Privacy Policy

ESL eBooks Website Privacy Policy

PRIVACY NOTICE

Last updated 27 Oct 2026

This privacy notice for ESL Tutoring Pro (“Company,” “we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

  • Visit our website at www.eslebooks.com, or any website of ours that links to this privacy notice
  • Engage with us in other related ways — including any sales or customer support inquiries

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [TODO].

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice. If you have questions, please contact us at [TODO].

We use strictly necessary cookies to run the website and shopping cart, and, only with your consent, analytics cookies. You may create an optional account to access your purchases; if you do, we process your account details and order history for that purpose. We do not sell your personal information and do not use cookies for advertising or cross-site tracking.

In what situations and with which types of parties do we share personal information? We do not sell your personal information. We may disclose limited personal information to service providers that help us operate the Services (such as web hosting) and process payments, and to public authorities when legally required.

How do we keep your information safe? We maintain organizational and technical safeguards designed to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do I exercise my rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

TABLE OF CONTENTS

  1. WHAT INFORMATION DO WE COLLECT?
  2. HOW DO WE PROCESS YOUR INFORMATION?
  3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
  4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
  5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
  6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
  7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
  8. USER ACCOUNTS AND ORDER HISTORY
  9. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
  10. HOW LONG DO WE KEEP YOUR INFORMATION?
  11. HOW DO WE KEEP YOUR INFORMATION SAFE?
  12. DO WE COLLECT INFORMATION FROM MINORS?
  13. WHAT ARE YOUR PRIVACY RIGHTS?
  14. CONTROLS FOR DO-NOT-TRACK FEATURES
  15. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  16. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
  17. DO WE MAKE UPDATES TO THIS NOTICE?
  18. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
  19. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you contact us or purchase a product or service.

Personal information we collect may include:

  • Email address
  • Legal entity name

Sensitive Information. We do not process sensitive information.

Payment Data. Payment transactions are handled by a third-party payment processor. We do not receive or store payment card details.

Information automatically collected

In Short: Technical information such as IP address and standard server log data may be processed automatically when you visit our Services.

This information is primarily needed to maintain the security and operation of our Services.

Unlike many businesses, we do not use cookies or similar technologies to collect and store your information.

Log and Usage Data. Standard server logs may record session-level technical data (for example, date/time stamps and pages requested) to help operate and secure the Services.

Device Data. We do not intentionally collect device identifiers beyond session-level technical data that may be included in standard server logs (such as IP address).

We do not use GPS or other technologies to collect precise geolocation data.

Other sources. We do not use third-party sources to obtain information about our users.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. If we need to process your information for a new purpose for which consent is required, we will obtain your consent.

We may process personal information to:

  • Deliver and facilitate delivery of services to you.
  • Respond to your inquiries and offer support.
  • Send administrative information related to your orders and changes to our terms or policies.
  • Fulfill and manage orders. Payment card details are handled by our payment processor.
  • Protect our Services (including monitoring and preventing fraud).

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process personal information only when we have a valid legal basis under applicable law, such as consent, performance of a contract, compliance with a legal obligation, or legitimate interests.

If you are located in the EU or UK, this section applies to you.

We may rely on the following legal bases:

  • Consent. You can withdraw your consent at any time by using the contact form on the main page or by emailing [TODO].
  • Contract. We may process your information to provide requested services or fulfill an order.
  • Legal Obligations. We may process your information where necessary to comply with legal obligations (including cooperating with law enforcement or regulators).
  • Legitimate Interests. We may process your information where necessary for our legitimate interests, provided those interests do not override your rights and freedoms (for example, to keep our Services secure).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We do not sell your personal information. We may disclose limited personal information to service providers that help us operate the Services (such as web hosting) and process payments, and to public authorities when legally required.

We do not disclose the personal information we collect to third parties for their direct marketing purposes.

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or that advertise on our Services, but are not affiliated with, our Services.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes. We use a small number of cookies. Strictly necessary cookies keep
the site, the shopping cart and your consent choice working. Analytics cookies
are used only if you agree to them.

We use cookies and similar technologies (including browser local storage) on
www.eslebooks.com. A cookie is a small text file placed on your device when you
visit a website. “Session” cookies are deleted when you close your browser;
“persistent” cookies remain for a set period.

We ask for your consent through a cookie banner. Optional cookies, and the
scripts that create them, are blocked until you select “Accept All”, or enable
the relevant category under “Preferences”. Rejecting optional cookies does not
restrict your access to the website or prevent you from buying our products.

You can change or withdraw your choice at any time using the “Cookie Settings”
link in the footer of every page. Withdrawing consent stops new optional cookies
being set; it does not affect the lawfulness of processing carried out before
withdrawal. You can also delete cookies already stored on your device through
your browser settings.

We use the following cookies:

Strictly necessary (always active; no consent required)

  • WordPress / WooCommerce session cookies (for example woocommerce_cart_hash,
    woocommerce_items_in_cart, wp_woocommerce_session_*): keep your cart and
    checkout working and remember your session. Session duration; removed when
    your session ends or after 2 days.
  • surecookie_session_id: records your cookie choice so we do not ask you again
    and can demonstrate your consent. 12 months.
  • __cf_bm (Cloudflare): bot management and security filtering. 30 minutes.

