Privacy Policy

Effective date: 25/08/2026

We at Albert Learning sincerely value your privacy and are committed to safeguarding your personal data in compliance with relevant data protection legislation, such as the General Data Protection Regulation (GDPR). The purpose of this privacy statement is to provide you with an understanding of how we manage your data while you use our learning platform online. You recognize and consent to the practices outlined in this policy by using our services.

1. Data Controller

The entity responsible for managing your personal information is:

Albert Learning
57 Rue du Rouet 13008 Marseille, France
E-mail: contact@albert-learning.com

2. Information We Collect

Below is the full list of the categories of personal data we process, and where each category comes from.

• Account and identity data: Title, first name, last name, email address, password (stored only as an irreversible hash), phone number, date of birth, nationality, and postal address (street, postal code, city, country). You provide these when you register or edit your profile.
• Learner profile data: Profile picture, gender, native language, languages spoken, target language, current level, occupation, workplace, and personal interests. Each account may hold several learner profiles, including profiles for children, in which case we record that the learner is a minor and their age group.
• Learning data: Lesson bookings and cancellations, attendance, lesson reports written by your teacher, exercise and exam results, time spent, CEFR assessments, and the ratings and feedback you give.
• Payment data: Your Stripe customer identifier, transaction references, amounts, currency, invoices, and instalment schedules. We never receive or store your card number: card details are entered directly on Stripe pages.
• Data from Facebook and Google sign-in: If you choose to sign in with Facebook or Google, we receive your email address, first name, last name, and the identifier assigned to you by that provider. See section 4 for full details.
• Technical data: IP address, browser user agent, device type, pages visited, and cookie identifiers. Your country is derived from your IP address using a MaxMind GeoLite2 database installed on our own servers, so your IP address is not sent to any third party for that purpose.
• Acquisition data: The source, campaign, and website through which you reached us, and the referral code of the member who introduced you, where applicable.
• Preferences and consents: Interface language, time zone, currency, preferred video-conferencing tool, cookie choices, and your newsletter and reminder settings.
• Communication data: Emails exchanged with us, support chat conversations, contact form messages, and the reviews you publish.
• Vocational training data: If you fund your training through the French Compte Personnel de Formation (CPF), we also process your employment status, target certification, initial and target level, file number, and supporting documents.
• Job application data: If you apply for a position with us, we process your email, phone number, country, city, languages, experience, availability, and the CV you upload.

3. Purposes and Legal Bases

We only process your data for the purposes listed below. For each purpose, this table states the data used, the legal basis under Article 6 of the GDPR, and how long we keep the data.

We do not use your personal data to take any decision about you by automated means alone, and we do not sell or rent your data.

4. Facebook Login and Meta

What we receive from Meta when you sign in with Facebook. When you use the Sign in with Facebook button, we ask Facebook for two permissions only, email and public_profile. From these, we keep exactly four items:

• Your email address, which becomes your login and is used to match an account you may already have with us.
• Your first name, used on your account and your learner profile.
• Your last name, used on your account and your learner profile.
• Your Facebook user identifier, which we store solely to recognise you the next time you sign in with Facebook.

We do not store your Facebook profile picture, and we do not receive your friend list, your posts, your photos, your gender, your date of birth, your location, or any other content from your Facebook account. The same applies to Google sign-in, where we receive and keep your email address, first name, last name, and Google identifier.

What we send to Meta for measurement. If, and only if, you accept analytics cookies in our banner, we use the Meta Pixel in your browser and the Meta Conversions API on our servers to measure how our advertising performs. The following is then shared with Meta:

• Your email address, your account identifier, and your country code, each irreversibly hashed with SHA-256 before being sent.
• Your IP address and browser user agent, which are sent unhashed, as Meta requires them to match the event.
• The Meta cookie identifiers _fbp and _fbc, the address of the page you are on, and, for a purchase, the amount and the currency.

If you refuse analytics cookies, neither the Meta Pixel nor the Conversions API is loaded or called, and none of the above is sent.

