Privacy Policy

Quicklearnsheets.com sells printable and online language-learning materials. It is run by Tycho Dens, a sole proprietorship registered in Belgium. We are the controller for the processing described in this policy.

Tycho Dens, trading as Quicklearnsheets
Kwakkelberg 100/4, 2440 Geel, Belgium
Company number: 1042.072.186
BE 1042.072.186
Email: info@quicklearnsheets.com

• We collect only what we need to run your account, deliver your orders and, if you ask for it, send our newsletter.
• No tracking cookies, no advertising, and we never sell your data. Visits are only counted if you allow it.
• You can download or delete all your data yourself from your account page.

Account. Email address, name and an encrypted password, plus your role and optionally your organisation's name. If you sign in with Google or Microsoft we receive your name and email address from them. Basis: performance of a contract (art. 6(1)(b) GDPR).

Purchases and downloads. Which sets you bought, the payment reference from our payment provider, the email address used for delivery, and the country you order from (derived from your IP address at the moment of payment; we need it for the VAT rules). Every paid order gets an invoice with your name if we have it, your email address and your country. If you ask for an invoice in the name of an organisation, we also process its name, address and VAT number. Card or bank details never reach us; they are handled entirely by Mollie. Basis: performance of a contract, and legal (bookkeeping and VAT) obligations. Without an email address we cannot deliver your order.

Organisation licences. Organisation name, contact name, email, billing address, country and VAT number, used to provision seats and issue invoices. Basis: contract and legal (invoicing) obligations.

Invited teachers. When a coordinator invites a colleague, we store that colleague's email address so the invitation can be accepted; the source of that data is the coordinator, not you. It is removed if the account is deleted. Basis: legitimate interest in delivering the organisation's subscription (art. 6(1)(f)).

Practice progress. Scores and completion dates of online exercises, linked to your account so you can track your learning. For seats managed by a school or organisation, the organisation is the controller of this data and we process it on their behalf (see section 9). Basis: performance of a contract.

Newsletter. Your email address, only when you sign up for it yourself. Basis: consent (art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link in every email.

Support. Whatever you send us by email, kept for as long as needed to handle your question. Basis: legitimate interest in answering you.

Security. To prevent abuse, our rate limiter briefly stores your IP address (deleted within 48 hours) and our hosting provider keeps short-lived technical server logs. Basis: legitimate interest in keeping the service secure.

Withdrawal requests. If you use the withdrawal form: your name, email address and the order details you give us, to handle your request and to be able to show that we did. Basis: legal obligation and our legitimate interest in keeping proof.

Email log. For every email we send you we note the address, the type of message and whether it went out, so we can check whether, for example, your download link reached you. Basis: legitimate interest in reliable delivery.

Visit statistics. Only if you accept in the banner: Vercel Web Analytics counts page views, without cookies. It records the page you visit, the site you came from, the country, region and city derived from your IP address, and your browser, operating system and device type. Visitors are told apart by an anonymous code that is discarded after 24 hours, so no profile is built across days. Basis: consent (art. 6(1)(a)), which you can withdraw at any time via "Privacy settings" at the bottom of every page.

• No tracking or advertising cookies. Visits are only counted with your consent (see section 8).
• No selling or renting of personal data, ever.
• No automated decision-making or profiling.
• All fonts and images are hosted by us, so no third party sees your visit.

We share personal data only with the service providers below, and only what each one needs:

• Supabase (servers in the EU): database, login and file storage (accounts, purchases, progress).
• Mollie (Netherlands): payment processing. Mollie is an independent controller for the payment itself, regulated as a payment institution.
• Resend (USA): sends our service emails, such as order confirmations, download links and messages about your account or subscription.
• Brevo (France): sends the newsletter, and our service emails as a backup when Resend is unavailable.
• Billit (Belgium): creates and delivers the invoice for every paid order, including Peppol e-invoicing for organisations.
• Our bookkeeping software (Belgium): receives a copy of every invoice so it can be booked.
• Vercel (USA): hosts the website and its serverless functions and, if you consent, counts visits (Vercel Web Analytics).
• Google / Microsoft: only if you choose to log in with them; they act as independent controllers for that login.
• VIES (European Commission): VAT numbers entered by organisations are validated against this official EU service.

With each processor we have a data processing agreement as required by art. 28 GDPR. We never share your data with anyone else unless the law requires it.

Your account, purchases and progress are stored by Supabase on servers in the European Union. Resend and Vercel are US companies and process data in the United States; both are certified under the EU-US Data Privacy Framework, which the European Commission has recognised as adequate. In addition, and for any access to data from outside the EU by Supabase or its sub-processors, the European Commission's Standard Contractual Clauses apply. You can request a copy of the applicable safeguards via info@quicklearnsheets.com.

• Account, purchases and progress: until you delete your account (button in your account settings) or ask us to delete it.
• Invoices and payment records: 7 years, counted from 1 January of the year after the invoice, as required by Belgian bookkeeping and VAT law, even after account deletion; they are unlinked from your account.
• Newsletter: until you unsubscribe.
• Withdrawal requests: 2 years.
• Email log: 90 days.
• Rate-limiting IP records: at most 48 hours.
• Support emails: as long as needed to handle and follow up your question.

We do not set tracking cookies. On your first visit a banner asks whether we may count visits; you can refuse and everything keeps working. Apart from that, your browser's local storage is used only for functions you ask for, and this data stays on your device:

• your shopping cart and any coupon code you entered;
• your language, dark-mode and small interface preferences;
• your login session (a token kept by our auth provider Supabase so you stay signed in);
• your email address on the login form, only if you tick "Remember my email address";
• your choice in the statistics banner, kept for 6 months.

These are strictly necessary for the service you request and therefore need no consent under the ePrivacy rules. The visit statistics from section 3 are the exception: that script only loads after you accept, and you can change your choice at any time via "Privacy settings" at the bottom of every page.

Our website is aimed at parents, adult learners and teachers. If you are under 16, only create an account with a parent's permission, or use the account your school manages for you.

When a school or organisation manages seats, the school remains the controller for its teachers' and learners' data (accounts and practice progress) and we act as processor. A data processing agreement is available on request via info@quicklearnsheets.com. We never use learner data for marketing.

Under the GDPR you can at any time: access your data, correct it, have it deleted, restrict or object to processing, take your data with you (portability), and withdraw any consent you gave. In your account settings you can download all your data as a file and delete your account yourself; for anything else, email info@quicklearnsheets.com and we will respond within one month.

You also have the right to lodge a complaint with the Belgian supervisory authority: Gegevensbeschermingsautoriteit (GBA), Drukpersstraat 35, 1000 Brussels, +32 (0)2 274 48 00, www.gegevensbeschermingsautoriteit.be, or with the data protection authority of your own EU country.

All traffic is encrypted (HTTPS/TLS). Passwords are stored hashed and are never visible to us. Database access is protected with row-level security so accounts can only read their own data, and administrative actions are logged.

If we change this policy in a meaningful way, we will update the date at the top and, for significant changes affecting you, notify you by email or on the site.

Questions about privacy? Email info@quicklearnsheets.com.