Privacy Policy

This policy describes how ARCHIREF (“Future Architecture”, SIRET 790 929 921 00027), as data controller, collects and processes the personal data of users and customers of this website, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and French data protection law.

1. Data we collect

Depending on how you use the site, we collect:

• Identification data: name, email address, password (stored encrypted);
• Order and billing data: purchased products, order history, payment information processed by our payment provider (we do not store card numbers ourselves);
• Usage data: course progress, interactions with the platform, language preferences;
• Technical data: IP address, browser type, cookies (see Section 5);
• Communication data: messages sent through our contact or support forms.

2. Purposes and legal bases

• Contract performance: processing orders and granting access to courses and packs (GDPR Article 6.1.b);
• Legal and accounting obligations: retaining invoices and proof of consent to the Terms of Sale (Article 6.1.c);
• Legitimate interest: improving the site, fraud prevention, usage statistics (Article 6.1.f);
• Consent: marketing communications and non-essential cookies, where applicable (Article 6.1.a) — you may withdraw this consent at any time.

3. Recipients of your data

Data is processed by our team and shared, strictly as necessary, with our technical processors: hosting (Vercel, Supabase), payment (Stripe), transactional email delivery, analytics and customer support tools. These providers only use your data to perform the services we entrust to them.

4. Retention period

Account data is kept for the duration of the contractual relationship, then archived for the periods required by law (including accounting and tax obligations). Proof of consent to the Terms of Sale and to the waiver of the right of withdrawal is kept for as long as necessary to defend our position in the event of a dispute.

5. Cookies

This website only uses cookies strictly necessary for it to function (authentication, cart, language preferences), which are exempt from prior consent under applicable law. We do not use audience-measurement or advertising cookies subject to consent, so no cookie consent banner is currently needed. This section will be updated if that changes.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to the processing of, and port your data, as well as the right to set directives on the fate of your data after your death. You may exercise these rights by contacting us via our contact form. You also have the right to lodge a complaint with your national data protection authority (in France, the CNIL — cnil.fr).

7. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.

8. Contact

For any question about this policy, contact us via our contact form. See also our Legal Notice.