Draft for review. Items in [brackets] are still to be confirmed by Go2Core Learn Engine LLP, and the text needs review by a lawyer before publication.

How we look after your information

Last updated: 7 November 2026

Gift of Language helps people learn English with short video lessons, practice and tests. We collect only what we need to run it, we never sell your information, we show no advertising, and we use no third-party tracking or advertising cookies. We count visits to the website ourselves, without keeping your IP address (section 2).

At a glance

Who we are	Go2Core Learn Engine LLP (LLPIN ACH-0291), 2nd Floor, 227/2, Vishnupuri, Aligarh - 202001, Uttar Pradesh, India (“we”, “us”). Gift of Language is our educational imprint.
Without an account	You can watch the free episodes and read every word page without telling us anything about yourself. We count visits anonymously on our own server (which pages are read, where visitors come from, the kind of device and the country), without keeping your IP address or any identifier that follows you from day to day, and we respect Do Not Track. Practice and tests need a free account.
With an account	Your name, email address, password (stored only in scrambled form), your learning record (practice and test answers, progress and recommendations), where and when you are signed in, and what you do while signed in (pages, how you watch episodes, searches, and the steps of buying a course), to make your learning more productive. Unless you switch it off in My data, your activity, with your name and email removed, also helps train our systems.
Emails	Only the account emails you need (such as confirming your address), plus results and progress emails if you choose them. You can stop them at any time.
Payments	Handled by our payment gateway, Cashfree. We never see or store your card, bank or UPI details. We pass the gateway your name, email and mobile number, which it needs for the payment and its receipt. Every payment gets an invoice with GST shown line by line, which you can see under My invoices.
Your rights	See, correct, download or delete your information; withdraw consent; complain to us or to a regulator. Write to hello@go2core.com; we can be contacted by email only.

1. Who is responsible for your information

Go2Core Learn Engine LLP, a limited liability partnership registered in India, decides how and why your information is used. Under India’s Digital Personal Data Protection Act, 2023 we are the data fiduciary; under the EU and UK General Data Protection Regulation (GDPR) we are the controller.

Registered office: 2nd Floor, 227/2, Vishnupuri, Aligarh - 202001, Uttar Pradesh, India
LLP identification number (LLPIN): ACH-0291
Email: hello@go2core.com. We can be contacted by email only.
Grievance officer: Ishaan K. Sharma, by email at grievance@go2core.com. You can raise any concern about your information with this person.
Representative in the European Union / United Kingdom: [name and address, if required under GDPR Article 27, or remove this line]

Gift of Language is run from India and is open to learners in every country. This policy applies wherever you are; where the law of your country gives you more protection, we follow it.

