Privacy Policy

Helene B Academy places great importance on the protection of your personal data and respect for your privacy.

This privacy policy informs you about how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. DATA CONTROLLER

The data controller for your personal data is:

For any questions regarding your personal data or this privacy policy, you can contact us at the email address above.

2. PERSONAL DATA COLLECTED

We only collect personal data necessary for the operation of our services and compliance with our legal obligations.

2.1. Identification data

• First and last name
• Email address
• Phone number
• Postal address (for in-person training)

2.2. Connection data

• IP address
• Connection logs
• Cookies (see section 10)
• Information about your browser and device

2.3. Payment data

• Billing information
• Transaction history

2.4. Training data

• Course progress
• Course purchase history
• Grades and results (where applicable)
• Interactions with educational content

3. PURPOSES OF PROCESSING

Your personal data is collected and processed for the following purposes:

3.1. Account management

• Creation and management of your user account
• Authentication and access security
• Profile management

3.2. Provision of training

• Processing your orders
• Access to training content
• Pedagogical monitoring and progress tracking
• Organisation of in-person training
• Issuance of training certificates

3.3. Payment management

• Transaction processing
• Invoicing
• Refund management (where applicable)

3.4. Communication

• Responding to your enquiries and questions
• Customer service and technical support
• Important notifications regarding your account or training
• Sending news and information (with your consent)

3.5. Legal obligations

• Compliance with accounting and tax obligations
• Retention of legal documents (invoices, contracts)
• Responding to requests from competent authorities

3.6. Improvement of our services

• Analysis of Site usage (with your consent)
• Anonymised statistics
• Improvement of user experience

4. LEGAL BASIS FOR PROCESSING

The processing of your personal data is based on the following legal grounds:

• Performance of a contract: For the provision of training and management of your account (Article 6.1.b of the GDPR)
• Legal obligation: For compliance with our accounting, tax and regulatory obligations (Article 6.1.c of the GDPR)
• Consent: For sending newsletters and marketing communications (Article 6.1.a of the GDPR)
• Legitimate interest: For Site security and fraud prevention (Article 6.1.f of the GDPR)

5. RETENTION PERIOD

Your personal data is retained for the periods necessary to fulfil the purposes for which it was collected:

• User account data: Until deletion of your account + 3 years
• Billing data: 10 years (legal accounting obligation)
• Training data: Duration of contract + 3 years
• Connection logs: 12 months maximum
• Cookies: 13 months maximum
• Marketing data: 3 years from the last contact

6. DATA RECIPIENTS

Your personal data is accessible only by:

• Helene B Academy (access strictly limited to what is necessary)
• Competent authorities in case of legal obligation

Sub-processors and technical service providers

In accordance with Article 13(1)(e) of the GDPR, here is the complete list of our sub-processors:

• Firebase / Google Cloud Platform (Google LLC, United States) :Authentication, database, application hosting, server functions. Privacy Policy
• Google Analytics 4 (Google LLC, United States) :Traffic and user behaviour analysis (ID: G-6CFE0TK8X0), activated only with your consent. Privacy Policy
• Google Gemini AI (Google LLC, United States) :AI-powered educational assistance (4 AI professors in the Academy). Conversations are transmitted via a secure Cloud Functions proxy. Terms of Use
• Stripe (Stripe, Inc., United States) :Secure payments and Stripe Connect for technician payments. Bank details are never stored on our servers. Privacy Policy
• SendGrid (Twilio Inc., United States) :Transactional emails (confirmations, notifications). Privacy Policy
• reCAPTCHA Enterprise (Google LLC, United States) :Protection against bots and automated abuse. Privacy Policy
• Finsweet Cookie Consent (Finsweet, United States) :Cookie consent management (opt-in cookie banner). Privacy Policy
• Webflow (Webflow, Inc., United States) :Hosting for the heleneb.fr showcase website. Privacy Policy
• PayPal (PayPal Holdings, Inc., United States) :Alternative secure payment. Privacy Policy

6bis. ARTIFICIAL INTELLIGENCE

Helene B Academy uses artificial intelligence to enhance the educational experience. In accordance with the European AI Regulation (EU AI Act) and the GDPR, we transparently inform you about this usage.

Use of AI

The Academy integrates 4 virtual professors powered by Google Gemini AI to provide personalised educational assistance (explanations, exercises, technical advice). AI is used exclusively as a learning support tool.

Data processing

• Provider: Google Gemini (Google LLC, United States)
• Transmission: Conversations are transmitted to Google Gemini via a secure Cloud Functions proxy (encryption in transit)
• Storage: AI conversations are stored in your Firebase user space and can be deleted at any time
• Tracking: AI token usage is recorded for cost management purposes (gemini_usage collection)

Your rights regarding AI

• You can delete all your AI conversations via the account deletion function (GDPR Art. 17)
• You can export your AI conversations via the data export function (GDPR Art. 20)
• No automated decision-making within the meaning of Article 22 of the GDPR is carried out by the AI. The virtual professors only provide educational suggestions.

7. YOUR RIGHTS (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request the deletion of your data (subject to legal obligations)
• Right to restriction: Restrict the processing of your data
• Right to data portability: Retrieve your data in a structured format
• Right to object: Object to the processing of your data
• Right to withdraw consent: For processing based on consent

How to exercise your rights?

To exercise these rights, contact us:

• By email: contact@heleneb.fr
• By post: 321 avenue de la Pergola, 06390 Bendejun, FRANCE

8. COMPLAINT TO THE CNIL

If you believe your rights are not being respected, you can file a complaint with the Commission Nationale de l'Informatique et des Libertes (CNIL):

• Website: www.cnil.fr
• Address: CNIL - 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

9. DATA SECURITY

Helene B Academy implements appropriate technical and organisational measures to ensure the security and confidentiality of your personal data:

• SSL/TLS encryption of connections
• Secure hosting with certified providers
• Restricted access to data
• Regular backups of data
• Monitoring of access and intrusion attempts

10. COOKIES

What is a cookie?

A cookie is a small text file placed on your device when you visit the Site, allowing information about your browsing to be stored.

Types of cookies used

1. Strictly necessary cookies (mandatory)
   • Essential for the operation of the Site
   • Authentication, cart, security
   • No consent required
2. Performance cookies (with consent)
   • Collection of anonymous information about Site usage
   • Traffic analysis (Google Analytics, etc.)
3. Functional cookies (with consent)
   • Remembering user preferences

Cookie management

You can manage your cookie preferences at any time:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Options > Privacy and security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

11. DATA TRANSFERS OUTSIDE THE EU

Some of our service providers (notably Webflow for hosting) are located in the United States. These transfers are governed by standard contractual clauses approved by the European Commission and comply with GDPR safeguards.

12. CHANGES TO THE POLICY

This privacy policy may be updated. We invite you to consult this page regularly to stay informed of any changes.

Last updated: 25 February 2026

In the event of a substantial change, we will inform you by email or notification on the Site.

Annex : Condensed version (articles 14 & 15)