Privacy policy
Last updated: 29 October 2026
1. Who is responsible
EVERR is a project operated by Elena Solovyeva, based in Spain, who is the controller of personal data collected through this website. EVERR is currently a brand, not a separately incorporated company. For privacy questions or requests, email [email protected].
2. What this policy covers
This policy covers visitors to the EVERR website and people who contact us about our services. It does not cover student records, placement tests, voice notes or school operations processed through a future client implementation. Those services require their own privacy information and contractual arrangements. The WhatsApp conversations shown on this website are illustrations, not a live student chat.
3. Data we collect
When you submit our contact form, we receive your name, email address and, if provided, your school website. Name and email are required so we can answer; the school website is optional. We also receive information you choose to share in subsequent correspondence. Please do not send student records, identity documents or sensitive personal information through this form.
Our infrastructure and anti-spam providers process technical information such as IP address, browser and device information, request details and security signals. The form handler uses your IP address to validate the anti-spam check; it does not include it in the enquiry email.
4. Why we use it
We use contact details and correspondence to respond to your enquiry and discuss services you request. Where you ask about a potential contract with you, the basis is steps taken at your request before a contract (GDPR Article 6(1)(b)). For enquiries on behalf of a school or general business correspondence, we rely on our legitimate interest in answering and managing relevant enquiries (Article 6(1)(f)). We also rely on legitimate interests to protect the website, prevent spam and maintain security. Where a legal duty requires retention or disclosure, Article 6(1)(c) applies.
Submitting the form does not subscribe you to a newsletter. We do not sell your contact details or use the contact form to make automated decisions with legal or similarly significant effects.
5. Services that process data
Cloudflare processes contact-form requests and provides Turnstile anti-spam verification. Enquiries are delivered to our inbox using Spacemail, provided by Spaceship. People authorised to handle EVERR enquiries may access correspondence as needed. Providers may use subprocessors to deliver and secure their services.
The public website is hosted on Cloudflare Pages. Fonts are hosted on our own domain. The site loads a sample avatar from Pravatar; fetching it sends technical request information to that provider. We do not operate those external services. See Cloudflare’s privacy policy, its Turnstile privacy information, Spacemail’s terms, OpenAI’s privacy policy and Google’s privacy policy.
6. International processing
Some providers operate internationally, so technical data and correspondence may be processed outside Spain and the European Economic Area, including in the United States. GDPR requires an applicable transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, for restricted transfers. Contact [email protected] for information about the arrangements relevant to your data.
7. How long we keep it
Our retention policy is to delete or anonymise enquiries that do not become a client relationship within 12 months of the last meaningful contact. If a relationship develops, relevant correspondence is retained for that relationship and any applicable legal or claims period. Security records and provider backups have separate retention schedules under the relevant provider’s service terms; deleting a message from our inbox does not necessarily immediately remove provider backups.
8. Cookies and security checks
We have not added advertising trackers or audience analytics to the site. We store your manual language choice (EN or ES) in your browser’s local storage so your preference is remembered on this device. Cloudflare Turnstile processes browser and device signals to distinguish people from bots. Hosting, sign-in and security services may use necessary cookies or similar technology. We will update this information and request consent where required before adding optional tracking.
9. Your rights
Subject to the conditions in applicable law, you may request access, correction, deletion, restriction or portability of your data. You may object to processing based on legitimate interests. If processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. Email [email protected] to exercise your rights. We may request proportionate information to confirm your identity and normally respond within one month.
You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
10. Changes
We will update this policy when our website, providers or legal operator change. The date below identifies the current version.