Privacy & Cookie Policy

Last updated: 4 October 2026

1. Who we are

Flip English is run by Flip English Ecom - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE ("we", "us"). We decide how and why your personal data is used, so we are the "controller".

• Contact: [email protected]

If you are in the EU or UK, the GDPR / UK GDPR applies to how we handle your data. We also comply with the UAE Personal Data Protection Law.

2. What data we collect

• Contact details: name, email address, phone number, country and time zone.
• Application answers: what you tell us in our application form, such as your goals, native language, the accent you want, age, work situation, what you have tried before, and the investment range you are considering.
• Booking and call data: appointment details. With your knowledge, we record calls and create AI transcripts and notes using Fathom. We tell you at the start of the call, and you can ask us not to record.
• Coaching data: session notes, your progress, and any voice or video recordings you send us as part of coaching.
• Purchase data: what you bought, amounts and billing details. Card payments are handled by Stripe; we never see your full card number.
• Messages: emails, SMS and WhatsApp messages you exchange with us.
• Marketing source data: which ad or link brought you to us, for example UTM tags and ad click IDs (gclid, gbraid, wbraid, fbclid) contained in the link you clicked, and whether you accepted cookies.
• Website usage data: IP address, browser, device and pages viewed. Cookies and similar technologies for analytics and advertising are used only if you click Accept (see section 9).

3. Why we use your data, and our legal basis

What we do	Legal basis
Review your application and suggest the right next step (for example, which call to book)	Steps you ask us to take before a contract; our legitimate interest in giving our coaches' time to the best-fitting applicants
Text you (SMS or WhatsApp) about your application, ask if we may call you, and call you once you say yes	Steps you ask us to take before a contract (you asked us to contact you about your application)
Book calls and deliver coaching, support and onboarding	Contract
Record calls and create notes with Fathom (quality and accurate notes)	Your consent, asked at the start of the call
Process payments, issue invoices, keep tax records	Contract; legal obligation
Send confirmations and reminders (email, SMS, WhatsApp)	Contract
Send marketing emails or messages	Your consent. Unsubscribe any time
Website analytics with Google Analytics and Microsoft Clarity (including session recordings)	Your consent via the cookie banner
Measure our ads on our website with the Google tag and Meta Pixel (the Meta Pixel may also pick up contact details you type into forms on our pages, such as the booking calendar, and send them to Meta in hashed form)	Your consent via the cookie banner
Tell Google that you applied, so we can measure which Google/YouTube ads work (scrambled ("hashed") email and phone, ad click ID, time of application)	Your consent, given by clicking Accept on our cookie banner before applying
Tell Meta that you became a qualified applicant via Meta's Conversions API (hashed email and phone, ad click ID, time), so we can measure which Meta ads work	Our legitimate interest in measuring the effectiveness of our advertising. You can object at any time by emailing us, and we will stop
Keep our website secure and working (Cloudflare, essential cookies)	Legitimate interest
Handle legal claims and comply with the law	Legitimate interest; legal obligation

Automated routing: our application form uses your answers to suggest which booking page or call type fits you. This is a suggestion only. A person speaks with every applicant, and we do not make decisions with legal or similarly significant effects about you by automated means alone.

4. Who we share data with

We do not sell your personal data.

Service providers that process data on our behalf

• HighLevel / LeadConnector (USA): website, CRM, booking calendar, email and SMS
• Tally (Belgium, EU): application forms
• Make (Czech Republic): automations that move data between our tools
• Google (Ireland/USA): Google Sheets, Google Analytics
• Microsoft (Ireland/USA): Microsoft Clarity website analytics
• Fathom (USA): call recording, transcription and notes
• Stripe (Ireland/USA): payments
• Cloudflare (USA): website security and delivery
• WhatsApp / Meta (Ireland): messaging
• Skool (USA): our community platform, if you join
• Trustpilot (Denmark): collecting and displaying reviews

Advertising platforms that also use data for their own purposes

• Google Ireland Ltd / Google LLC: Google Ads conversion measurement, including "enhanced conversions for leads" (we send a hashed email and phone, which Google matches to Google accounts and then deletes if no match is found). See Google's privacy policy.
• Meta Platforms Ireland Ltd: Meta Pixel and Conversions API. For data collected through the Meta Pixel on our website, we and Meta are joint controllers under Meta's Controller Addendum; Meta is responsible for what it does with the data afterwards. See Meta's privacy policy.

