GDPR Information
Last Updated: September 22, 2026
1. Our Commitment to Data Protection
While Noble Fern operates primarily in Canada, we recognize that some students may be located in the European Economic Area. We commit to handling all personal data in accordance with data protection principles, including those outlined in the General Data Protection Regulation.
2. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: Processing necessary to provide language learning services you enrolled in
- Legitimate Interests: Improving our educational offerings and platform functionality
- Legal Obligation: Compliance with applicable laws and regulations
- Consent: Marketing communications and optional data uses, where explicitly provided
3. Data Subject Rights
Under data protection law, you have the following rights:
Right to Access
You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data in certain circumstances, subject to legal retention requirements.
Right to Restrict Processing
You may request that we limit how we use your personal data in specific situations.
Right to Data Portability
You may request to receive your personal data in a structured, commonly used format or request transfer to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
4. Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with the subject line "GDPR Request." We will respond within 30 days of receiving your request.
Please provide sufficient information to verify your identity and specify which right you wish to exercise. We may request additional information to confirm your identity before processing your request.
5. Data Protection Officer
For questions specifically related to data protection and GDPR compliance, you may contact our data protection contact at [email protected].
6. Data Processing Details
Categories of Personal Data:
- Identity data: name
- Contact data: email address
- Program data: selected language program, enrollment date
- Learning data: progress metrics, assignment submissions, instructor feedback
- Technical data: IP address, browser type, device information
Recipients of Personal Data:
- Language instructors providing teaching services
- Platform hosting and technical service providers
- Payment processors for enrollment fees
7. Data Retention Periods
- Enrollment information: Duration of program plus 3 years
- Learning progress data: 3 years after program completion
- Communication records: 2 years
- Technical logs: 12 months
8. International Data Transfers
Your data is primarily stored on servers in Canada. Some service providers may process data in other jurisdictions. When transferring data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
9. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
10. Right to Lodge a Complaint
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For EEA residents, this would be the data protection authority in your country of residence.
11. Contact Information
For GDPR-related inquiries or to exercise your rights:
Noble Fern
427 Wellington Street West, Suite 302
Toronto, ON M5V 1E7
Canada
Email: [email protected]