Privacy policy

01. The data controller is Codaquest SRL, whose registered office is at Rue des Merisiers 71, 1170 Brussels, Belgium, registered with the CBE under number 1017.861.679 (info@codaquest.com, +32 480 20 57 22). This policy covers our website, our learning platform, our classes, our holiday camps and our free trials.

It explains which personal data we use, why, who we share it with, how long we keep it and how to exercise your rights.

02. This policy is addressed to parents and legal guardians, students, people who contact us or book a trial, and visitors to our websites. Student accounts are created by a parent, who exercises their child's rights.

03. We only process the data our activities need: • Parent: name, email, phone, language, municipality, bookings and payments. Card details are handled by our payment provider, never by us. • Child: first name, age or year of birth, level, attendance, progress, projects and code they create, messages sent to the AI tutor and on the forum, uploaded images and voice recordings dictated to the tutor. • Online classes and trials: video and audio recording of the session, with its automatic transcript and summary. • Contact with us: emails, text messages and calls to our line, which we may record and transcribe to follow up on your request. • Browsing: IP address, device, pages viewed, and the cookies and trackers listed in article 11.

04. We use this data for the following purposes: • Performing the contract: enrolment, classes, platform access, class reminders by email and text message, invoicing. Basis: performance of the contract. • Keeping our accounts and meeting our tax obligations. Basis: legal obligation. • Recording online classes and trials for teaching follow-up, child safety and class quality. Basis: legitimate interest. • Running the AI tutor and moderating children's messages and images. Basis: performance of the contract and our legitimate interest in protecting children. • Getting back to you after a request or a trial, and telling you about our classes and camps by email or text message. Basis: legitimate interest. You can unsubscribe at any time through the link in every message. • Measuring our ads and knowing which campaign led to a booking or a purchase. Basis: legitimate interest. • Sending Meta and Google our customers' email and phone number, hashed, so that they stop seeing our ads and so we can reach similar families. Only parents who have already bought a class or a camp are included, never children. Basis: legitimate interest. You can object at any time at info@codaquest.com and you will be left out of the next list. • Measuring website audience. Basis: consent. We may publish photos taken during our activities in our communications and on our website. We remind you of this by email when you enrol, and you only need to write to info@codaquest.com for your child not to appear in any published photo. Basis: legitimate interest.

05. We never sell your data. We entrust it to providers acting on our instructions: hosting and data storage, payment, email and text message delivery, customer relationship management, telephony, video conferencing and recording storage, artificial intelligence model providers, audience measurement, error monitoring and spam protection. The advertising platforms Meta and Google receive the measurement data and hashed contact details described in article 04. AI providers do not use our students' data to train their models.

06. We favour providers that host your data in the European Union. Some payment, artificial intelligence, hosting and advertising providers are based in the United States. These transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses. You can get a copy at info@codaquest.com.

07. We keep your data for as long as each purpose requires: • Account and progress: while enrolled, then 3 years after the last activity. • Invoices and accounts: 10 years, as the law requires. • Recordings of online classes and trials: 12 months. • Prospects who never enrolled: 3 years after the last contact. • Cookies and trackers: the period shown in article 11.

08. Access to your data is limited to the people who need it. It is encrypted in transit, and accounts are protected by a one-time code or a password. If a data breach puts you at risk, we tell you.

09. You can ask for access to your data and your child's, and for its rectification, erasure, portability and restriction. You can object to processing based on our legitimate interest and withdraw your consent at any time. Write to info@codaquest.com or to: Codaquest SRL Rue des Merisiers 71, 1170 Brussels We answer within one month. You can also lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.

10. We tell you by email about any significant change to this policy.

11. Here is every cookie and tracker this site sets. Necessary cookies are required for the site to work and cannot be turned off. Statistics cookies are only set with your agreement. You can give it, refuse it or change it at any time through the "Cookies" link in the footer. Marketing cookies are set as soon as you arrive.

We also keep, in your browser's own memory (localStorage and sessionStorage), the page you arrived on and the campaign parameters of your first visit, for the same advertising-measurement purposes.

Every choice made in the banner is recorded on our side (a technical identifier, the date, the categories accepted, a truncated IP address) so that we can evidence your consent. No identifying data is attached to it.

12. For any question about your personal data, write to info@codaquest.com.