Last updated: 24 May 2026. This policy explains what personal data we collect, why, who we share it with, and what rights you have. It covers data about both parents and children.
Squad4English is an online English immersion programme for children, run by Steven Tomaselli. Where this policy says "we", "us", or "our", it means Squad4English. As the data controller, we decide how and why your personal data is processed, and we are responsible for keeping it safe.
Data Controller: Steven Tomaselli, operating as Squad4English
Contact: steven@squad4english.com
Based in: Panama (Republic of Panama)
Service: Delivered online
We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.
Squad4English is bought, booked, and managed by parents and legal guardians. Children do not create accounts, submit forms, or provide their own data to us. Where we process a child's personal data, the parent or guardian provides it and acts on the child's behalf.
The service is intended for families located in the European Economic Area (EEA) and the United Kingdom. If you are enquiring from outside these regions, please contact us before booking so we can confirm whether and how we can serve you, as other national laws may apply.
We collect only what we need to run the service and communicate with you.
Consultations are booked through Calendly (see Section 6). When you book, we receive:
🔒 A note on sensitive information. Please do not include health, medical, or diagnosis information about your child in free-text messages unless genuinely necessary. If you do share something relevant such as a learning difference, we will treat it confidentially and use it only to support your child in sessions.
Under GDPR we must have a lawful basis for each kind of processing.
We do not use your data for automated decision-making, profiling, or behavioural advertising.
We use data only to:
We will never use your data for unsolicited marketing, and we will never sell, rent, or trade it.
We share data only with service providers we genuinely need to run the programme. Each acts as a processor under a Data Processing Agreement.
No other third parties receive your personal data. Please also read Section 7.
Squad4English is based in Panama and serves families in the EEA and the United Kingdom. Personal data flows from the EU/EEA to Panama when you contact us or enrol. Panama is not currently recognised by the European Commission as providing an adequate level of data protection, so we rely on the European Commission's Standard Contractual Clauses as the legal mechanism for this transfer.
Additionally, Calendly, Cloudflare, Google, Formspree, and Miro are US-based. Where data is transferred to them, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses offered by each provider.
You may request a copy of the transfer safeguards we rely on by emailing steven@squad4english.com.
We treat children's data with extra care and collect the minimum necessary: age, approximate English level, and anything a parent chooses to share to help us support their child.
Live sessions are recorded only after a parent or guardian has given explicit consent at enrolment. Recordings exist for safety, quality, and to create the weekly progress clip.
👑 Each family only ever receives footage of their own child. The weekly Friday clip is prepared to feature the enrolled child of that family only. Full session recordings are never shared between families. One family does not receive another family's recordings or clips.
Parents and guardians may exercise all data rights in Section 11 on their child's behalf, including requesting deletion of recordings or clips.
You can request earlier deletion at any time (see Section 11), subject to any data we must keep by law.
This website does not use advertising cookies or analytics tools. We do not use Google Analytics or any similar tracking.
Our host Cloudflare Pages may set essential technical cookies needed for security and performance. These do not track you across other websites.
Our booking page embeds a Calendly widget. When it loads or you interact with it, Calendly may set its own cookies and process data under its own privacy policy. Our Summer Squad application form uses Formspree, which processes submitted data under their own privacy policy. We also load fonts from Google Fonts, which means your browser contacts Google's servers to retrieve them.
If you are in the EEA or the UK, you have the following rights. Parents may exercise these on behalf of their child.
Email steven@squad4english.com to exercise any of these rights. We will respond within one month as required by GDPR. No charge for requests.
Squad4English is based outside the EU but falls within the scope of GDPR by serving EU/EEA residents. If you believe we have handled your data unlawfully, you have the right to complain to the data protection authority in your EU member state. A full list is available at edpb.europa.eu.
We take reasonable technical and organisational measures to protect your data:
No method of internet transmission is completely secure. If a breach occurs that is likely to put your rights at risk, we will inform the relevant data protection authority within 72 hours and tell affected individuals without undue delay.
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If the change is significant, we will notify enrolled families by email.
For any question about this policy or how we handle your data:
Steven Tomaselli, Squad4English
Email: steven@squad4english.com
We aim to respond to privacy enquiries within 5 business days, and always within the one-month GDPR deadline for formal rights requests.