2. What we collect, and why

Information	Why we use it	Legal basis (GDPR)
Name, email address, password (stored as a one-way hash, never readable)	To create and secure your account, and to send emails you need about it (confirming your address, resetting your password)	Contract
Your learning record: answers to practice and test questions, episodes you mark as watched, scores, words to review, recommendations	To save your progress, show your dashboard and reports, build review practice and graded tests, and recommend what to learn next	Contract
Your email choices, with the date, the exact wording you agreed to, and the network (IP) address used	To send results and progress emails only if you asked for them, and to prove that you did	Consent
Your agreement to these terms and this policy	To record what you agreed to and when	Contract; legal obligation
Payment records: what you bought, amount, date, the gateway's order and payment references, refund requests	To give you the plan you paid for, handle refunds, and keep the accounts and tax records the law requires	Contract; legal obligation
Billing details for your tax invoice: name, country, state, and if you buy for a business, its name, address and GSTIN	To issue the GST tax invoice (and any credit note) that the law requires, with the right tax for your state	Legal obligation; contract
Visits to the website, by anyone (anonymous visitor statistics): the pages opened and when, how long each page was on screen and how far it was read, the website or campaign link that sent you (for example a search engine, YouTube or a tagged link), links followed to other websites, plays of episode videos and their language, words searched on the site, the kind of device, browser and system, the browser’s preferred language and time zone, the country (and, where our local location database can tell, the region and city), and whether a visit led to a sign-up, enrolment or order. Your IP address is used only for a moment, on our own server, to work out the country and a code that is different every day (a one-way hash with a random value that we delete after two days), and it is never stored. A cookie, `gol_seen`, holds only the date of your first visit, so that we can tell new visitors from returning ones; it identifies no one.	To understand how the website is used and found, which lessons help, where visitors give up, and to make the website better. Only the Super Admin sees these statistics. No outside analytics service is used and nothing is shared.	Legitimate interests (running and improving the website). If your browser sends Do Not Track or Global Privacy Control, we set no cookie and record only an anonymous page count.
Your sign-ins: when, on which kind of device and browser (e.g. “Chrome on Android”) and from which network (IP) address, and how each ended	To keep your account secure; to keep a learner’s account open in one place at a time (signing in on a new device signs out the old one); to show you, in My data, where you are signed in	Contract; legitimate interests (security)
Your activity while signed in: pages you open, how you watch episodes (play, pause, where you skip, how much you watch, which language version), and what you search for; in the shop, the courses you look at, what you add to your cart, coupons you apply, checkout, payment, renewals and upgrades	To make your learning more productive: to see what helps and what is hard, to improve episodes and recommendations, and to suggest what to study next; in the shop, to see where buying a course is hard and make it simpler	Contract; legitimate interests (improving the course)
The same activity and your practice answers, with your name, email and address removed and replaced by a code	To train our systems (for example, models that predict which practice helps a learner most). You can switch this off at any time in My data; your own learning record is not affected.	Consent you can withdraw (switch in My data); legitimate interests
Sign-in attempts and the network (IP) address they came from	To protect accounts from password guessing and the site from abuse	Legitimate interests (security)
Problem reports you send about a question	To correct the question	Legitimate interests (quality of the course)
Requests, complaints and grievances you send through Help or Contact: your name, email address, what you write and our replies; notes our staff make while handling them or about your account	To answer and resolve what you ask, to handle complaints and grievances as the law requires, and to help you consistently if you write again	Contract; legal obligation (complaints and grievances); legitimate interests (support)
Answers from all learners, combined	To find questions that are too easy, too hard or wrong, and improve them. This does not single you out.	Legitimate interests (quality of the course)

We do not ask for your date of birth, phone number, address, photographs or any sensitive information, and you should not put such information in problem reports or requests.

3. Emails

Some emails are part of the service and are sent to every account holder:

about your account: confirming your email address (with one reminder), a welcome with first steps, password resets, and a notice when your password changes;
about payments: receipts with your tax invoice, refund confirmations with the credit note, and notices when a course you bought is about to end (7 days and 1 day before) and when it has ended. You can switch off the renewal reminders on My plan.

When you create an account you can also choose, separately, whether we may email you:

your results and recommendations: after each graded test, a summary in the evening on days you practise, and occasionally (at most once a week) a suggestion to take a test when you look ready for one; and
a newsletter with your progress, new episodes, news about Gift of Language and a tip, never more often than once every two weeks.

Neither is required, and your account works the same either way. You can change your choices at any time under Email choices, or with the one-click unsubscribe link at the end of every such email. Withdrawing consent does not affect emails already sent. Emails come from hello@go2core.com.

4. Recommendations and levels

Your dashboard, reports and recommendations are produced automatically from your answers, using fixed rules and the Gift of Language reference framework (aligned with the CEFR). For example, a skill area below its pass mark is suggested for practice. They are suggestions to help you learn. They are not official certificates and have no legal or similar effect on you. If you think a result is wrong, write to us and a person will look at it.

We do not sell or rent your information, and we do not share it for advertising. We use a small number of service providers who process it for us, under contract and only on our instructions:

Amazon Web Services (Amazon SES): sends our emails. The service we use is located in the United States (US East).
Payment gateway: Cashfree Payments India Private Limited (India) processes payments. It collects your payment details directly, under its own privacy policy.
Akamai Technologies (Linode): hosts our website and database, on servers in [India (Mumbai or Chennai): confirm the region chosen].

Episode videos are stored with Amazon Web Services (Amazon S3, United States) and play in our own player through short-lived links; Amazon receives your device’s IP address and browser details to deliver the video. Where an episode is also on YouTube we link to it; YouTube loads only if you follow that link, and Google’s privacy policy then applies.

