PRIVACY POLICY - Theleme Confidential

Theleme Confidential

Last updated: June 2026

1. INTRODUCTION & SCOPE

Theleme Confidential (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services.

This Privacy Policy explains:

• What personal data we collect

• How we use your data

• Your rights under applicable law (GDPR, CCPA, and similar regulations)

• How we protect your information

This policy applies to all visitors and customers of https://www.theleme-confidential.com and related digital properties. We are an international digital content provider offering ebooks, podcasts, and educational materials.

2. WHAT DATA WE COLLECT

2.1 Information You Provide Directly

When you interact with our website or purchase products, we collect:

Account Registration:

• Full name • Email address • Password (encrypted) • Country/region • Optional: phone number

Purchase Information:

• Billing name and address • Email address • Purchase history • Payment method type (we do NOT store full credit card details)

Communications:

• Messages sent through our contact form • Support requests • Email inquiries

Voluntary Information:

• Feedback or survey responses • Newsletter subscriptions • Preferences (content interests, communication frequency)

2.2 Information Collected Automatically

Technical Data:

• IP address • Browser type and version • Operating system • Pages visited and time spent • Referral source • Device identifiers • Approximate geographic location (from IP)

Cookies & Tracking:

• Session cookies (required for login and checkout) • Analytics cookies (Google Analytics) • Marketing cookies (optional, for personalization) • Marketing platforms (Mailchimp, etc.)

Payment Information:

• Transaction records (date, amount, product purchased) • Payment processor data (handled by Stripe, PayPal, etc. — see Section 5)

2.3 Data We Do NOT Collect

• Full credit card numbers (not stored by us) • Sensitive personal data (race, ethnicity, political beliefs) unless voluntarily provided • Biometric data • Children’s data (our services are for adults 18+)

3. HOW WE USE YOUR DATA

We use your personal data only for these legitimate purposes:

3.1 Essential Business Operations

• Processing your purchase and delivery of digital products (ebooks, podcasts) • Creating and managing your account • Sending order confirmations and receipts • Providing customer support and handling complaints • Fraud detection and prevention • Legal compliance (tax, financial regulations)

3.2 Communication

• Responding to your inquiries • Sending transactional emails (order updates, password resets) • Newsletters and marketing emails (only if you opt-in) • Product updates and announcements • Service changes or maintenance notifications

3.3 Analytics & Improvement

• Understanding how customers use our website • Improving website functionality and user experience • Analyzing trends and patterns • Product development and optimization • Aggregated, non-identifying analytics only

3.4 Marketing (With Your Consent)

• Personalized product recommendations • Targeted advertising campaigns • Email marketing campaigns (you can unsubscribe anytime) • A/B testing and campaign performance analysis

3.5 Legal & Regulatory

• Compliance with GDPR, CCPA, tax obligations • Dispute resolution • Enforcing our Terms and Conditions • Protecting against fraud, security breaches, or illegal activity

We will NEVER:

• Sell your personal data to third parties • Share your data with unrelated marketing companies • Use your data for purposes other than those listed above without your explicit consent • Retain data longer than necessary

4. LEGAL BASIS FOR DATA PROCESSING (GDPR)

For EU customers, we process your data under these legal bases:

Data Type	Legal Basis
Account info, purchase data	Contract (necessary to fulfill your purchase)
Communications & support	Contract (necessary to provide service)
Technical/analytics data	Legitimate interest (improving our service)
Marketing emails	Consent (you opted in to newsletter)
Compliance/legal data	Legal obligation (tax, financial laws)

You have the right to withdraw consent for marketing emails at any time via the “Unsubscribe” link.

5. THIRD-PARTY DATA SHARING

We do not sell your data. However, we share minimal information with trusted service providers:

5.1 Essential Service Providers

Payment Processing:

• Stripe, PayPal, or other payment processors • Data shared: Billing name, address, transaction amount (not full credit card) • Purpose: Process your payment securely

Email & Marketing:

• Mailchimp, ConvertKit, or similar platforms • Data shared: Email address, name, purchase history • Purpose: Send newsletters and product announcements (if opted in)

Hosting & Website Infrastructure:

• Web hosting provider • WordPress/WooCommerce vendors • Purpose: Website operation and security

Analytics:

• Google Analytics • Purpose: Anonymous aggregated data about website traffic • You can opt-out: https://tools.google.com/dlpage/gaoptout

Customer Support:

• Support platforms (email, Zendesk, etc.) • Purpose: Help with inquiries and technical issues

5.2 Data Sharing Requirements

We only share data when:

• You directly authorize it (e.g., by making a purchase) • Required by law (court order, government request) • Necessary to protect safety or prevent fraud • Data processor has signed a Data Processing Agreement (DPA)

5.3 International Transfers

Some service providers may be located outside the EU. We ensure:

• Data transfers comply with GDPR Article 46 (adequacy decisions, Standard Contractual Clauses) • All third parties maintain equivalent privacy protections • You have explicit notice of international transfers

6. YOUR RIGHTS

6.1 Under GDPR (EU Residents)

You have the right to:

Access: Request a copy of your personal data we hold Correction: Update or correct inaccurate information Deletion: Request deletion of your data (“right to be forgotten”) — with exceptions for legal obligations Restriction: Limit how we use your data Portability: Receive your data in a portable format Objection: Oppose marketing communications or certain processing Withdraw Consent: Stop consenting to newsletters or marketing at any time

To exercise these rights, email: contact@theleme-confidential.com

We will respond within 30 days (or as required by law).

