Your data and your rights
Privacy Policy
Last updated: 25 July 2026
This policy explains what personal data Aletia English collects, why it is used, who receives it and how you can exercise your rights.
1. Who controls your data
The data controller is Aletia Mai, trading as Aletia English.
Contact the controllerAletia English — Aletia Mai
9 Rue de Maille
91310 Montlhéry, France
hello@aletiaenglish.com
+33 7 44 76 68 36
No data protection officer has been appointed because the current processing activities do not require one.
2. Data we collect
- Newsletter: first name, email address, consent record, subscription status and technical delivery information.
- Enquiries and lessons: the contact details and information you choose to provide by email or WhatsApp, such as your English level, goals and availability.
- Website operation: security and server log information such as IP address, date, requested page, browser and error data.
- Language preference: your chosen website language is stored locally in your browser.
3. Why we use it and our legal bases
- To send the newsletter and related English-learning content: your consent.
- To answer enquiries and arrange lessons: steps requested before entering a contract and, where relevant, performance of a contract.
- To secure, maintain and improve the website: our legitimate interest in operating a safe and reliable service.
- To meet accounting, tax and other legal duties: compliance with legal obligations.
You may withdraw newsletter consent at any time without affecting processing that took place before withdrawal.
4. Newsletter and Brevo
The signup form and mailing list are provided by Brevo (Sendinblue), which processes data on our behalf. Brevo may process subscription, delivery and engagement information according to the account settings. Every marketing email contains an unsubscribe link. You can also ask hello@aletiaenglish.com to remove you.
We do not sell the mailing list or share it with other businesses for their own marketing.
5. Recipients and international transfers
Data may be available only to Aletia English and service providers needed to operate the website, communications and records, including Brevo and the hosting provider. If you choose WhatsApp, Instagram or LinkedIn, those providers process information under their own privacy terms.
Where a provider processes data outside the European Economic Area, appropriate safeguards must be used, such as an adequacy decision or the European Commission’s standard contractual clauses.
6. How long we keep data
- Newsletter details are used while you remain subscribed. After unsubscribing, a minimal suppression or consent record may be retained for up to three years, or longer where necessary to establish compliance or resolve a claim.
- Enquiry records are normally retained for up to three years after the last meaningful contact, unless they lead to a contractual relationship or must be kept longer for legal reasons.
- Contract, invoice and accounting records are retained for the periods required by law; French accounting records may need to be kept for ten years.
- Technical logs are retained according to the hosting provider’s security schedule and only as long as reasonably necessary.
7. Your rights
You may ask to access, correct or erase your data; restrict or object to processing; receive portable data where applicable; and withdraw consent at any time. You may also lodge a complaint with the French data protection authority, the CNIL.
Contact: hello@aletiaenglish.com. CNIL: www.cnil.fr.
8. Cookies and local storage
The website does not currently use advertising or non-essential analytics cookies. It stores only a language preference in your browser. The embedded Brevo form may use storage or cookies that are technically necessary to provide and secure the signup service. If non-essential tracking tools are introduced, this policy will be updated and consent will be requested where required.
9. Children
English lessons may be provided to children, but the newsletter is intended to be subscribed to by an adult or with appropriate parental authorisation. Please do not send sensitive information about a child through the signup form.
10. Security and policy updates
Reasonable technical and organisational measures are used to protect personal data. No internet service can guarantee absolute security. This policy may be updated when services, providers or legal requirements change; the date above shows the current version.