Privacy Policy

Last updated: May 11, 2026

1. Controller

Expatly is a brand of PULPOPIXEL GbR
Am Tiwitt 29, 33189 Schlangen, Germany
Email: hey@expatly.org

2. Hosting & Infrastructure

Our website is hosted by Raidboxes GmbH, Hafenweg 16, 48155 Münster, Germany. Raidboxes processes personal data on our behalf for the purpose of providing hosting services. The processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in the reliable and secure operation of our website. We have concluded a data processing agreement (DPA) with Raidboxes in accordance with Art. 28 GDPR.

3. Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser transmits. These include browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. Processing is carried out in accordance with Art. 6(1)(f) GDPR.

4. Analytics

We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. Google Analytics uses cookies that enable analysis of your use of the website. IP anonymization is activated. Data may be transferred to servers of Google LLC in the United States based on EU Standard Contractual Clauses.

The use of Google Analytics is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the cookie settings on this website. Alternatively, you may prevent data collection by downloading the browser plugin at: tools.google.com/dlpage/gaoptout

5. Email Marketing & Waitlist

We use MailerLite (UAB "MailerLite", Paupio g. 28, Vilnius, Lithuania) to manage our email list and send updates. Your email address is stored on EU servers. We send emails based on your explicit consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email.

MailerLite privacy policy: mailerlite.com/legal/privacy-policy

6. Social Media & Messaging

Instagram / ManyChat

We use ManyChat to automate Instagram Direct Message interactions. When you interact with our Instagram account, your Instagram username and messages may be processed by ManyChat Inc., 535 Mission St, San Francisco, CA 94105, USA. Legal basis: Art. 6(1)(a) GDPR (consent via interaction).

YouTube

Our content is distributed via YouTube (Google Ireland Limited). When you watch our videos, YouTube's privacy policy applies: policies.google.com/privacy

7. Course Platform & Purchases

Our courses are delivered via our WordPress-based platform using TutorLMS. When you purchase a course, we collect your name, email address, and payment information. Payments are processed by third-party providers. We do not store your payment details on our servers.

Stripe (Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA): stripe.com/privacy

PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg): paypal.com/privacy

Legal basis for purchases: Art. 6(1)(b) GDPR (contract performance).

8. Affiliate Program

We operate an affiliate program to allow partners to earn commission by referring customers. If you participate, we collect your name, email address, payment details, and referral activity. Legal basis: Art. 6(1)(b) GDPR (contract performance).

9. Amazon Associates

We participate in the Amazon Associates affiliate program. When you click our Amazon links and make a purchase, we may earn a commission. Amazon's privacy policy applies: amazon.de/privacy

10. Cookies

  • Technically necessary cookies – required for the website to function. No consent required.
  • Analytics cookies – Google Analytics 4. Requires consent.
  • Marketing cookies – for retargeting where applicable. Requires consent.

You can manage your cookie preferences via our cookie banner at any time.

11. Data Subject Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact us at hey@expatly.org.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

Responsible supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

14. Data Retention

Personal data will only be stored for as long as necessary for the respective purpose or as required by law. Email subscribers can request deletion at any time by contacting hey@expatly.org.

15. Changes to this Policy

We may update this Privacy Policy occasionally. The date at the top of this page indicates when it was last revised.