Privacy Policy
Last updated: August 11, 2026
Lughaty Academy is committed to protecting the privacy of our students and their families. This policy explains what we collect, why we collect it, who we share it with, and the rights you have over it.
Business Identity
These services are provided by PRESTAWEAVE SAS, registered in France (RCS Bobigny 991 591 652), with its physical office at 33 Rue Francois Mauriac, 93250 Villemomble, France. As the data controller we process personal data under the EU General Data Protection Regulation (GDPR).
1. Information We Collect
From the booking form: the parent or guardian's name, email address and phone number, your country and time zone, and the student's first name, age, subject and level. From the careers form: the applicant's contact details and the CV they attach. We also collect basic usage data about how the site is used, described in section 5.
2. How We Use Information
To schedule and confirm trial sessions, match your child with a suitable teacher, run and support the lessons, manage subscriptions and reply to your messages. If you start a booking and do not finish it, we send you at most three reminders about that booking and then stop. We add your email address to our mailing list, used for occasional news about the academy, only if you tick the separate optional box for it; the trial goes ahead exactly the same if you leave it unticked. Every email we send you carries a one-click unsubscribe link, and unsubscribing also cancels any reminder still queued for you. We never sell your data.
3. Legal Basis
We process booking details in order to provide the service you asked for. Reminders about a booking you started yourself rest on our legitimate interest in helping you finish what you began, together with the consent you give when submitting the form; there are never more than three. Analytics and advertising measurement rely on the consent you give through the cookie banner, and our occasional news about the academy on the separate optional box in the booking form. You can withdraw either consent at any time, through the “Cookie settings” link at the bottom of any page or the one-click unsubscribe link in every email, and withdrawing changes nothing about the lessons you receive.
4. Who We Share Data With, and Where
A small number of providers process data on our behalf: Resend (sending our emails and holding our contact list), Cloudflare (website hosting), Google Analytics (usage statistics) and Meta (measuring the performance of our ads. Your email, phone and name are hashed before they are sent, so Meta does not receive them in readable form). We share your data with nobody else. These providers are established in, or store data in, the United States, so using them involves a transfer of your data outside the European Economic Area. Those transfers are covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it (Cloudflare, Google and Meta), and by the Commission's Standard Contractual Clauses otherwise (Resend). You can ask us for a copy of the safeguards that apply.
5. Cookies and Tracking
Nothing that measures you runs until you say so. On your first visit a banner asks about two things separately, because they are two different purposes: audience measurement (Google Analytics, which counts visits) and advertising (the Meta pixel, which sets its own _fbp and _fbc identifiers and reports back to Meta). You can accept both, refuse both in the same single click, or open the choices and accept one while refusing the other. Nothing is set for a purpose you did not accept, and nothing at all is set if you simply ignore the banner. Refusing costs you no part of the site. Your choice is remembered in your browser for six months and you can change it at any time through the “Cookie settings” link at the bottom of any page; dropping a purpose also deletes the identifiers it had already stored. Cookies that are strictly necessary to make the site work, including the one that stores this very choice, do not require your consent and are always set.
6. Online Sessions
Our 1-on-1 sessions are conducted over secure video conferencing tools. We do not record sessions without explicit prior consent.
7. Children's Data
Our lessons are for children, but bookings are made and managed by a parent or guardian, who provides the child's details and consents on their behalf. We ask for no more about a child than the first name, age, subject and level needed to teach them.
8. How Long We Keep Data
Booking and subscription records are kept while your family is a customer, and afterwards only for as long as accounting rules require. Job applications and attached CVs are deleted within twelve months of the decision. You can ask us to delete your data sooner.
9. Data Security
Your data is stored securely and encrypted in transit. Access is limited to the people who need it to run the lessons and answer your messages.
10. Your Rights
Under the GDPR you may ask to access, correct, delete or receive a copy of your personal data, restrict or object to how we use it, and withdraw consent. Write to us and we will reply within one month. If our answer does not satisfy you, you have the right to complain to the CNIL, the French data protection authority, at cnil.fr.
For any question about this policy, or to exercise any of the rights above, contact us at [email protected] or through our WhatsApp support.