We may also share data with professional advisers, authorities when legally required, or a buyer if our business is sold.

5. International transfers

We are based in the UAE, and some of our providers are in the USA. When your data is transferred outside the EU/EEA or UK, we rely on an adequacy decision (including the EU–US Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards we use.

6. How long we keep your data

• Applicants who don't become clients: 24 months after our last contact, then deleted.
• Clients: for the length of the coaching, plus 7 years for tax and accounting records.
• Call recordings and transcripts: 12 months, unless you become a client (then as for clients).
• Marketing consent: while you are subscribed, plus proof of your consent for 3 years after you unsubscribe.
• Ad measurement data sent to Google and Meta: kept by them under their own policies. Google only matches applications to ad clicks from the previous 90 days.
• Cookies: see the durations in section 9.

7. Your rights

You can ask us to:

• give you a copy of your data (access) or send it to another provider (portability);
• correct it;
• delete it;
• restrict how we use it;
• stop using it based on legitimate interest, including the Meta Conversions API sharing. You can always stop direct marketing;
• withdraw any consent at any time. Withdrawing doesn't affect what we did before. For cookies, use the Cookie settings button in section 9 or the link at the bottom of our pages. This also stops us telling Google about any future application. For anything else, email us.

Email [email protected]. We reply within one month. You can also complain to the data protection authority in the EU country where you live or work, or to the UK ICO.

8. Do you have to give us your data?

To process your application we need your name, email, phone and application answers. Everything to do with analytics and advertising (clicking Accept) is optional. Saying no doesn't affect your application or our service.

9. Cookies and similar technologies

When you first visit, a bar at the bottom of the page asks you to Accept or Decline.

• Essential cookies are always on, because the site can't work without them.
• Analytics and advertising cookies are only set if you click Accept. Clicking Accept also lets us tell Google when you apply (see section 3).
• You can change your choice at any time with the button below or the Cookie settings link at the bottom of our pages.

Change my cookie settings

If you decline, Google's tags may still send limited signals without cookies or stored identifiers. Google uses these only to estimate, in aggregate, how many people our ads bring.

Essential (always on)

Cookie	Provider and purpose	Duration
cookie-config, cookie-categories	GoHighLevel. Remember your cookie choice	180 days
consent-reload	GoHighLevel. Prevents double counting right after you accept	1 day
GoHighLevel functional cookies and storage (e.g. msgsndr_id)	GoHighLevel. Keep pages, forms, booking and checkout working	Up to 1 year
__cf_bm	Cloudflare. Bot protection	30 minutes
__stripe_mid, __stripe_sid	Stripe. Fraud prevention on payment pages	1 year / 30 minutes

Analytics (only after Accept)

Cookie	Provider and purpose	Duration
_ga, _ga_*	Google Analytics. Counts visits and how pages are used	Up to 2 years
_clck, _clsk	Microsoft Clarity. Heatmaps and session recordings, with form fields masked	1 year / 1 day

Advertising (only after Accept)

Cookie	Provider and purpose	Duration
_gcl_au, _gcl_aw	Google Ads. Measures which Google/YouTube ads bring visitors and applications	90 days
_fbp, _fbc	Meta Pixel. Measures which Facebook/Instagram ads bring visitors and applications	90 days

Our application form is provided by Tally and shown inside our page. Your answers go to Tally and then to us.

10. Children

Our services are for adults. We don't knowingly collect data from anyone under 18.

11. Security

We use appropriate technical and organisational measures, such as access controls, two-factor login on our tools and encrypted connections. We only work with providers that offer data protection terms.

12. Changes to this policy

We will update the date at the top when we change this policy. If a change is significant, we will tell you by email.

13. Contact

Questions or requests: [email protected]
Flip English Ecom - FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE