Privacy Policy | Oh Oui French

1. Who we are

Oh Oui French is an online French tutoring service operated by Camille (ohouifrench@gmail.com). When this policy says “we”, “us” or “our”, it refers to Oh Oui French.

This policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data.

2. Data we collect

We collect the following categories of personal data:

Account information: name, email address and password when you create an account.
Booking information: lesson type, date and time preferences, and any notes you provide about your learning goals.
Payment information: billing details processed securely by Stripe. We never see or store your full card number.
Purchase history: records of lesson packs and digital products you have purchased.
Communications: messages you send via our contact form or by email.
Usage data: pages visited, browser type, and approximate location (country level), collected automatically via standard web technologies.

3. Why we collect your data

We use your data to:

Create and manage your account
Process bookings and payments
Deliver your purchased digital products
Send booking confirmations, lesson reminders and receipts
Respond to your questions and support requests
Improve the quality of our lessons and website
Comply with legal and tax obligations

We do not sell your personal data to third parties. We do not use your data for advertising or profiling.

4. Legal basis for processing

We process your data on the following legal grounds:

Contract performance: to deliver lessons and products you have purchased.
Legitimate interest: to respond to enquiries and improve our service.
Legal obligation: to keep financial records as required by law.
Consent: where you have opted in to receive communications from us (you can withdraw consent at any time).

5. Third-party services

We work with a small number of trusted service providers who process data on our behalf:

Stripe — payment processing. Your card details are handled directly by Stripe and subject to Stripe's Privacy Policy.
Supabase — secure database and authentication hosting.
Resend — transactional email delivery (booking confirmations, receipts).
Microsoft Teams — the platform used to conduct live lessons.
Vercel — website hosting.

Each provider is bound by strict data processing agreements and is prohibited from using your data for their own purposes.

6. Data retention

We keep your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are legally required to retain financial records (typically 7 years).

7. Your rights

Depending on your country of residence, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict how we process your data
Receive a copy of your data in a portable format
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at ohouifrench@gmail.com. We will respond within 30 days.

8. Cookies

We use only essential cookies required for the website to function (authentication session cookies). We do not use advertising cookies or third-party tracking cookies.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure password hashing, and access controls. No method of transmission over the internet is 100% secure, but we are committed to protecting your information.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact us at ohouifrench@gmail.com or via our contact form.