LFPDPPP · ARCO

Privacy Notice

Last updated: 2026-07-20

This notice explains what personal data KayLista Spanish Studio collects, why, who we share it with, and how you can exercise your rights.

Data controller

KayLista Spanish Studio, with address at Colonia Cinco de Diciembre, Puerto Vallarta, Jalisco, México, is responsible for the collection and use of your personal data, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

What data we collect

We collect the following personal data to provide our Spanish-teaching services:

  • Identity and contact: name, email, phone.
  • Emergency contact: name, phone, relationship.
  • Class data: level, preferences, schedule, enrollment and payment history.
  • Image and voice: class recordings and, only with your permission, marketing photos or video.

Purposes

Your data is used to manage your classes and enrollment, process tuition payments, communicate with you (WhatsApp, email), keep your class recordings and materials available, and comply with our legal obligations. We do not sell your data or share it for third-party commercial purposes.

Service providers

To operate, we rely on service providers who process data on our behalf: Supabase (database and authentication), Vercel (hosting), Vimeo (class recordings), Google (email/productivity), and Resend (transactional email). These providers process data only to deliver their service to us.

Your ARCO rights

You have the right to Access, Rectify, Cancel, or Object (ARCO) to the processing of your personal data, and to revoke your consent at any time.

To exercise these rights, email kaylista@kaylista.com with your request and a way to verify your identity. We will respond within the terms set by the LFPDPPP.

Cancellation requests while enrolled

If you request cancellation of your data while you are an active student, please note that a minimum set of data (contact information, class and payment records) is necessary for us to continue providing the service you’re enrolled in, and may be retained on that legal basis even if cancellation is requested. We will remove or anonymize any data that is not strictly necessary to maintain your enrollment (such as how you heard about us, referral information, or internal notes) and confirm in writing what was retained and why.

If you wish to fully cancel your data, we will first need to end your enrollment, after which the applicable data will be deleted or anonymized, except for records we are legally required to keep (such as invoices and payment records under Mexican tax law).

Data retention

We keep enrolled students’ data for as long as the relationship lasts and as required by law. Data of prospective students who never enroll is kept for up to 24 months and then deleted.

Changes to this notice

We may update this Privacy Notice. The current version is always available at this page, with its last-updated date shown above.