Privacy Policy

eLanguage Center (“eLanguage Center”, “we”, “us”) provides an online IELTS preparation platform. This Privacy Policy explains what personal data we collect, why we collect it, how long we keep it, who we share it with, and the rights you have. It is written to meet the EU and UK General Data Protection Regulations (GDPR), Australia’s Privacy Act 1988 and Australian Privacy Principles (APPs), India’s Digital Personal Data Protection Act 2023 (DPDP), Sri Lanka’s Personal Data Protection Act 2022, and the data protection laws of Singapore, Malaysia, Thailand, Indonesia, the Philippines and Vietnam.

1. Who is responsible for your data

eLanguage Center is operated by MustardLabs (ABN 91 930 042 126), a sole trader based in Australia. References to “eLanguage Center”, “we”, “us” and “our” mean that operator.

If you signed up for eLanguage Center yourself (an individual account), eLanguage Center is the data controller of your personal data.

If you access eLanguage Center through an organisation — a language school, migration agency, employer or institution that purchased seats — that organisation is the data controller and eLanguage Center acts as a data processoron its behalf. In that case your organisation’s own privacy notice also applies, and requests about your data may be routed through them. The terms governing that relationship are in our Data Processing Addendum.

2. What data we collect

• Account data— your name, email address, role, IELTS track preference, and (via our auth provider) sign-in credentials.
• Practice and performance data— your test attempts, answers, AI-generated band scores, and written feedback.
• Speaking recordings— audio of your responses during Speaking practice, and their transcripts. Voice recordings can identify you and are treated as sensitive data; we ask for your consent before recording.
• Usage and device data— pages viewed, features used, approximate location derived from IP, browser and device type. Non-essential analytics are only collected with your consent (see our Cookie Policy).
• Billing data— for organisations and individual subscribers, subscription status and payment metadata handled by our payment processor. We do not store full card numbers.

We do not knowingly collect more than we need. We store a coarse age band rather than your full date of birth, and a salted hash of your IP address rather than the address itself.

3. Why we use it and our legal basis

Where we rely on consent, you can withdraw it at any time without affecting prior processing. Where we rely on legitimate interests, we have balanced those against your rights and you may object.

4. AI processing

We use AI to generate practice tests, grade your answers, transcribe Speaking audio, and produce a conversational Speaking examiner. Grading and feedback are automated. These outcomes are practice estimates, not official IELTS results, and you can contact us if you believe a score is wrong. We send only the data needed for each task to our AI sub-processors, who are contractually barred from training their models on it.

5. How long we keep it

• Account data: for the life of your account, then deleted or anonymised.
• Speaking recordings: 90 days by default, after which they are automatically purged. Organisations may configure a different period.
• Practice and performance data: while your account is active, to show your progress.
• Billing records: as required by tax and accounting law.
• Consent and erasure records: retained as proof that we honoured your choices.

6. Who we share it with

We share data with the sub-processors that power the service — hosting, authentication, payments, AI, storage, email and analytics. Each is listed, with what they handle, on our Sub-processors page. We do not sell your personal data. We may disclose data where legally required.

7. International transfers

Your data is hosted in Sydney, Australia. If you are in the EEA, the UK, or another region with transfer rules, your data is transferred under appropriate safeguards — Standard Contractual Clauses (and the UK Addendum), or an adequacy decision where one applies. Some sub-processors may process data in other countries under the same safeguards. Contact us for a copy of the relevant safeguards.

8. Your rights

Depending on where you live, you have the right to:

• Access a copy of the data we hold about you.
• Portability — receive it in a machine-readable format.
• Rectification — correct inaccurate data.
• Erasure — have your data deleted (“right to be forgotten”).
• Restriction and objection to certain processing.
• Withdraw consent at any time.
• Complain to your local data protection authority.

Signed-in learners can exercise access, portability, rectification and erasure directly from their profile. You can also email privacy@elanguagecenter.com. We respond within the timeframe your law requires (one month under the GDPR). If your account is provided by an organisation, we may ask that organisation to confirm or fulfil the request.

9. Children and minors

Learners under the age of 18 may use eLanguage Center only with verifiable consent from a parent or guardian, as required by India’s DPDP Act and the GDPR. Where a learner indicates they are a minor, we collect a guardian’s email and require guardian consent before practice begins, and we do not direct marketing at them. If you believe a child has provided data without guardian consent, contact us and we will remove it.

10. Security

We protect your data with encryption in transit, access controls, strict tenant isolation between organisations, signed time-limited URLs for recordings, and least-privilege access for staff. No system is perfectly secure; if a breach affects your rights we will notify you and the relevant authority within the timeframes the law requires (for example, 72 hours under the GDPR and without undue delay under Australia’s Notifiable Data Breaches scheme).

11. Region-specific information

EEA and UK

Our lead supervisory contact is privacy@elanguagecenter.com. You may lodge a complaint with your national Data Protection Authority or the UK ICO.

Australia

We handle personal information in line with the Australian Privacy Principles. You may complain to the Office of the Australian Information Commissioner (OAIC).

India (DPDP Act 2023)

You may contact our Grievance Officer at privacy@elanguagecenter.com to exercise your rights as a Data Principal, including nomination and grievance redressal.

Sri Lanka, Singapore, Malaysia, Thailand, Indonesia, Philippines, Vietnam

We comply with the applicable Personal Data Protection Act / law in each jurisdiction, including consent, purpose limitation, and your rights of access and correction. You may contact us, or your local data protection authority, with any concern.

12. Changes to this policy

We may update this policy. We will change the version and effective date above and, for material changes, ask you to review and (where required) re-consent.

13. Contact

Email privacy@elanguagecenter.com for any privacy question or to exercise your rights.