STORIES AT THE HEART OF LEARNING ENGLISH
StoriesWithVocab

Privacy Policy

Last updated: 22 October 2026. This notice explains how storieswithvocab.com uses information when you browse, buy digital products, use your account or contact us.

Who is responsible for your data

The controller for storieswithvocab.com is Przemysław Pawlak, operating StoriesWithVocab Contact: office@storieswithvocab.com.

Information we use

When you place an order or create an account, we process the contact and billing details you provide, your account identifier, order contents, payment status and records needed to give you access to your purchases. We also process the messages you send us. The website and its providers process technical information such as IP address, browser details and security logs when operating the service.

Payment details are handled through WooPayments and its payment partner Stripe. We receive transaction references and payment-status information needed to manage orders; we do not store your full payment-card number or security code in our shop database.

Why we use this information

We use information to fulfil purchases, maintain accounts and provide support connected with your contract (GDPR Article 6(1)(b)); meet applicable accounting, tax and other legal duties (Article 6(1)(c)); and protect the website, prevent misuse, answer general enquiries and establish or defend claims (Article 6(1)(f)). Our legitimate interests are operating a secure service and resolving enquiries and disputes. Where a feature requires consent, we rely on consent (Article 6(1)(a)); it can be withdrawn without affecting earlier lawful processing.

Order and account details requested as necessary are needed to provide the relevant service. Without them, we may be unable to complete a purchase, supply access or answer a request. Optional information is not required to buy a product.

Vocabulary-test progress

The vocabulary tests save answers and scores in your browser on your device. Progress does not automatically sync between devices. Clearing browser storage can remove it. Exported progress files remain under your control; take care when sharing them, especially if they identify a learner. Your account and order records are stored separately so that we can verify access to purchased tests.

Service providers and recipients

Providers supporting the service include Zenbox for hosting, Automattic services used through WooCommerce/WooPayments and Jetpack, and Stripe for payments. Relevant information may also be available to authorised website administrators, email-service providers, professional advisers and public authorities where legally required. These providers handle information needed to deliver their services. Jetpack supports site security, activity records, backups and contact forms where used. Information submitted through a contact form is stored for handling your enquiry. If you publish a product review, its text, rating and displayed name are public; your email address is not displayed as part of the review.

Automattic and Stripe operate internationally, so information may be processed outside the European Economic Area, including in the United States. Their published transfer arrangements include European Commission standard contractual clauses and, where applicable, transfers covered by an adequacy decision; Stripe also identifies the EU–US Data Privacy Framework for covered transfers. See Automattic’s privacy policy and Stripe’s privacy policy for their recipients, locations and safeguards. Contact us to ask about safeguards or obtain information on the arrangements relevant to your data.

Cookies and embedded content

The shop uses cookies and similar storage for login, your basket, checkout, fraud prevention and the test features you request. WooCommerce cart indicators (woocommerce_cart_hash and woocommerce_items_in_cart) normally last for the browser session; the wp_woocommerce_session_ cookie normally lasts two days and links your browser to its basket. WordPress authentication cookies support your login; their lifetime depends on whether you choose to remain signed in. Test answers, scores and any learner name you enter are saved in local browser storage until you reset them or clear that storage. Payment-provider cookies and device signals support secure payments; see Stripe’s cookie information.

At launch, Jetpack visitor statistics, Jetpack WooCommerce event analytics and WooCommerce order-attribution tracking are disabled. You can clear or block cookies through your browser settings, but blocking essential storage can prevent login, checkout or progress saving. Export your test progress before clearing browser data. If optional analytics or marketing features are introduced, this notice and any required consent controls will be updated before they operate. Following a link to an external website is subject to that provider’s privacy notice.

How long we keep information

Account information is kept while needed to provide your account and purchased access. Order and invoice records are kept for the periods required by applicable law. Support messages and technical records are retained for as long as needed to resolve the matter, protect the service and handle applicable claims, then deleted or anonymised. Account deletion does not require deletion of records we must legally retain. Retention depends on the continuing account or purchase, the legal record-keeping obligation and any unresolved dispute. Copies in hosting or security backups can remain until those backups are replaced under the provider’s retention cycle; access to those copies is restricted. Contact us for the retention criteria applicable to your particular record.

Your rights

Subject to the conditions in data-protection law, you may request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests and withdraw consent. Contact office@storieswithvocab.com. You may complain to the Polish supervisory authority, the President of UODO (uodo.gov.pl), or another competent authority. WooPayments and Stripe use automated fraud checks that may reject or require additional verification of a payment. If a payment appears to have been wrongly rejected, contact us and your payment provider for help; you can also exercise relevant rights directly with Stripe under its privacy policy. Vocabulary-test scores are learning aids, not automated decisions about admission, employment or certification.

Updates

We will update this notice when the service or its data processing changes. Material changes affecting existing customers will be communicated where required.