Privacy Policy
Last updated : September 2026
Data Controller
Nancy Areli Vazquez Gonzalez — Entrepreneur individuel
SIREN : 109 773 952
SIRET : 109 773 952 00014
Adresse : 20 RUE de Sauve, 30900 Nîmes, France
nancy@proiacta-montessori.com
By using proiacta-montessori.com, you accept that your personal data will be processed in accordance with this policy, the General Data Protection Regulation (GDPR — EU 2016/679) and French data protection law.
Data Collected and Purposes
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address | Order delivery and access to downloadable files | Performance of contract — art. 6(1)(b) |
| Email address | Newsletter and educational communications (with consent) | Consent — art. 6(1)(a) |
| Payment data | Secure transaction processing | Performance of contract — art. 6(1)(b) |
| Browsing data | Site improvement (anonymised analytics) | Legitimate interest — art. 6(1)(f) |
| Adult's name, child's name and age, contact details | Schedule, confirm and cancel an accompaniment session | Performance of contract — art. 6(1)(b) |
| Child's situation, psychopedagogy indicator, reason for the consultation and comments | Prepare the accompaniment session in a way that suits the child | Explicit consent — art. 9(2)(a) (special category data concerning a minor) |
Payment data is processed directly and securely by our payment provider and is never stored on our servers.
Retention Periods
- Customer data (orders): 5 years from the last order, in accordance with legal accounting obligations.
- Newsletter: until consent is withdrawn or for 3 years without interaction.
- Contact form: 3 years from the last exchange.
- Browsing data: maximum 13 months (CNIL recommendation).
- Session booking data (including the child's): 12 months from the last session with that family.
Data Recipients
Your data is not sold or transferred to third parties for commercial purposes. It may be shared with our technical service providers :
- Hosting: Vercel Inc. (United States) — transfer governed by standard contractual clauses approved by the European Commission.
- Payment: Lemon Squeezy, Inc. — secure transaction processing.
- Email delivery: Lemon Squeezy, Inc. — automatic delivery of the confirmation email and download link.
- Session bookings: Google LLC (Google Workspace — Apps Script, Sheets and Calendar), under the data processing agreement included in its terms of service.
Transfers Outside the European Union
Several of our technical providers are based in the United States: Vercel Inc. (site hosting), Cloudflare, Inc. (storage of downloadable files), Sanity.io (content management) and Lemon Squeezy, LLC (payment and delivery of download links).
These transfers rely on the EU-US Data Privacy Framework adequacy decision adopted by the European Commission on 10 July 2023 for providers certified under it, supplemented by standard contractual clauses (SCCs) under Article 46 of the GDPR and by a data processing agreement (DPA) concluded with each of them.
Personalisation and profiling
If you complete the optional questionnaire about your educational needs, your answers are used to build a preference profile (profiling within the meaning of article 4(4) GDPR). That profile lets us recommend resources suited to the age and context of your children or students, and guides the creation of new materials.
No solely automated decision producing legal effects or significantly affecting you is taken on the basis of this profile (art. 22 GDPR). You may withdraw your consent or object to profiling at any time (art. 21 GDPR) by writing to nancy@proiacta-montessori.com: your answers are then deleted, without affecting access to resources already purchased.
Retention period: 3 years from your last interaction, or until you withdraw your consent.
Your Rights
Under the GDPR, you have the following rights :
- Right of access — obtain a copy of your data (art. 15 GDPR)
- Right to rectification — correct inaccurate data (art. 16)
- Right to erasure — request deletion of your data (art. 17)
- Right to restriction — restrict processing (art. 18)
- Right to portability — receive your data in a structured format (art. 20)
- Right to object — object to processing based on legitimate interest (art. 21)
- Withdrawal of consent — at any time, without affecting prior processing
To exercise these rights, send your request to nancy@proiacta-montessori.com. We will respond within one month (art. 12 GDPR).
Complaint to the CNIL
If you believe that the processing of your data infringes your rights, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) :
3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
www.cnil.fr