw that consent or unsubscribe at any time. Choosing not to receive marketing does not affect your enrolment or participation in a course.
We take reasonable steps to keep personal information secure and limit access to information that is needed to operate Spanish Decoded.
Information may be held using trusted digital services used to operate the business, such as email, cloud document storage, booking, payment, website, event and customer-management services. These providers may process information on our behalf under their own security and data-protection arrangements.
Some service providers may process or store data outside the UK. Where this occurs, we rely on the safeguards required by UK data protection law where applicable.
We do not sell your personal information.
Where necessary, limited information may be shared with service providers that help us operate Spanish Decoded, for example providers used for:
• email and cloud storage;
• booking and event registration;
• payment processing and accounting;
• website hosting and forms;
• customer relationship management; and
• other administrative technology used to deliver the service.
We may also disclose information where required by law, to professional advisers or insurers where reasonably necessary, or to protect the rights, safety or legitimate interests of Spanish Decoded or others.
Service providers are not permitted by us to use your information for their own unrelated marketing simply because they process it on our behalf.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, insurance or dispute-resolution requirements.
Enrolment and course administration information may normally be kept while you are actively participating and for a reasonable period afterwards so that we can manage queries, returning learners and business records. Financial records may need to be retained for longer where required by law.
Information used solely on the basis of consent will be reviewed when consent is withdrawn, although withdrawal does not make previous lawful use of the information unlawful.
We periodically review information and delete or anonymise it when it is no longer reasonably required.
Spanish Decoded will not use identifiable photographs, video or recordings of participants for public marketing without an appropriate lawful basis and, where required, consent.
If consent is used, you can withdraw it for future use at any time. We will take reasonable steps regarding material under our control, although it may not always be possible to recall material that has already been printed, distributed or legitimately published.
Depending on the circumstances, UK data protection law gives you rights including the right to:
• ask for access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information in certain circumstances;
• ask us to restrict how information is used in certain circumstances;
• object to certain processing based on legitimate interests;
• receive certain information in a portable format where applicable; and
• withdraw consent at any time where processing is based on consent.
These rights are not absolute and may depend on the circumstances and the lawful basis for processing.
To exercise a right or ask a question about your information, contact us using the details above.
If you are unhappy with how we handle your personal information, you also have the right to complain to the UK Information Commissioner’s Office (ICO).
Spanish Decoded may link to third-party services such as booking, payment, event or social-media platforms. Those organisations may process information as separate controllers under their own privacy notices. You should review their privacy information where relevant.
The Spanish Decoded website may use cookies or similar technologies that are necessary for the website to function or, where enabled, to understand website use and improve the service. Where UK law requires consent for non-essential cookies or tracking technologies, these should only be used after the appropriate consent has been obtained.
More detailed cookie information may be provided through the website’s cookie controls or a separate cookie notice where applicable.
We may update this notice as Spanish Decoded develops, the services we use change or legal requirements change. The current version should be made available through the Spanish Decoded website.
Spanish Decoded
Hebden Bridge, West Yorkshire
Email: contact@flyingduckstudiolab.co.uk
Phone: 07517 060213
Spanish Decoded is run by Flying Duck Studio Lab.
Spanish Decoded
Hebden Bridge
Calderdale
© 2026 Flying Duck Studio Lab
All rights reserved