Privacy Policy

1. General Information on Data Protection

This privacy policy governs the processing of personal data on https://butler-school.com/ and complies with the EU General Data Protection Regulation (GDPR, Regulation EU 2016/679) and applicable national data-protection law.

Data Controller

XCLUSIVE BESPOKE MALLORCA SL, with registered office at Carrer de Sant Miquel 36, 5º, 07002 Palma de Mallorca, Balearic Islands, Spain.
Contact: contact@butler-school.com — +34 664 131 904.

Data Collection Methods

The operator collects personal data when you voluntarily submit information through the waitlist signup or the application form on this website. Automatic technical data (browser type, operating system, time of access, IP address) is collected by the hosting infrastructure when you visit the site.

Processing Purposes

• Managing the waitlist and notifying you when applications open
• Receiving, reviewing and responding to applications
• Sending you transactional emails relating to your application
• Ensuring secure and error-free operation of the website
• Complying with legal record-keeping obligations

Data Retention

Personal data is kept only for as long as it is useful for the purposes indicated above and, in any case, for the legally required periods. Waitlist contacts may unsubscribe at any time and have their data deleted on request.

Legal Basis

• Pre-contractual measures and contractual relationships (Article 6(1)(b) GDPR)
• Consent for marketing communications (Article 6(1)(a) GDPR)
• Legal compliance obligations (Article 6(1)(c) GDPR)
• Legitimate interest in operating and securing the website (Article 6(1)(f) GDPR)

Third-Party Sharing

Personal data is not sold or shared with third parties for their own purposes. The following processors handle data on behalf of the operator under data-processing agreements:

• Vercel Inc. (USA) — website hosting and edge delivery
• Supabase (EU – Ireland) — authentication and database, used when you create an account or sign in
• Loops.so (USA) — email-marketing audience management for the waitlist and applications
• Resend (USA) — transactional email delivery for application notifications
• Plausible Analytics (EU) — privacy-friendly, cookieless website statistics (see section 6)
• Vimeo Inc. (USA) — hosting of lesson preview videos, loaded only after you actively choose to load a video (see section 5)

The following processors are involved only if and when you use the corresponding feature, and are not active for ordinary browsing of the marketing site:

• Stripe (USA/EU) — payment processing, used only when you purchase a course through the checkout
• Google / LinkedIn — identity providers, used only if you choose to sign in with a Google or LinkedIn account
• Calendly (USA) — appointment scheduling, used only if you book a discovery call

International Transfers

Some of the processors listed above are based in the United States. Transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) under Article 46 GDPR and the EU–US Data Privacy Framework where applicable.

Your Rights

You have the right to:

• Access your personal data (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing (Article 21 GDPR)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, please email contact@butler-school.com with proof of identity.

2. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes server-log data (IP addresses, request metadata, page-view information) on the operator's behalf to deliver the website. The legal basis is Article 6(1)(f) GDPR (legitimate interest in efficient and secure delivery).

3. Security Measures

The website is delivered exclusively over HTTPS with a valid TLS certificate. Personal data submitted via forms is encrypted in transit. The operator reserves the right to take legal action against unauthorised use, unsolicited contact, or attempts to compromise the website's integrity.

4. Forms and Email Contact

Data submitted via the waitlist form (email address) or the application form (full name, email, current role, motivation text) is transmitted to Loops.so and, for applications, additionally relayed to a Daniel-monitored inbox via Resend. Submissions are retained until you ask us to delete the data, withdraw your consent, or the purpose for which they were collected ceases to apply. Statutory retention periods are unaffected.

5. Embedded Content (Video)

The homepage introduction video is hosted on this website's own infrastructure (Vercel) and sets no cookies. Lesson preview videos are hosted by Vimeo Inc. (USA) and are embedded using a click-to-load ("two-click") mechanism: nothing is requested from Vimeo, and no data is transmitted to Vimeo, until you actively click to load a video. Once you do, Vimeo may receive your IP address and set cookies in order to play the video; the embed requests that Vimeo not track you where technically supported. Your click constitutes your consent to this transfer under Article 6(1)(a) GDPR and §25(1) TDDDG. Vimeo's own privacy policy is available at vimeo.com/privacy .

6. Analytics

We use Plausible Analytics, a privacy-friendly, open-source analytics service hosted in the EU. Plausible measures aggregate site usage without cookies, without storing or accessing any information on your device, and without collecting personal data or cross-site identifiers. Because no information is stored on or read from your device, this processing does not require consent under §25 TDDDG; it is carried out on the basis of our legitimate interest in understanding and improving the website (Article 6(1)(f) GDPR).

7. Cookies

See our Cookie Policy for details of which cookies are set on this website and how to manage them.

8. Updates to This Policy

The operator reserves the right to update this privacy policy and will publish any changes on this page.