How to opt out or disconnect Facebook. You can change your cookie choices at any time through the cookie banner. You can also revoke our access from Facebook itself, under Settings and privacy, then Settings, then Apps and websites. To have the Facebook identifier and the rest of your data deleted from our side, follow the procedure on our data deletion page: Data Deletion

5. Data Sharing and Transfers

Your personal information is never sold or rented. We share it only with the service providers we need to run the platform, and only with the data each of them requires:

• Stripe — payments: your email address, full name, and billing address. Card details are handled entirely by Stripe and never reach our servers.
• Meta — advertising measurement: the data described in section 4, subject to your consent.
• Google — Tag Manager, Google Ads, and reCAPTCHA: browsing data subject to your consent, and, on our contact and job application forms, your IP address and user agent so that reCAPTCHA can tell you apart from a robot.
• Pinterest — advertising measurement: browsing data, subject to your consent.
• Tawk.to — support chat: the messages you send us and the technical data attached to your session.
• Brevo — email delivery: your email address, first name, last name, and the content of the messages we send you.
• Trustacy — customer reviews: your email address, first name, last name, and order reference, so that you can be invited to leave a review.
• OVH — hosting: the data stored by the platform is hosted on their infrastructure in France.
• Legal Authorities: When mandated by legislation or to safeguard our interests and rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

Your lessons take place on Google Meet, Whereby, or Skype. We only generate the meeting link; when you join a lesson, you connect to that provider directly and their own privacy policy applies.

Some of your data is accessible to our team in India, and some of our providers are established in the United States. Where data leaves the European Economic Area, the transfer is covered by the European Commission Standard Contractual Clauses or by an adequacy decision.

6. Data Retention

The retention period for each purpose is given in the table in section 3. In summary, your account and learning data are kept for as long as your account exists, and are removed or anonymised once you ask us to delete it. Invoices and accounting records are kept for 10 years, as required by French tax and commercial law, even after your account is deleted.

7. Your Rights

Under French and EU data protection laws, you have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You can ask us to update or correct inaccurate or incomplete information.
• Erasure: You can ask us to delete your account and your personal data. Section 8 explains exactly how.
• Restriction: You can ask us to limit the processing of your data in specific situations.
• Objection: You can object to processing based on our legitimate interest, and object at any time to the use of your data for direct marketing.
• Data Portability: You have the right to receive your information in a structured, commonly used format.
• Withdrawal of consent: Where we rely on your consent, you can withdraw it at any time, without affecting what we did before you withdrew it.

To exercise any of these rights, write to us at contact@albert-learning.com. We answer within one month of receiving your request, as required by Article 12 of the GDPR. If your request is particularly complex, we may extend that period by two further months and will tell you why within the first month.

If you believe we have not handled your data properly, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

8. How to Request Deletion of Your Data

You can ask us to delete your account and the personal data attached to it at any time, free of charge. Here is how:

1. Send an email to contact@albert-learning.com from the address associated with your account, or ask through the support chat on our website. Use Data deletion request as the subject, and give us your first name, last name, and the email address of the account.
2. We confirm receipt, verify that the request comes from the account holder, and may ask you one question to confirm your identity.
3. We delete or anonymise your data within one month, and we email you to confirm once it is done.

Deletion covers your account, your learner profiles, your learning history and exercise results, your Facebook and Google identifiers, your communication preferences, and your marketing data. Invoices and accounting records are kept for 10 years because French law requires it, and CPF training records are kept for the period set by the applicable regulations. These retained records are no longer used to contact you.

Full step-by-step instructions are on our dedicated data deletion page: Data Deletion

9. Data Security

We take data security very seriously and have put in place comprehensive safeguards to prevent unauthorized access, loss, or abuse. These measures include encryption, secure servers, and regular security audits.

10. Cookies and Tracking Technologies

When you first visit our website, a banner lets you accept or refuse cookies. We use two categories:

• Strictly necessary cookies: These keep you signed in, secure your session, and remember your cookie choice. They cannot be switched off because the site would not work without them.
• Analytics and advertising cookies: These are only set if you accept them. They cover Google Tag Manager and Google Ads, the Meta Pixel, and the Pinterest tag, and they let us measure how our site and our advertising perform.

Your choice is stored in a cookie named cc_cookie and you can change it at any time by reopening the banner from this website. You can also delete cookies through your browser settings.

11. Children’s Privacy

Our lessons are open to children, but an account may only be created and managed by a parent or legal guardian, who provides the child data and consents to it being processed. We do not knowingly allow a child to create an account on their own. If we become aware that we have collected data from a child without parental consent, we will take prompt steps to delete the information.

12. Changes to This Policy

This Privacy Policy may be modified periodically to reflect changes in our practices or regulatory requirements. Any modifications will be disclosed on our website along with the new effective date.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, we are here to help. Please feel free to reach out to us at:

Albert Learning
57 Rue du Rouet 13008 Marseille, France
E-mail: contact@albert-learning.com