Privacy Policy
Last updated: 3 January 2026Atelier du Français SASU ("we", "us", "our") respects your privacy. This policy explains what personal data we collect through atelierdufrancais.fr, why we collect it, how long we keep it, and the rights you have over it. It applies to visitors, prospective students, enrolled students and job applicants.
1. Who is responsible for your data
The data controller is Atelier du Français SASU, 24 Rue des Rosiers, 75004 Paris, France, RCS Paris 852 349 761. You can reach our data protection contact at [email protected].
2. What data we collect
- Contact and enrolment data: name, email address, phone number, postal address, course preference, and any message you send us through the booking or contact forms.
- Account and learning data: attendance records, level assessments, progress notes and exam results, if you enrol in a course.
- Billing data: billing address and payment confirmation details. Full card numbers are processed by our payment provider and are never stored on our servers.
- Technical data: IP address, browser type, device type, and pages visited, collected via cookies and similar technologies as described in Section 7.
- Communications: records of emails, calls or messages you exchange with our team.
3. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and booking trial lessons | Consent / pre-contractual steps (Art. 6(1)(a)/(b)) |
| Delivering and administering courses you've enrolled in | Performance of a contract (Art. 6(1)(b)) |
| Invoicing and accounting records | Legal obligation (Art. 6(1)(c)) |
| Sending course reminders and service updates | Performance of a contract / legitimate interest (Art. 6(1)(b)/(f)) |
| Marketing emails about new courses (only if opted in) | Consent (Art. 6(1)(a)) |
| Analytics and site improvement | Consent, via cookie banner (Art. 6(1)(a)) |
4. Who we share data with
We do not sell your personal data. We share limited data with: our payment processor, to take course payments; our email and scheduling software providers, to send confirmations and reminders; our accountant, for invoicing; and public authorities, where required by law. Any such provider is bound by a data processing agreement and may only use your data to provide the relevant service to us.
5. International transfers
Some of our service providers may process data outside the European Economic Area. Where this occurs, we rely on the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism to protect your data.
6. How long we keep your data
- Enquiry and trial-lesson data: 24 months from your last contact with us, if you do not enrol.
- Student records: for the duration of your enrolment plus 5 years, to comply with our record-keeping obligations as a training provider.
- Invoices and accounting records: 10 years, as required under French commercial law.
- Marketing consent: until you withdraw consent, reviewed every 24 months.
7. Cookies
We use three categories of cookies:
- Essential cookies — required for the site to function, including remembering your cookie preferences. These cannot be switched off.
- Analytics cookies — help us understand how visitors use the site, only set with your consent.
- Marketing cookies — used to show relevant course offers on other sites, only set with your consent.
You can change your cookie preferences at any time using the "Cookie settings" link in the footer, or by clearing your browser's local storage. Your choice is stored locally on your device and is not automatically shared with third parties.
8. Your rights
If you are located in the European Economic Area, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, 75007 Paris, at www.cnil.fr.
If you are a California resident, you have rights under the CCPA/CPRA to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information — we do not sell or share personal information as defined by the CCPA. You may also designate an authorised agent to exercise these rights on your behalf.
To exercise any of these rights, email [email protected]. We will respond within one month (GDPR) or 45 days (CCPA).
9. Data security
We use encryption in transit (TLS), access controls, and regular security reviews to protect your data. No system is 100% secure, and we encourage you to use a strong, unique password for your student account.
10. Children's data
Our courses are intended for adults aged 18 and over. If we knowingly collect data from a minor without appropriate parental consent, we will delete it promptly upon discovery.
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to enrolled students and by an updated "Last updated" date at the top of this page.
12. Contact
Questions about this policy or your data can be sent to [email protected] or by post to Atelier du Français SASU, 24 Rue des Rosiers, 75004 Paris, France.