• PRIVACY POLICY

 

WELLNESS ACADEMY

 

1. INTRODUCTION AND SCOPE

 

This Privacy Policy (« Policy ») describes how WELLNESS ACADEMY (« Company, » « we, » « us, » « our »), a French company registered under SIRET number 938 249 539 00017 with its principal place of business at 229 RUE SAINT-HONORE, 75001 PARIS, FRANCE, collects, uses, stores, shares, and protects your personal information when you use our website located at https://wellnessacademy360.com/ (« Platform ») and our educational services.

This Policy applies to all personal information we collect through our Platform, digital courses, educational materials, certification programs, customer support interactions, and any other services we provide. By accessing our Platform, creating an account, purchasing digital courses, or otherwise using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

As an international education provider serving students primarily in the United States and Canada while operating from France, we are committed to complying with applicable data protection laws including the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

 

2. COMPANY INFORMATION AND DATA CONTROLLER

 

WELLNESS ACADEMY serves as the data controller for the personal information collected through our Platform and services. As the data controller, we determine the purposes and means of processing your personal information in accordance with applicable privacy laws.

Contact Information:

• Legal Name: WELLNESS ACADEMY
• Business Address: 229 RUE SAINT-HONORE, 75001 PARIS, FRANCE
• Company Registration: SIRET 938 249 539 00017
• General Contact: support@wellnessacademy360.com

For residents of the European Union, we have appointed a Data Protection Officer (DPO) who can be contacted at: support@wellnessacademy360.com

 

3. INFORMATION WE COLLECT

 

3.1 Personal Information You Provide Directly

When you interact with our Platform and services, you may provide us with personal information including:

 

Account Registration Information:

• Full name and preferred name
• Email address
• Password (encrypted and hashed)
• Country of residence
• Preferred language settings

Payment and Billing Information:

• Billing name and address
• Payment method details (processed securely through third-party payment processors)
• Transaction history and purchase records
• Tax identification numbers where required

Educational and Course Information:

• Course enrollment records
• Progress tracking and completion status
• Assessment scores and quiz results
• Learning preferences and accessibility needs
• Course feedback and evaluations
• Certificate completion records

Communication Information:

• Customer support inquiries and correspondence
• Survey responses and feedback
• Communications preferences and consent records

3.2 Information Collected Automatically

When you use our Platform, we automatically collect certain technical and usage information:

 

Device and Technical Information:

• IP address and geolocation data
• Device type, operating system, and browser information
• Screen resolution and device capabilities
• Referring website and exit pages

Usage and Analytics Information:

• Pages visited and content accessed
• Time spent on different sections of our Platform
• Click patterns and navigation paths
• Course progress and engagement metrics
• Search queries and interactions with course materials

Cookies and Tracking Technologies:

• Essential cookies for Platform functionality
• Analytics cookies to understand user behavior
• Preference cookies to remember your settings
• Marketing cookies for relevant content delivery (with consent)

3.3 Information from Third Parties

We may receive information about you from third-party sources including:

 

Payment Processors:

• Transaction verification and fraud prevention data
• Payment method validation information

Marketing and Analytics Partners:

• Demographic and interest-based information
• Marketing campaign effectiveness data

Social Media Platforms:

• Public profile information if you choose to connect social media accounts
• Referral information from social sharing
  

4. HOW WE USE YOUR INFORMATION

 

We use your personal information for the following purposes, based on appropriate legal bases as required by applicable privacy laws:

 

4.1 Educational Service Delivery

Course Access and Management:

• Providing access to purchased digital courses and educational materials
• Tracking your learning progress and course completion
• Issuing certificates of completion upon meeting requirements
• Personalizing your learning experience and recommendations
• Delivering technical support for Platform access

Communication and Support:

• Sending course access credentials and login information
• Providing customer support and responding to inquiries
• Sending important updates about your courses or our services
• Delivering newsletters and educational content (with consent)

4.2 Business Operations and Legal Compliance

Transaction Processing:

