Privacy Policy

1. Data Controller

The data controller for this website is H5 AI Academy. Full identification details are available in our Legal Notice. For any question about this Privacy Policy or your personal data, contact us at contact@h5-ai.com.

2. Data We Collect

• Enrolment data: first name, last name, email address, phone number, country, preferred language, current status (e.g. employed, student), company, job title, and other background information you provide in the enrolment form
• Payment data: processed directly by our payment provider, Stripe — we never receive or store your full card details
• Communications: any message you send us by email
• Technical data: standard web server logs (such as IP address and browser type), collected automatically by our hosting provider, Vercel

3. Purpose of Processing

• Processing your enrolment and providing access to the training program you purchased
• Managing payment through Stripe and issuing payment confirmations
• Responding to your questions and providing customer support
• Sending you information about your program (schedule, access details, updates)
• With your explicit consent, sending you marketing communications
• Keeping accounting and tax records as required by law
• Preventing fraud and abuse of our enrolment forms

4. Legal Basis (GDPR)

• Performance of a contract — to process your enrolment and deliver the training program you purchased
• Consent — to send you marketing communications, where you have opted in
• Legitimate interest — to secure our website and prevent fraudulent form submissions
• Legal obligation — to keep accounting and tax records as required by French law

5. Data Retention

Enrolment data submitted through our forms is transmitted to Stripe as part of the payment transaction and retained there for as long as Stripe's own retention rules require, including applicable accounting periods. We do not maintain a separate customer database beyond what is needed to answer support requests, which we keep only as long as necessary to resolve them. Our hosting provider, Vercel, may also retain temporary server logs — which can include data submitted through the enrolment form — for operational and debugging purposes, in accordance with Vercel's own retention policies. Accounting records are kept for 10 years as required by French law.

6. International Data Transfers

Our service providers, Stripe and Vercel, are based in the United States and may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, as implemented by these providers.

7. Cookies

This website does not currently use analytics or marketing cookies. For full details on the cookies used, see our Cookie Policy.

8. Security

All data submitted through this website is transmitted over an encrypted (HTTPS) connection. Payment data is handled exclusively by Stripe in accordance with PCI-DSS standards; H5 AI Academy never has access to your full card details.

9. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, to object to its processing, and to withdraw your consent at any time. To exercise these rights, contact us at contact@h5-ai.com. We will respond within one month, as required by law.

10. CNIL Complaints

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), at www.cnil.fr.

11. Contact

For any question regarding this Privacy Policy or your personal data, contact us at contact@h5-ai.com.