Privacy Policy

The Blueprint is operated by E.S. Language Services LLC. In this Privacy Policy, “I,” “me,” and “my” refer to E.S. Language Services LLC, trading as The Blueprint.

E.S. Language Services LLC, a limited liability company registered in Wyoming, United States, trading publicly as The Blueprint, operates this website and is the data controller for the information described in this policy.

For any question or request about your personal information — including asking to see it, correct it, or have it deleted — contact me at:

I collect only what a parent or guardian chooses to send me through the two forms on this website.

Student Learning Profile: your name, email address and phone / WhatsApp number; your child’s name, age, grade and school; the curriculum or education programme they follow; languages spoken at home; the areas of support you selected; and your written answers about what your child is finding challenging, what you would most like them to gain, and anything else you wanted me to know.

Contact form: your name, email address and the message you wrote.

Information about a student is provided by that student’s parent or legal guardian and is not collected directly from children.

I do not request payment card details or government identification numbers. Please avoid including medical, diagnostic, or other highly sensitive personal information in the website forms unless it is necessary for your enquiry.

Information submitted through the website is used to respond to your enquiry and, if I go on to work with you, to support your child’s learning: replying to you, understanding your child’s current level and needs, preparing and organising sessions, and keeping records of my work.

I do not use submissions for marketing, and the website has no mailing list, newsletter or promotional function.

Where European or UK data-protection law applies to you, I process information on these grounds:

• Taking steps at your request before entering into a service agreement — answering an enquiry and discussing whether the service is suitable.
• Performance of a contract — providing services to clients and administering that engagement.
• Legitimate interests — the practical administration of my practice, including internal records, safeguarding and handling disputes, and only where my interests are not overridden by yours.
• Legal obligations — accounting, tax and other records I am required to keep.

I do not sell, rent or trade personal information, and I do not share it with advertisers or data brokers. Submissions are handled only by the services that make this website and my inbox work:

• Resend — delivers each submission to me as an email.
• Google Gmail — where submissions are delivered to and stored in my business inbox.
• Lovable — hosts and serves the website. Like any web host it may record standard technical request data such as IP address; it does not hold your form answers as stored data.
• Google Fonts — serves the typefaces this site uses, which means a visitor’s IP address reaches Google when a page opens.
• WhatsApp (Meta) — the WhatsApp buttons are links only. Nothing from this website is passed to WhatsApp, and conversations there are covered by Meta’s terms, not this policy.

I may also disclose information where legally required, or to protect the safety of a student.

This website does not use analytics services, advertising trackers, marketing pixels or session-recording tools, and it does not set tracking cookies. Nothing here builds a behavioural profile of you or follows you across other websites. If a technical or functional cookie is ever introduced, this policy will be updated before it goes live.

The services named above are mostly based in the United States, so information you submit will usually be transferred to and processed in the United States.

For Resend, a GDPR Article 28 Data Processing Addendum is in force on my account, pre-signed by Resend and fully executed on sign-up, and that DPA incorporates Standard Contractual Clauses. Resend stores customer data in the United States.

Other service providers process information in accordance with their own privacy terms and applicable data-protection requirements.

• Prospective families who do not become clients: information submitted by prospective families who do not become clients will generally be deleted from my records within 12 months.
• Current and former clients: information relating to current or former clients may be retained for as long as reasonably necessary to provide services and meet legitimate business, accounting, or legal obligations. Once those reasons end, it is deleted.

Any copy held temporarily by the email delivery service falls away under its own retention limits, so deleting a submission from my inbox removes it from my records.

Forms are submitted over an encrypted connection, the credentials that let the website send email are stored privately on the server rather than in public code, and access to my inbox and website settings is limited to me. No method of transmission is completely without risk, which is another reason to keep highly sensitive material out of the forms.

This website is directed at parents and guardians, not at children. Information about a student is supplied by an adult, is used only in connection with that student’s education, and is never used for marketing or shared with advertisers. A parent or guardian may ask at any time to review, correct or delete information about their child, including after an initial enquiry has ended.

Depending on where you live, you may be able to:

• access what I hold about you and receive a copy;
• correct anything inaccurate;
• ask for deletion, subject to the retention reasons in section 7 and any legal duty to keep records;
• restrict or object to how information is used;
• receive it in a usable format to move elsewhere;
• ask me to stop contacting you, which I will action immediately.

Families in the EU, EEA and United Kingdom have these rights under the EU and UK GDPR. If equivalent rights apply where you live, tell me and I will honour them where they apply to me.

Because this website keeps no database, I will handle requests by reviewing my inbox and other relevant business records. Where a request concerns a child’s information, I may first confirm that you are the parent or guardian.

If you are in the EU, EEA or UK and are unhappy with how a request has been handled, you may complain to your data-protection supervisory authority.

If this policy changes, the revised version will be posted on this page with a new effective date, and any material change will be highlighted rather than buried.