Privacy Policy

Helene B Academy places great importance on the protection of your personal data and respect for your privacy.

This privacy policy informs you about how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. DATA CONTROLLER

The data controller for your personal data is:

For any questions regarding your personal data or this privacy policy, you can contact us at the email address above.

2. PERSONAL DATA COLLECTED

We only collect personal data necessary for the operation of our services and compliance with our legal obligations.

2.1. Identification data

• First and last name
• Email address
• Phone number
• Postal address (for in-person training)

2.2. Connection data

• IP address
• Connection logs
• Cookies (see section 10)
• Information about your browser and device

2.3. Payment data

• Billing information
• Transaction history

2.4. Training data

• Course progress
• Course purchase history
• Grades and results (where applicable)
• Interactions with educational content

3. PURPOSES OF PROCESSING

Your personal data is collected and processed for the following purposes:

3.1. Account management

• Creation and management of your user account
• Authentication and access security
• Profile management

3.2. Provision of training

• Processing your orders
• Access to training content
• Pedagogical monitoring and progress tracking
• Organisation of in-person training
• Issuance of training certificates

3.3. Payment management

• Transaction processing
• Invoicing
• Refund management (where applicable)

3.4. Communication

• Responding to your enquiries and questions
• Customer service and technical support
• Important notifications regarding your account or training
• Sending news and information (with your consent)

3.5. Legal obligations

• Compliance with accounting and tax obligations
• Retention of legal documents (invoices, contracts)
• Responding to requests from competent authorities

3.6. Improvement of our services

• Analysis of Site usage (with your consent)
• Anonymised statistics
• Improvement of user experience

4. LEGAL BASIS FOR PROCESSING

The processing of your personal data is based on the following legal grounds:

• Performance of a contract: For the provision of training and management of your account (Article 6.1.b of the GDPR)
• Legal obligation: For compliance with our accounting, tax and regulatory obligations (Article 6.1.c of the GDPR)
• Consent: For sending newsletters and marketing communications (Article 6.1.a of the GDPR)
• Legitimate interest: For Site security and fraud prevention (Article 6.1.f of the GDPR)

5. RETENTION PERIOD

Your personal data is retained for the periods necessary to fulfil the purposes for which it was collected:

• User account data: Until deletion of your account + 3 years
• Billing data: 10 years (legal accounting obligation)
• Training data: Duration of contract + 3 years
• Connection logs: 12 months maximum
• Cookies: 13 months maximum
• Marketing data: 3 years from the last contact

6. DATA RECIPIENTS

Your personal data is accessible only by:

• Helene B Academy (access strictly limited to what is necessary)
• Technical service providers:
  • Hosting: Webflow, Inc.
  • Secure payment: Stripe, PayPal
• Competent authorities in case of legal obligation

7. YOUR RIGHTS (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request the deletion of your data (subject to legal obligations)
• Right to restriction: Restrict the processing of your data
• Right to data portability: Retrieve your data in a structured format
• Right to object: Object to the processing of your data
• Right to withdraw consent: For processing based on consent

How to exercise your rights?

To exercise these rights, contact us:

• By email: contact@heleneb.fr
• By post: 321 avenue de la Pergola, 06390 Bendejun, FRANCE

8. COMPLAINT TO THE CNIL

If you believe your rights are not being respected, you can file a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL):

• Website: www.cnil.fr
• Address: CNIL - 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

9. DATA SECURITY

Helene B Academy implements appropriate technical and organisational measures to ensure the security and confidentiality of your personal data:

• SSL/TLS encryption of connections
• Secure hosting with certified providers
• Restricted access to data
• Regular backups of data
• Monitoring of access and intrusion attempts

10. COOKIES

What is a cookie?

A cookie is a small text file placed on your device when you visit the Site, allowing information about your browsing to be stored.

Types of cookies used

1. Strictly necessary cookies (mandatory)
   • Essential for the operation of the Site
   • Authentication, cart, security
   • No consent required
2. Performance cookies (with consent)
   • Collection of anonymous information about Site usage
   • Traffic analysis (Google Analytics, etc.)
3. Functional cookies (with consent)
   • Remembering user preferences

Cookie management

You can manage your cookie preferences at any time:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Options > Privacy and security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

11. DATA TRANSFERS OUTSIDE THE EU

Some of our service providers (notably Webflow for hosting) are located in the United States. These transfers are governed by standard contractual clauses approved by the European Commission and comply with GDPR safeguards.

12. CHANGES TO THE POLICY

This privacy policy may be updated. We invite you to consult this page regularly to stay informed of any changes.

Last updated: 07 November 2025

In the event of a substantial change, we will inform you by email or notification on the Site.

Annex — Condensed version (articles 14 & 15)