• Processing payments and managing billing
• Maintaining accurate financial records
• Preventing fraud and ensuring transaction security
• Complying with tax and financial reporting obligations

Legal and Regulatory Compliance:

• Complying with applicable privacy and data protection laws
• Responding to legal requests and government inquiries
• Protecting our rights and interests in legal proceedings
• Ensuring compliance with consumer protection laws

4.3 Platform Improvement and Analytics

Service Enhancement:

• Analyzing usage patterns to improve our Platform and courses
• Conducting research to develop new educational content
• Testing new features and functionalities
• Optimizing Platform performance and user experience

Marketing and Business Development:

• Understanding our audience and their educational needs
• Developing targeted marketing campaigns (with consent)
• Measuring the effectiveness of our marketing efforts
• Identifying opportunities for new courses and services

5. LEGAL BASES FOR PROCESSING (GDPR)

For users in the European Union, we process your personal information based on the following legal bases:

Contract Performance: Processing necessary to fulfill our educational services contract with you, including course delivery, payment processing, and customer support.

Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, analytics, and service improvement, provided these interests do not override your fundamental rights and freedoms.

Consent: Processing based on your explicit consent, such as marketing communications, optional cookies, and voluntary surveys. You may withdraw consent at any time.

Legal Obligation: Processing necessary to comply with legal requirements, such as tax obligations, data retention requirements, and responses to lawful government requests.

6. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We share information with trusted third-party service providers who assist us in operating our Platform and delivering our services:

Technology and Infrastructure Providers:

• Cloud hosting and data storage services
• Content delivery networks (CDNs)
• Email delivery and communication services
• Learning management system providers

Payment and Financial Services:

• Payment processors and merchant services
• Fraud prevention and security services
• Accounting and financial management services

Marketing and Analytics Partners:

• Website analytics and performance monitoring
• Email marketing and automation platforms
• Customer relationship management (CRM) systems

All service providers are contractually required to protect your information, use it only for specified purposes, and comply with applicable privacy laws.

6.2 Legal Requirements and Protection

We may disclose your information when required by law or to protect our rights and interests:

Legal Compliance:

• Responding to subpoenas, court orders, and government requests
• Complying with regulatory investigations and audits
• Meeting tax and financial reporting obligations

Safety and Security:

• Preventing fraud, abuse, or illegal activities
• Protecting the safety of our users and staff
• Enforcing our Terms and Conditions and Platform policies

6.3 Business Transactions

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new entity as part of the transaction, subject to the same privacy protections outlined in this Policy.

7. INTERNATIONAL DATA TRANSFERS

As a French company serving international customers, your personal information may be transferred to and processed in countries other than your country of residence, including France, the United States, and Canada.

7.1 Safeguards for International Transfers

We ensure appropriate safeguards for international data transfers through:

Adequacy Decisions: Transferring data to countries recognized by the European Commission as providing adequate levels of data protection.

Standard Contractual Clauses: Using European Commission-approved Standard Contractual Clauses (SCCs) with service providers in countries without adequacy decisions.

Binding Corporate Rules: Implementing internal policies that ensure consistent data protection standards across all jurisdictions where we operate.

Additional Safeguards: Implementing technical and organizational measures to protect data during transfer and processing, including encryption, access controls, and regular security assessments.

7.2 Cross-Border Educational Services

Given the international nature of online education, some data processing activities necessarily involve international transfers to provide our services effectively. We ensure all such transfers comply with applicable data protection laws and include appropriate safeguards.

8. DATA RETENTION AND DELETION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations.

8.1 Retention Periods

Account and Profile Information: Retained for the duration of your account plus seven (7) years after account closure for legal and business purposes.

Course and Educational Records: Retained for ten (10) years after course completion to support verification of certificates and continuing education requirements.

Payment and Transaction Records: Retained for seven (7) years after the transaction date to comply with financial and tax obligations.

Marketing and Communication Records: Retained until you withdraw consent or opt out, plus three (3) years for compliance purposes.

