Privacy Policy

1. Definitions and Key Terms

At Talence Security, accessible from talencesecurity.com, one of our main priorities is the privacy of our users. This Privacy Policy document contains types of information that is collected and recorded by Talence Security and how we use it. We fully comply with the General Data Protection Regulation (GDPR) for EU residents.

For this Privacy Policy:

• Personal Data: Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification of a natural person.
• Cookies: Small files stored on a user's device that hold data specific to a particular user and website, used to enhance the user experience.
• Data Controller: Talence Security, as the entity determining the purposes and means of personal data processing.
• Data Subject: Any identified or identifiable natural person whose personal data is processed.

2. Information We Collect

We collect the following types of information:

Required Information:

• Email Address: Required for account creation, authentication, and communication
• Password: Securely hashed for account security

Optional Information:

• Username: For user identification on the platform
• Name and Family Name: For personalizing the user experience
• Phone Number: For contact purposes and account recovery
• Date of Birth: For profile customization
• Bio: For profile customization
• Company: For profile customization
• Profile Picture: For user identification and personalization

Payment Information: Payment information is not processed or stored by us. All payment data is handled securely by our payment processor, Stripe, in accordance with PCI DSS standards.

3. Data Collection Methods

We collect personal information through:

• Direct Collection: Registration forms and profile updates on our platform
• Automatic Collection: Learning progress, course interactions, and platform usage
• Cookies: Used solely for authentication, preferences, and essential functionality
• Server Logs: IP addresses, browser information, and access logs for security purposes

4. Use of Information

We use the information collected to:

• Account Management: Create, maintain, and secure user accounts
• Educational Services: Provide personalized learning experiences and track progress
• Communication: Send course updates, notifications, and support responses
• Platform Improvement: Generate anonymized statistics to improve our services
• Security: Detect and prevent unauthorized access and fraudulent activities
• Legal Compliance: Meet regulatory requirements and enforce our terms of service

5. Legal Basis for Processing Personal Data

We process personal data based on the following legal grounds:

• Consent: We process your data if you have given explicit consent for a specific purpose
• Contract: We process your data to fulfill our contractual obligations to provide educational services
• Legitimate Interests: We process your data for legitimate business interests, provided these do not override your rights and freedoms
• Legal Obligations: We process your data to comply with applicable laws and regulations

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share data in the following limited circumstances:

• Service Providers: Trusted third-party services that assist in platform operations (e.g., Stripe for payments)
• Legal Requirements: When required by law, court order, or legal process
• Safety and Security: To protect the rights, property, or safety of our users or others
• Business Transfers: In connection with any merger, sale, or transfer of company assets

All third-party service providers are required to maintain appropriate data protection measures.

7. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: Data transmission is protected using SSL/TLS encryption
• Password Security: Passwords are hashed using industry-standard algorithms (Argon2)
• Access Controls: Strict access controls limit who can view personal data
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures for detecting and responding to security incidents

While we implement strong security measures, no method of transmission over the internet is 100% secure. We continuously work to improve our security practices.

8. Your Privacy Rights

Under applicable data protection laws (including GDPR), you have the following rights:

To exercise these rights, please contact us through our contact page or support form. If you believe your data protection rights have been violated, you also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).

9. Data Retention

We retain personal data based on the following criteria:

• Active Accounts: Data is retained while your account remains active
• Account Deletion: Data is permanently deleted when you delete your account
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Backup Systems: Data in backup systems is purged according to our retention schedule

10. Children's Privacy

We are committed to protecting children's privacy:

• Users under 18 must have parental or guardian approval to create an account
• We do not knowingly collect personal information from children under 13 without verifiable parental consent
• Parents and guardians can review, modify, or delete their child's information by contacting us
• If we become aware that we have collected information from a child under 13 without consent, we will delete it promptly

11. International Data Transfers

Your data is stored and processed on servers located in France (OVH). We do not transfer personal data outside the European Union. If this changes in the future, we will ensure appropriate safeguards are in place in compliance with GDPR.

12. Cookies and Tracking

Our use of cookies is detailed in our Cookie Policy. Key points:

• We use essential cookies for authentication and platform functionality
• No third-party, advertising, or tracking cookies are used
• You can manage cookie preferences through your browser settings
• Some cookies are necessary for platform security and cannot be disabled

13. Changes to Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or legal requirements:

• Users will be notified of material changes via email
• Changes take effect immediately upon notification
• Continued use of the platform constitutes acceptance of updated terms
• Users who disagree with updated terms may delete their account