Analytics and measurement (set only with your consent)

  • sbjs_migrations, sbjs_current_add, sbjs_first_add, sbjs_current, sbjs_first,
    sbjs_udata (WooCommerce order attribution): record how you reached our store
    so we can see which channels lead to orders. Session to 6 months.
  • sbjs_session: session-level attribution data. 30 minutes.
  • tk_ai (Jetpack / WooCommerce Analytics): anonymised usage statistics about how
    the store is used. 12 months.
  • _tccl_visitor, _tccl_visit (GoDaddy traffic analytics): visitor and session
    identifiers, pages viewed, referring site, approximate region. 12 months and
    30 minutes respectively.

We do not use cookies for advertising, remarketing, cross-site behavioural
profiling, or to sell or share personal information with data brokers.

If we introduce new cookies, or change the purpose of an existing one, we will
update this section and, where required, ask for your consent again.

Do-Not-Track: we do not currently respond to browser DNT signals because no
uniform standard has been adopted. Where you have consented to analytics, you can
withdraw that consent at any time as described above.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: You can check out as a guest. If you choose to create an account, we
store the information needed to give you access to your purchases, and you can
ask us to delete the account at any time.

Creating an account is optional. You can complete a purchase as a guest without
registering. If you create one, or if you are a returning customer and log in, we
process the following in addition to the information described in Section 1:

  • Account data: first name, last name, email address, and a securely hashed
    password (we never store your password in readable form).
  • Order and billing data: billing address, company name if you provide one, order
    contents, order status, amounts paid, and the payment processor’s transaction
  • reference. We do not receive or store your payment card details.
  • Purchase and download history: which products you bought and when you accessed
    or downloaded them.
  • Technical data: IP address and timestamps of account creation, login and
    password reset, kept for security and fraud prevention.
  • Why we process it: to create and administer your account, give you permanent
  • access to products you have purchased, let you re-download them, process refunds
  • and handle support requests, prevent fraud and unauthorised access, and meet our
  • legal and tax obligations.
  • Legal bases (EU/UK): performance of a contract (Article 6(1)(b)) for the account,
  • purchases and downloads; legitimate interests (Article 6(1)(f)) for security,
  • fraud prevention and keeping basic records, which do not override your rights;
  • legal obligation (Article 6(1)(c)) for tax and accounting records.
  • Retention: account data is kept while your account is active. Order and invoice
  • records are retained for as long as tax and accounting law requires and are then
  • archived offline for that purpose only. Security logs are kept for up to 12
  • months. You can ask us to delete your account at any time.
  • Deleting your account: you can request deletion from within “My Account” or by
  • emailing [INSERT CONTACT EMAIL]. We will close the account and delete or
  • anonymise the data that is not subject to a legal retention obligation. Records
  • we must keep for tax or accounting purposes are retained for that purpose and
  • are not used for anything else. Deletion normally completes within 30 days.
  • We do not offer or support social logins. We do not use account data for
  • marketing unless you separately opt in, and you can opt out at any time from the
  • account settings or by contacting us.
  • Account data is accessible to our hosting and payment providers strictly as
  • needed to operate the store (see Section 4), and is not sold or shared for
  • advertising.

8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

We do not request or use your social logins.

9. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our Services are hosted in the United States. If you access our Services from outside the United States, your personal information may be transferred to, stored, and processed in the United States.

We do not sell your personal information. We may disclose limited personal information to service providers that help us operate the Services (such as web hosting) and process payments, and to public authorities when legally required.

10. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain legal entity name and email address offline for tax purposes only, unless a longer retention period is required or permitted by law.

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

12. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records.

13. WHAT ARE YOUR PRIVACY RIGHTS?

Briefly: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Canada, you have rights that allow you greater access to and control over your personal information. Creating an account is optional and you may request deletion of your account and associated data at any time.

Where applicable law provides you with rights, those rights may include requesting access to, a copy of, rectification of, erasure of, or restriction of processing of your personal information, and (where applicable) data portability and objection. You can make such a request by contacting us using the details in Section 17.

Opting out of marketing and promotional communications: We currently do not conduct any marketing or promotional activity.

Cookies and similar technologies: We do not use cookies to collect and store your information.

If you have questions or comments about your privacy rights, you may email us at [TODO].

14. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. However, it should be noted that we do not track your activity beyond session-level operation of the Services. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

15. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

No user accounts are established using this website, and users do not publicly post content on the Services.

CCPA Privacy Notice

What categories of personal information do we collect?

We have collected the following categories of personal information in the past twelve (12) months:

Category A. Identifiers — Contact details, such as legal entity name, Internet Protocol address (session only), and email address. Collected: YES.

Category I. Professional or employment-related information — Collected: NO.

Retention: Legal entity name and email address are archived offline for tax purposes only. Session-level technical data (such as IP address) is processed during the browser session and is not intentionally retained by us.

How do we use and share your personal information? ESL Tutoring Pro collects and may disclose your personal information as described in this notice (including to service providers and to authorities when legally required).

We do not sell or share personal information as defined by the CPRA.

To exercise your California privacy rights, you may contact us by email at [TODO] or by using the contact form at the bottom of the home page.

16. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of Virginia, you may be granted specific rights regarding access to and use of your personal information.

Virginia CDPA Privacy Notice: We collect limited personal information (email address and legal entity name) when you contact us or place an order.

17. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and will be effective as soon as it is accessible.

18. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email at [TODO] or by using the contact form at the bottom of the home page.

19. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

To request to review, update, or delete the personal information we collect about you (legal entity name and email address), please contact us using the details in Section 18.