Website Analytics and Usage Data: Typically retained for 26 months from collection, anonymized where possible.

8.2 Data Deletion Procedures

When retention periods expire or when required by law, we securely delete or anonymize your personal information using industry-standard data destruction methods. You may also request deletion of your information subject to legal exceptions as outlined in the « Your Privacy Rights » section.

9. DATA SECURITY AND PROTECTION

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

9.1 Technical Safeguards

Encryption: All sensitive data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption standards.

Access Controls: Multi-factor authentication, role-based access controls, and the principle of least privilege limit access to personal information.

Network Security: Firewalls, intrusion detection systems, and regular security monitoring protect our systems from unauthorized access.

Data Backup and Recovery: Regular, secure backups ensure data availability and recovery capabilities in case of system failures.

9.2 Administrative Safeguards

Employee Training: All staff members receive regular training on data protection principles, privacy laws, and security best practices.

Background Checks: Employees with access to personal information undergo appropriate background checks and sign confidentiality agreements.

Privacy by Design: We incorporate privacy considerations into the development of new products, services, and business processes.

Incident Response: We maintain comprehensive incident response procedures to quickly identify, contain, and remedy security breaches.

9.3 Physical Safeguards

Secure Facilities: Our offices and data centers implement appropriate physical security measures including access controls, surveillance, and environmental protections.

Device Security: Company devices are encrypted, password-protected, and subject to remote wipe capabilities if lost or stolen.

Secure Disposal: Physical documents and electronic media containing personal information are securely destroyed when no longer needed.

10. YOUR PRIVACY RIGHTS

Depending on your location and applicable privacy laws, you may have various rights regarding your personal information.

10.1 Rights Under GDPR (EU Residents)

Right of Access: You have the right to know what personal information we hold about you and to receive a copy of that information.

Right to Rectification: You have the right to correct inaccurate or incomplete personal information we hold about you.

Right to Erasure (« Right to be Forgotten »): You have the right to request deletion of your personal information in certain circumstances.

Right to Restrict Processing: You have the right to limit how we use your personal information in certain situations.

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used format and to transfer it to another service provider.

Right to Object: You have the right to object to certain types of processing, including direct marketing and processing based on legitimate interests.

Right to Withdraw Consent: You have the right to withdraw consent for processing activities that require consent, without affecting the lawfulness of processing before withdrawal.

10.2 Rights Under CCPA/CPRA (California Residents)

Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt-Out: You have the right to opt out of the « sale » or « sharing » of your personal information for targeted advertising purposes.

Right to Limit Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform our services.

Right to Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.

10.3 Rights Under PIPEDA (Canadian Residents)

Right of Access: You have the right to access the personal information we hold about you and to know how it is being used.

Right to Correction: You have the right to correct any inaccurate or outdated personal information we hold about you.

Right to Withdraw Consent: You have the right to withdraw consent for processing activities that require consent.

10.4 Exercising Your Rights

To exercise any of these rights, please contact us at support@wellnessacademy360.com or through our customer support system. We will respond to your request within the timeframes required by applicable law, typically within 30 days.

When making a request, please provide sufficient information to verify your identity and specify which right you wish to exercise. We may need to request additional information to verify your identity and ensure we are providing information to the correct person.

11. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience on our Platform and to collect analytics information.

11.1 Types of Cookies We Use

Essential Cookies: These cookies are necessary for the Platform to function properly and cannot be disabled. They include session management, security features, and basic functionality.

Performance and Analytics Cookies: These cookies help us understand how you interact with our Platform by collecting and reporting anonymous usage information.

Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

Marketing Cookies: These cookies are used to deliver relevant advertisements and track the effectiveness of our marketing campaigns (with your consent).

11.2 Cookie Management

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and receive warnings before cookies are stored.

Please note that disabling certain cookies may affect the functionality of our Platform and your ability to access some features.

For more detailed information about the cookies we use, please see our Cookie Policy, which is available on our Platform.

