Privacy Policy

1. Data controller

The data controller is The Adventure Academy Russia language club ("the Club", "we"). This website is used to present programs, accept applications, and operate user accounts.

By submitting forms or creating an account, you confirm that you have read this policy.

2. What data we process

Depending on how you use the website, we may process:

• name and email address — when you submit the contact form or register;
• message text — when you contact us via the form;
• account data (name, email, password hash) — when you register and sign in;
• session technical data (cookie ID, user-agent, IP) — to keep you signed in.

3. Purposes and legal bases

We process data to:

• respond to applications and questions submitted via the website;
• register and authenticate users, manage lesson bookings;
• maintain service security and prevent abuse;
• comply with applicable law.

Legal bases include your consent (when submitting forms and registering), performance of arrangements with you, and our legitimate interest in website security.

4. Cookies and sessions

We use an httpOnly session cookie for account sign-in. Without it, authentication is not possible. You can remove cookies in your browser settings; you will need to sign in again.

5. Sharing with third parties

We do not sell personal data. Data may be shared only as needed to operate the website:

• email provider (SMTP) — to deliver contact form messages;
• hosting and infrastructure providers — to run the website and database.

The contact page may embed a Yandex Map; Yandex's privacy policy applies when the map loads.

6. Retention

Applications and account data are kept as long as needed for the purposes above, or until you withdraw consent or request deletion, unless law requires otherwise. Session data is removed when it expires or when you log out.

7. Your rights

Under applicable data protection law (including Russian Federal Law No. 152-FZ and, where applicable, the GDPR), you may:

• request information about how your data is processed;
• request correction, restriction, or deletion;
• withdraw consent;
• lodge a complaint with a supervisory authority;
• contact us using the details below.

If you are in the EU/EEA, you may also complain to your local data protection authority where grounds exist.

8. Contact

For privacy-related requests, email hello@adventureacademy.ru.