We may disclose information when the law requires it (for example, to a court or regulator), or to protect the safety of our learners or our service.

6. Information that crosses borders

We are based in India, so if you use Gift of Language from another country, your information is processed in India. Some of our providers process it in other countries, such as the United States for email. Where the law requires safeguards for such transfers (for example under the GDPR), we use them, such as the European Commission’s Standard Contractual Clauses. We do not transfer information to any country to which the Government of India has restricted transfers.

7. How long we keep it

Your account and learning record: while your account is open. You can delete your account yourself under My data, which deletes it straight away; or ask us, and we delete it within 30 days. In both cases we keep only what the law requires (see payment records below).
Requests and staff notes: while your account is open, and deleted with it (a refund request stays with the payment record it belongs to). Requests sent without an account: deleted 15 days after the request is closed.
Accounts never confirmed by email: deleted after 30 days.
Sign-in attempts and other security records: 90 days.
One-time email links (confirmation, password reset): deleted 30 days after they expire.
Our record of emails sent to you: 24 months.
Anonymous visitor statistics: visits and page views 13 months, then deleted; the day’s random value used for the visitor code: 2 days. Daily totals (numbers only, such as visits per page or per country) are kept.
Your sign-ins and your activity while signed in: 24 months, then deleted. Training files made from them are deleted when the training run is done.
Payment records, tax invoices and credit notes: as long as Indian accounting and tax law requires, [currently up to eight years: confirm with your accountant], even if you delete your account.
Problem reports: kept to improve questions; when your account is deleted, they are no longer linked to you.

8. Your rights

You can download everything we hold about you, and delete your account, yourself under My data. Wherever you live, you can also ask us to:

tell you what information we hold about you and how we use it, and give you a copy, including in a form you can take elsewhere;
correct, complete or update it;
delete it, or your whole account;
stop or limit a use of it, or object to a use based on our legitimate interests;
withdraw a consent you gave (this is as easy as giving it).

Under Indian law you may also nominate another person to exercise your rights if you die or become unable to. Write to hello@go2core.com, or to the grievance officer at grievance@go2core.com. We may need to confirm it is really you. We reply within 30 days, and sooner where the law requires.

If you are not satisfied, you can complain to a regulator:

India: the Data Protection Board of India, after first raising the concern with us;
European Union: the data protection authority of your country;
United Kingdom: the Information Commissioner’s Office;
elsewhere: the authority responsible for data protection where you live.

9. Children

[To be decided before public sign-up opens. Under Indian law a child is anyone under 18, and their data needs verifiable consent from a parent or guardian; under the GDPR the age is 13 to 16, depending on the country. Choose either: accounts only for people aged 18 and over; or accounts for younger learners with a parent’s or guardian’s confirmed consent.]

Anyone, of any age, can watch the episodes and read the word pages without an account, and we collect nothing about them.

10. Keeping it safe

The site is served only over an encrypted connection (HTTPS). Passwords are stored with a strong one-way hash (Argon2id). Sign-in is protected against password guessing. Staff can see only what their role needs, and every change they make is logged. No system is perfectly secure, however. If a breach affects your information, we will tell you and the authorities as the law requires.

11. Cookies

We use two cookies of our own. gol_sid keeps you signed in and protects forms from misuse. It is strictly necessary, holds no information about you beyond a random identifier, and ends when you sign out or close your browser. gol_seen holds only the date of your first visit (for example 2026-11-07), so that our visitor statistics can tell new visitors from returning ones; it holds no identifier, lasts 13 months and is not set when your browser sends Do Not Track or Global Privacy Control. We use no advertising or third-party tracking cookies and no outside analytics service, and our fonts and page code are served from our own site. The activity we record while you are signed in (section 2) is recorded on our own server with this same cookie; no extra cookie and no outside service is used for it. YouTube may set its own cookies once you play a video.

12. Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your information, we tell account holders by email before it takes effect, and we ask for consent again where the law requires.

13. Contact

Questions or requests: hello@go2core.com. We can be contacted by email only.

Go2Core Learn Engine LLP (LLPIN ACH-0291, GSTIN 09ABBFG2344M1Z9), registered office: 2nd Floor, 227/2, Vishnupuri, Aligarh - 202001, Uttar Pradesh, India.