Privacy Policy

Last updated: 28 September 2025

1) Owner and Data Controller

Owner / Controller: High Level (doing business as “French HighLevel”)

Contact email: admin@french-highlevel.fr

If you have questions about this Policy or how we handle your data, contact us at the email above.

2) Scope

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit french-highlevel.fr and when you use our courses, subscriptions, and related services (the Service).

3) Types of Data We Collect

We collect and process the following categories of personal data:

a) Account & Profile Data

Full name, email address, password, phone number (optional)
Role/level (e.g., student, parent), language level, interests

b) Course & Transaction Data

Enrolments, progress, quiz results, certificates
Order details (product, price), partial payment info (e.g., last 4 digits, card brand) processed by our payment provider(s) – we do not store full card numbers
Billing details (country, city, postal code, VAT if applicable)

c) Communications

Support requests, survey responses, and any messages you send to us
Marketing preferences (opt-in/opt-out)

d) Usage Data & Cookies

IP address, device information, browser type/version, pages visited, time on pages, referring/exit pages
Cookie identifiers and similar technologies

Details about specific cookies and trackers are provided in our Cookie Policy.

4) Purposes of Processing

We use your data to:

Provide the Service: create/manage accounts, deliver courses, track progress, issue certificates
Process payments and prevent fraud
Customer support and to respond to requests
Improve our courses and website (analytics, debugging, A/B testing)
Send service communications (e.g., enrolment confirmations, policy updates)
Send marketing messages where permitted (you can unsubscribe at any time)
Comply with legal obligations (tax, accounting, regulatory)

5) Legal Bases (GDPR)

We process personal data under the following legal bases:

Contract (Art. 6(1)(b)): to provide the Service you request (account, enrolments, payments)
Legal obligation (Art. 6(1)(c)): tax/accounting retention, security, compliance
Legitimate interests (Art. 6(1)(f)): analytics, Service improvement, preventing abuse; we balance these interests against your rights
Consent (Art. 6(1)(a)): marketing emails, certain cookies/trackers; you may withdraw consent at any time

6) Data Sources

Data you provide directly (forms, checkout, profile)
Data generated by your use of the Service (progress, results)
Data provided by service providers (e.g., payment confirmation)

7) Sharing & Recipients

We share data only as needed to provide and improve the Service, under contracts and safeguards:

Hosting & infrastructure providers
Payment processors (e.g., Stripe/PayPal or equivalent)
Email & CRM tools (transactional and marketing emails)
Analytics & A/B testing tools
Customer support tools
Professional advisers (legal, accounting) and authorities when required by law

We do not sell your personal data.

8) International Transfers

Some recipients may be located outside your country. Where required, we use safeguards such as EU Standard Contractual Clauses (SCCs) and provider certifications. You may contact us for copies of relevant safeguards.

9) Retention

We keep personal data only as long as necessary for the purposes above and to meet legal requirements. Typical periods include:

Account & course records: for your active use and up to 3 years after last activity
Marketing data: until you withdraw consent or object
Support tickets: up to 3 years after closure
Order/invoice records: up to 10 years (accounting/tax laws)

When retention ends, we delete or anonymize data securely.

10) Your Rights (EEA/UK where applicable)

Subject to conditions and local law, you may:

Access your data and obtain a copy
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict processing in certain cases
Object to processing based on legitimate interests or for direct marketing
Portability: receive your data in a commonly used format and transmit it to another controller
Withdraw consent at any time for processing based on consent
Lodge a complaint with your supervisory authority (e.g., CNIL in France)

To exercise rights, email admin@french-highlevel.fr. We will respond within one month as required by law.

11) Cookies & Trackers

We use cookies and similar technologies to operate the site, remember preferences, analyze usage, and (with consent) for marketing. See the Cookie Policy for details, including a list of cookies, purposes, and retention. You can manage consent via our cookie banner or your browser settings.

12) Children’s Privacy

Our courses are intended for users 16+. If you are under the age where consent is required in your country, you must have parental/guardian consent. If we learn that we processed data of a child without appropriate consent, we will delete it.

13) Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit (TLS), access controls, and regular review of vendors. No method is 100% secure; we work to prevent and detect unauthorized access.

14) Third‑Party Links & Services

The Service may link to third‑party sites or integrate third‑party tools. Those providers process data under their own policies. We encourage you to review their privacy policies.

15) Changes to This Policy

We may update this Policy from time to time. We will post the updated version here and update the “Last updated” date. Significant changes may also be notified via email or in‑app notice where appropriate.

16) Definitions

“Personal Data”: any information that identifies or can identify an individual
“Processing”: any operation performed on Personal Data (collection, storage, use, etc.)
“Controller”: the entity that determines purposes and means of processing
“Processor”: a service provider processing data on behalf of the Controller

17) Contact

For privacy questions or requests: admin@french-highlevel.fr