6.2 Under CCPA (California Residents)

You have the right to:

Know: What personal data we collect and how we use it Delete: Request deletion of your data (with exceptions) Opt-Out: Opt out of data sales (though we don’t sell data) Non-Discrimination: We won’t penalize you for exercising your rights

To submit a CCPA request: contact@theleme-confidential.com

We will verify your identity and respond within 45 days.

6.3 Other Jurisdictions

If you’re in another jurisdiction with privacy laws (e.g., UK GDPR, Canada PIPEDA), we comply with those regulations. Contact us for specific requests.

7. DATA SECURITY

7.1 How We Protect Your Data

• Encryption: All data transmitted to/from our website uses SSL/TLS encryption • Secure Password Storage: Passwords are hashed and salted, not stored in plain text • Access Controls: Only authorized staff access customer data • Regular Updates: We maintain current security patches and software • Payment Security: PCI-DSS compliance for payment processing • Backup: Data backed up regularly with secure recovery procedures

7.2 Limitations

While we implement industry-standard security, no system is 100% secure. We are not responsible for:

• Unauthorized access due to your own negligence (weak passwords, shared credentials) • Third-party breaches beyond our control • Data loss from client-side security failures

7.3 Data Breach Notification

If we discover a data breach affecting your personal data, we will:

• Notify you via email within 72 hours (or as required by law) • Inform authorities if required • Provide information on mitigation steps • Offer support resources

8. COOKIES & TRACKING

8.1 What Are Cookies?

Cookies are small text files stored on your device. We use:

Cookie Type	Purpose	Required?	Duration
Session Cookies	Login, checkout, site functionality	Yes	Session
Google Analytics	Anonymous traffic analysis	No	2 years
Marketing Cookies	Personalized ads, retargeting	No	1-2 years

8.2 Manage Your Cookies

Disable non-essential cookies:

• Most browsers allow you to refuse cookies or delete them • See your browser’s privacy settings for instructions

Opt-out of analytics:

• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Disable marketing cookies:

• Opt-out of email marketing via “Unsubscribe” link • Disable personalized ads in your account settings

Note: Disabling session cookies may limit website functionality (login, purchases).

9. DATA RETENTION

We retain your personal data only as long as necessary for the purposes listed in Section 3:

Data Type	Retention Period	Reason
Account information	While active + 1 year	Support and dispute resolution
Purchase history	7 years	Tax and legal compliance
Email (newsletter)	Until unsubscribe	Marketing (you can remove anytime)
Support communications	2 years	Dispute resolution
Logs/technical data	90 days	Security and analytics
Cookies	See Section 8	Varies by type

Deletion Request: You can request early deletion of non-essential data via contact@theleme-confidential.com

10. CHILDREN & MINORS

Our services are not intended for children under 18. We do not knowingly collect data from minors.

If we discover we’ve collected data from a minor, we will delete it immediately.

Parents/guardians concerned about data: contact@theleme-confidential.com

11. THIRD-PARTY LINKS

Our website may link to external sites (social media, partners, resources). We are not responsible for:

• Third-party websites’ privacy practices • Third-party cookie usage • Content accuracy on external sites

Review each site’s privacy policy before sharing personal data.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect:

• Changes in our practices • New legal requirements • Technical improvements

Significant changes will be notified via email or prominent website notice. Continued use of our site constitutes acceptance of changes.

Last updated: June 2026

13. CONTACT US

Privacy Officer: contact@theleme-confidential.com

Website: https://www.theleme-confidential.com/contact/

Data Subject Rights Requests: contact@theleme-confidential.com

EU Regulatory Authority (GDPR): If you believe we’ve violated your rights, you can file a complaint with your local Data Protection Authority. For France: CNIL (https://www.cnil.fr/)

14. GDPR-SPECIFIC INFORMATION

Data Controller:

Theleme Confidential is the data controller for your personal information.

Data Protection Officer:

If required, we will designate a Data Protection Officer. Information will be provided on request.

Data Processing Agreement:

Customers using our services for business purposes may request a DPA. Contact: contact@theleme-confidential.com

Effective Date: June 2026

For questions or concerns about this policy, contact us immediately. We value your trust and take data protection seriously.