Privacy Policy

1. Who we are

Spanish for Health is a brand shared by two Spanish teachers who work as individuals (natural persons), not as an incorporated company. The law requires us to identify who is responsible for your data, so here are their names:

• Edna Rocío Acosta Rodríguez
• Catalina Ospina Higuera

City and country: Bogotá, Colombia.

Contact emails: profesoraedna@spanishforhealth.com · profesoracatalina@spanishforhealth.com

Phone / WhatsApp: +57 321 340 5470

The two of us are joint data controllers: we both have access to the information of all students, although day to day each student deals mainly with the teacher who teaches them. Either of us can handle a request about your data.

In the rest of this document we refer to the two of us as “the joint controllers of Spanish for Health”.

This policy is governed by Colombia’s Statutory Law 1581 of 2012 and Decree 1074 of 2015.

2. What data we collect

We do not ask our students for their identity document number. To identify who signed a contract, the name, email address and payment record are enough.

We do not ask for health data or patient information, providing it is strictly prohibited (section 5), and if any were to appear we delete it and notify the student.

3. What we use this data for

1. Handling and scheduling free assessment consultations, and replying to anyone who writes to us asking about the courses.
2. Scheduling, preparing and teaching classes.
3. Correcting assignments, giving feedback and tracking progress.
4. Communicating with the student by email or WhatsApp about their course.
5. Charging for the course and issuing the invoice of the teacher who provides it, under the trade name Spanish for Health.
6. Handling inquiries, complaints and claims.
7. Publishing testimonials, reviews and class clips, only with express and separate authorization (section 4).
8. Sending updates about our courses, only to those who expressly agree and with an unsubscribe option in every message.
9. Using class recordings for internal training between the two teachers (section 4).

We do not use the data for anything other than the above, nor do we sell it or hand it over to third parties for commercial purposes.

4. Class recordings

All classes are recorded. Recording is part of the service, is a condition for accessing the course and cannot be turned off: it is what allows us to deliver the session to anyone who could not attend, what protects both parties in the event of a claim, and what we use to train each other. We announce it at the start of every session.

Anyone who does not wish to appear can keep their camera and microphone off and take part through the chat.

The student receives the full recording of the session within the following 48 hours and can watch it until it is deleted.

Recordings are used for four things, each with its own retention period:

Authorization to publish

Authorization to publish is separate from authorization to record. It is requested in writing and separately, it is voluntary, it can be revoked at any time by writing to our email addresses, and it does not affect access to classes, the price or the treatment received.

It covers the publication of image, voice, name and clips of recorded classes on our social media and our website.

A clip from a group class is only published if everyone who appears in it has authorized it. If someone has not, the clip is edited so they do not appear, or it is not published.

When authorization is revoked we remove the content from our channels; we cannot guarantee the removal of copies that third parties downloaded or shared beforehand.

5. Artificial intelligence and patient data

The student portal uses Claude, by Anthropic (United States), to give feedback on written texts. The texts the student writes in those exercises are sent to that service so they can be corrected.

For that reason, and as a general rule of the course, including information about real patients is strictly prohibited in any text, exercise, conversation or recorded class. All the clinical cases we use are fictional or anonymized. We remind students of this at the start of each course and in the portal itself.

6. Who we share data with

International transfer. All of these providers are outside Colombia, most of them in the United States. By accepting this policy, the data subject expressly authorizes the international transfer and transmission of their data to those providers, under the terms of Article 26 and following of Law 1581 of 2012.

7. Cookies and website statistics

The website uses Google Analytics to know how many people visit it and which pages they read. This tool places cookies in the browser and collects usage data in aggregate form.

They can be disabled by deleting or blocking cookies in the browser settings, or by installing the Google Analytics opt-out add-on.

8. How long we keep the data

We review and purge these files every six months.

9. Rights of the data subject

As the owner of your data, you have the right to (Article 8 of Law 1581 of 2012):

1. Know, update and rectify your personal data.
2. Request proof of the authorization you gave us.
3. Be informed, upon request, of how we have used your data.
4. Revoke the authorization and request the deletion of your data, where no legal or contractual duty requires us to keep it.
5. Access your personal data free of charge.
6. File complaints with the Superintendence of Industry and Commerce (SIC) of Colombia for breaches of the law.

10. How to exercise these rights

By writing to profesoraedna@spanishforhealth.com or profesoracatalina@spanishforhealth.com, stating:

• Your full name and the email address you registered with.
• What you are requesting (to consult, correct, update, delete or revoke the authorization).
• A way to contact you with our reply.

You can also write to us on WhatsApp at the number in section 1. In that case we ask you to repeat the request by email, because the response deadlines set by law run from a date we must be able to prove, and an email leaves a record.

Response times, according to the law:

• Inquiries: 10 business days, extendable by 5 more business days, with notice of the reason.
• Claims: 15 business days, extendable by 8 more business days, with notice of the reason.

11. Minors

Our courses are aimed at adult healthcare professionals. We do not accept students under 18 or knowingly collect data from minors. If we find that we have received data from a minor, we delete it.

12. Security

Only the two joint controllers of Spanish for Health have access to student information. We keep it in a single shared repository, not in scattered personal files, and we keep two-step verification enabled on the domain and Google accounts.

No system is completely secure. We commit to applying reasonable measures and to notifying those affected if an incident were to put their data at risk.

13. Authorization

We collect authorization through a mandatory checkbox, with a link to this policy, in two forms:

• Registration form. Without that authorization we cannot enroll the student or provide the service.
• Free consultation form. Without that authorization we cannot schedule or hold the consultation. If the person does not enroll after the consultation, their data is kept for one year (section 8).

Authorization to publish image, voice, name and class clips is requested separately and is always voluntary (section 4).

14. Governing law

This policy is governed by Colombian law. Any dispute will be resolved before the courts of Colombia.

15. Changes to this policy

If we change anything substantial, we update the date in the header and notify active students by email before the change takes effect.