Privacy Policy
This Privacy Policy explains how BeFluent English collects, uses and protects your personal data when you use this website, complete a free English test, contact us, purchase a digital product, or interact with our online services.
Data controller
Controller: Marco Gianni — 11 rue Petit, 75019 Paris, France —
Contact: contact@befluent-english.com
1. The data we collect
Depending on how you use the website, we may collect the following categories of personal data:
- <strong>Contact forms:</strong> your email and message, and your name if provided.
- <strong>Level tests / TOEIC-style practice:</strong> answers, estimated score, and email address if you ask to receive results.
- <strong>Test result emails:</strong> if you submit your details to receive results, a copy may be sent to you and to BeFluent English for support, follow-up, and service improvement.
- <strong>Purchases:</strong> identity, email, billing information and order data, processed by the payment platform.
- <strong>Analytics:</strong> Google Analytics data, including pages viewed, events, cookie IDs and anonymized IP if enabled.
- <strong>Spam protection:</strong> technical data may be processed through Google reCAPTCHA to protect forms against spam and abuse.
- <strong>AI support tools:</strong> if an AI exam coach or chatbot is available and you choose to use it, we may process your messages, exam-related questions, level information and learning needs to provide a response.
2. Why we use your data (legal bases)
- <strong>Reply to your messages</strong> — legitimate interest or pre-contractual steps.
- <strong>Send your test results and provide support</strong> — contract or legitimate interest.
- <strong>Process purchases and deliver digital products</strong> — contract.
- <strong>Billing and accounting</strong> — legal obligation.
- <strong>Measure site usage through analytics</strong> — consent via the cookie banner.
- <strong>Protect the website from spam, fraud and abuse</strong> — legitimate interest.
- <strong>Email updates, offers and resources</strong> — consent only. You are not added to marketing emails unless you clearly agree to receive them.
3. Who can access your data
Only the site operator and essential service providers, such as hosting provider LWS and analytics provider Google Analytics, may access your data where necessary. We do not sell your data.
Main service providers may include:
- <strong>LWS</strong> — website hosting, domain and/or email services.
- <strong>Google Analytics</strong> — website audience measurement, where consent is given.
- <strong>Google reCAPTCHA</strong> — spam and abuse prevention.
- <strong>Stripe</strong> — payment processing, where used.
- <strong>Payhip</strong> — digital product sales and delivery, where used.
- <strong>Email/SMTP services</strong> — sending contact replies, test results and product delivery emails.
- <strong>OpenAI or another AI provider</strong> — only if an AI exam coach or chatbot is available and you choose to use it.
4. Transfers outside the EU
Google Analytics may transfer data to the United States. Standard Contractual Clauses and safeguards apply. You may decline analytics cookies.
5. How long we keep data
- Contact messages: 24 months.
- Test results linked to an email address: 24 months.
- Analytics data: 14 months.
- Billing data: 10 years, as required by law.
- Email marketing: until you unsubscribe or withdraw consent.
- <strong>Security logs:</strong> kept for a limited period necessary to protect the website and investigate technical issues or abuse.
6. Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. Contact us at contact@befluent-english.com. You can also contact the French data protection authority, CNIL, at cnil.fr.
To exercise your rights, contact us at contact@befluent-english.com.
You also have the right to lodge a complaint with the French data protection authority, the CNIL: cnil.fr.
7. Cookies
On your first visit, a banner lets you accept or decline non-essential cookies, such as analytics cookies. Analytics only load after consent. You can change your settings at any time using “Manage Cookies” in the footer.
Main cookies we use (examples)
- <strong>Essential cookies:</strong> required for language choice, session security, form protection or basic website operation.
- <code>_ga</code>, <code>_ga_*</code> (Google Analytics) — audience measurement — lifespan 13–14 months.
- <strong>Google reCAPTCHA:</strong> may use cookies or technical identifiers to detect spam and abuse.
- <strong>Payment provider cookies:</strong> Stripe or Payhip may use cookies or technical data during checkout.
8. Security
We use reasonable technical and organisational measures, including hosting in France, access controls and backups. No system is perfect — if you notice an issue, please inform us.
Marketing emails, newsletters or promotional resources are only sent where you have given consent or where legally permitted. You can unsubscribe or object at any time.
9. Security
We use reasonable technical and organisational measures to protect personal data, including secure hosting, access controls, limited access to personal data, and reasonable safeguards for forms, emails and payment workflows. No system is perfect. If you notice a security issue, please contact us.
10. Changes to this policy
We may update this Privacy Policy when the website, services, providers, legal requirements or data practices change. The latest version will always be available on this page.
Last updated: November 2025.