12. CHILDREN’S PRIVACY

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18 years of age. If we discover that we have inadvertently collected personal information from a child under 18, we will promptly delete such information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@wellnessacademy360.com, and we will take steps to remove such information and terminate any account created by the child.

13. THIRD-PARTY LINKS AND SERVICES

Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by WELLNESS ACADEMY. This Privacy Policy does not apply to these third-party services.

We encourage you to review the privacy policies of any third-party services before providing them with your personal information. We are not responsible for the privacy practices or content of third-party services.

13.1 Social Media Integration

If you choose to connect your social media accounts to our Platform or share our content on social media, your interactions with these platforms are governed by their respective privacy policies and terms of service.

13.2 Educational Content and External Resources

Our courses may reference or link to external educational resources, research papers, or other materials. These external resources are not part of our Platform and are subject to their own privacy policies and terms of use.

14. MARKETING COMMUNICATIONS

We may send you marketing communications about our courses, services, and educational content if you have consented to receive such communications or where permitted by applicable law.

14.1 Consent and Opt-In

For residents of the European Union and other jurisdictions requiring consent, we will only send marketing communications if you have explicitly consented to receive them.

For residents of other jurisdictions, we may send marketing communications based on our legitimate interest in promoting our educational services, provided you have not opted out.

14.2 Unsubscribe and Opt-Out

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at support@wellnessacademy360.com

Please note that even if you opt out of marketing communications, we may still send you transactional or service-related communications necessary for your account and course access.

15. DATA BREACH NOTIFICATION

In the event of a data breach that poses a risk to your personal information, we will:

Immediate Response: Take immediate steps to contain the breach and assess the scope of the incident.

Investigation: Conduct a thorough investigation to determine the cause, extent, and potential impact of the breach.

Notification to Authorities: Notify relevant data protection authorities within 72 hours of becoming aware of the breach, as required by applicable law.

User Notification: Notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms, providing information about the nature of the breach and steps being taken to address it.

Remediation: Implement necessary measures to prevent similar breaches in the future and provide support to affected users.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Provide Notice: Post the updated Privacy Policy on our Platform and send email notification to registered users at least 30 days before the changes take effect.

Highlight Changes: Clearly identify the sections that have been modified and provide a summary of the changes.

Obtain Consent: Where required by applicable law, obtain your consent for material changes that affect how we process your personal information.

Version Control: Maintain previous versions of our Privacy Policy for your reference.

Your continued use of our Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

17. REGIONAL SPECIFIC PROVISIONS

17.1 Additional Rights for EU Residents

EU residents have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority. The lead supervisory authority for WELLNESS ACADEMY is the Commission Nationale de l’Informatique et des Libertés (CNIL) in France.

17.2 Additional Information for California Residents

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, IP address)
• Commercial information (purchase history, course enrollment)
• Internet activity (browsing history, interactions with Platform)
• Professional information (educational background, career interests)
• Inferences (preferences, learning patterns)

Sources of Personal Information

We collect personal information directly from you, automatically through Platform usage, and from third-party service providers.

Business Purposes for Collection

We use personal information for educational service delivery, customer support, analytics, marketing (with consent), and legal compliance.

Third-Party Sharing

We do not sell personal information to third parties. We share information with service providers for business purposes as described in this Policy.

17.3 Additional Information for Canadian Residents

Under PIPEDA, you have the right to file a complaint with the Privacy Commissioner of Canada if you believe we have violated your privacy rights. We are committed to resolving privacy concerns directly and encourage you to contact us first at support@wellnessacademy360.com.

18. CONTACT INFORMATION

For questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact us:

General Support:

• Email: support@wellnessacademy360.com
• Response Time: Within 48 hours

We are committed to addressing your privacy concerns promptly and thoroughly. When contacting us, please provide sufficient detail about your inquiry to help us respond effectively and in accordance with applicable privacy laws.

By using our Platform and services, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and sharing of your personal information as described herein.

Last Updated: May 29, 2025
Effective Date: May 29, 20254.