Privacy policy
Privacy policy
I collect only the information I need to answer a message, arrange lessons or keep the website secure. This policy explains, in plain English, what happens to the information you choose to share with me.
Last updated: 28 July 2026
Who is responsible for your data
The data controller is Anna, a French teacher and the owner of annat.me. I work from France, so I follow the EU General Data Protection Regulation (GDPR) and French data-protection law.
You can use the email address at the end of this page for any question about your personal data.
What I use and why
The information involved depends on whether you simply visit the website, send an enquiry or become a student. I do not repurpose it for unrelated activities.
Visiting the website
The web server records an IP address, request date and time, page address, response code, browser type and referrer when the browser provides one.
These details are used to deliver pages, diagnose technical faults and protect the site from attacks. The legal basis is my legitimate interest in running a reliable and secure website under Article 6(1)(f) GDPR.
Enquiries and booking
When you contact me, I receive your name or profile name, the contact details you choose, our messages and anything you decide to tell me about your French level, goals, availability and preferred lesson format.
I use this information to reply, suggest a suitable programme and arrange lessons. The legal basis is taking steps at your request before a contract and performing our agreement under Article 6(1)(b) GDPR.
Lessons and payments
While we work together, I may keep the timetable, attendance, practical notes about the programme and progress, plus transaction and invoicing details needed for my records.
Lesson administration relies on Article 6(1)(b) GDPR. Financial and tax records required by law rely on Article 6(1)(c). I will never ask for online-banking credentials or a complete payment-card number.
Testimonials
I only publish a message screenshot, name, photograph or other recognisable detail after obtaining separate, explicit permission. The legal basis is consent under Article 6(1)(a) GDPR.
You may withdraw that permission at any time. I will remove the testimonial from the website, and your decision will not affect your lessons.
Cookies and automatic language selection
The website sets no tracking cookies and uses no analytics or advertising pixels. After you open the Responses chat, it stores a pseudonymous technical session in your browser’s localStorage so the conversation can continue between pages. This storage is necessary for the feature you requested and is not used for advertising or behavioural analysis, so there is currently no consent banner.
On the entry page, the preferred language is selected inside your browser. The site reads the device’s language list only to open the Russian, Ukrainian, English or French version; it does not store or transmit that list separately. The server log contains only the ordinary request for the page that was opened.
If analytics or any other optional tracking is introduced later, this policy and an appropriate consent mechanism will be updated before it is enabled.
Who may receive the information
I have access to the data, together with the infrastructure providers that are needed for a particular task: website hosting, Responses chat, email, the messenger you select, a video-call service, a bank or an accounting service. Each provider handles information under its own terms and only to the extent required to provide that service.
Responses chat is the only embedded third-party service on annat.me. It receives ordinary technical request data when a page loads and receives message content only if you open the chat and write to me. The other companies do not learn that you visited this website unless you choose an external link or start using their service.
I may disclose information to a public authority or professional adviser only where the law requires it or where it is necessary to protect legal rights. Personal data is never sold or supplied to advertising networks.
You can review the policies of the services offered for communication or lessons here:
Transfers outside Europe
Some international service providers may process information outside the European Economic Area. Where that happens, the transfer is governed by the relevant provider’s terms and must rely on an EU adequacy decision or another safeguard recognised by the GDPR, such as standard contractual clauses.
If you would prefer to minimise international transfers, email me and ask for an available European communication option.
How long information is kept
At the end of the period below, information is deleted or anonymised unless a legal obligation requires it to be kept for longer.
Technical logs
Website logs rotate automatically and are kept for no longer than 15 days. A relevant entry may be retained for longer only when it is needed to investigate a specific security incident.
Enquiries that do not lead to lessons
Messages are kept for up to three years after the last meaningful contact so that we can return to your request. They will be deleted sooner if you ask and there is no lawful reason to retain them.
Student information
Working correspondence, schedules and teaching notes are kept throughout the lessons and for up to three years after the final lesson. Documents needed to bring or defend a legal claim may be moved to a restricted archive for up to five years.
Accounts and testimonials
Invoices and mandatory accounting records are kept for ten years. A published testimonial remains until permission is withdrawn or it is no longer relevant; I review whether it should remain online at least once a year.
Your rights
Depending on the circumstances, you may:
- ask for access to your personal data and receive a copy;
- correct information that is inaccurate or incomplete;
- ask for deletion or restriction of processing;
- object to processing based on legitimate interests;
- receive information you supplied in a portable format where that right applies;
- withdraw permission to publish a testimonial at any time;
- complain to a data-protection authority.
Security and changes to this policy
The website uses HTTPS, and access to the server and working accounts is restricted. I use reasonable technical and organisational safeguards, although no internet transmission method can be guaranteed completely secure.
I do not use your data for profiling or make decisions with legal or similarly significant effects solely by automated means.
If the way I handle data changes materially, I will revise the wording and date on this page. Where a change affects current students, I will also explain it through our usual communication channel.
Contact and complaints
To exercise a right or ask a question, send me an email. I normally respond within one month. If I reasonably need to confirm your identity, I will ask only for the minimum information required.
If we cannot resolve the matter directly, you have the right to contact the French supervisory authority CNIL.