Privacy policy

Last updated: 7 October 2026

1. Controller

The controller of your personal data is:

Sohaib Ali
Toruń, Poland
Email: team@starstuffacademy.com

For any privacy question or request, email team@starstuffacademy.com.

2. What data is processed and why

Data	Purpose	Legal basis (GDPR)
Booking details: name, email, time zone, level, what you want to work on, and your answers to booking questions	Arranging and delivering lessons	Contract performance — Art. 6(1)(b)
Payment data: amount, date, payment method type (card details are handled by Stripe only)	Taking payment, refunds, accounting and tax records	Contract performance and legal obligations — Art. 6(1)(b) and (c)
Emails you send me	Answering your questions	Contract performance or steps before a contract; legitimate interest — Art. 6(1)(b) and (f)
Aggregate, cookieless website statistics	Understanding which pages are useful	Legitimate interest — Art. 6(1)(f)
Technical logs (e.g. IP address, browser) kept by the hosting provider	Security and keeping the site running	Legitimate interest — Art. 6(1)(f)

This website has no user accounts and does not store student data itself.

3. Processors and recipients

Cloudflare — website hosting, cookieless web analytics and email forwarding. Cloudflare privacy policy.
Cal.com — lesson booking and scheduling. Cal.com privacy policy.
Stripe — payment processing. Stripe privacy policy.
The video-call provider used for a lesson, as named in your calendar invite.

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. How long data is kept

Booking and payment records: as long as needed to provide the service, and afterwards for as long as tax and accounting law requires.
Emails: up to 2 years after our last contact, unless they are needed longer (for example, for a legal claim).
Hosting logs and analytics: according to Cloudflare's retention settings.

5. Your rights

Under the GDPR you have the right to:

access your personal data and get a copy of it;
have inaccurate data corrected;
have your data erased;
restrict processing;
object to processing based on legitimate interest;
data portability.

To use any of these rights, email team@starstuffacademy.com. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or with the authority in your own EU country.

6. Children

Lessons for students under 18 are booked by a parent or guardian. This site does not knowingly collect personal data directly from children.

7. Cookies and local storage

This site uses no tracking cookies. If you use the light/dark theme switch, your choice is saved in your own browser's local storage and is never sent to me. The Cal.com booking widget loads only if you click to open it, and is then covered by Cal.com's privacy policy.

8. Changes

I may update this policy. The date at the top shows the latest version.