Privacy Policy

1. Data Controller

The controller of the personal data collected on the thepianoclub.co website is APOLLAM GROUP, a French SASU with a share capital of €1,000, registered under company number (SIRET) 952 027 795 00014, with its registered office at 80 bis boulevard Héloïse, 95100 Argenteuil, France.

For any question regarding this policy or your personal data, contact: van@thepianoclub.co.

2. Data We Collect

When you browse the website and purchase the Course, we collect the following categories of data:

Identification data: first name, last name, e-mail address.
Order data: product purchased, date and amount of the transaction, transaction ID.
Payment data: processed directly by our payment providers Stripe and PayPal; we do not collect or store your full banking details (card number, security code).
Browsing data: IP address, browser type, pages viewed, time spent, traffic source, collected via cookies and audience-measurement tools.
Marketing data: your preferences and interactions with our e-mails, via our e-mail tool ActiveCampaign, if you have subscribed to our mailing list.

3. Purposes of Processing

Your data is processed for the following purposes:

Processing your order and granting you access to the purchased Course.
Providing customer support and responding to your requests.
Sending you marketing communications (newsletters, offers) if you have consented, via ActiveCampaign.
Producing website analytics and measuring the performance of our advertising campaigns, via Google Analytics, Meta Pixel, and TikTok Pixel.
Complying with our legal and accounting obligations (invoicing, retention of transaction records).

4. Legal Bases

Performance of a contract: order processing, access to the Course, customer support.
Consent: non-essential cookies (analytics, advertising), newsletter subscription.
Legitimate interest: improving the website and our offering, website security.
Legal obligation: retention of accounting and invoicing records.

5. Recipients of Your Data

Your data may be shared with the following providers, strictly to the extent necessary for them to perform their services:

Stripe and PayPal (payment processing).
ActiveCampaign (newsletter and marketing e-mail management).
Google (Google Analytics — audience measurement).
Meta / Facebook (Meta Pixel — targeted advertising).
TikTok (TikTok Pixel — targeted advertising).
Namecheap, Inc. (website hosting).

These providers only use your data for the purposes assigned to them and are subject to confidentiality and security obligations.

6. International Data Transfers

Some of our providers (Stripe, PayPal, ActiveCampaign, Google, Meta, TikTok, Namecheap) are based in the United States or process data outside the European Union. These transfers are governed by appropriate safeguards (European Commission Standard Contractual Clauses, or recognized certification frameworks), in accordance with Articles 44 et seq. of the GDPR.

7. Data Retention

Order and invoicing data: retained for 10 years, in accordance with legal accounting obligations.
Account / course access data: retained for as long as lifetime access remains active, then archived per applicable statutory periods.
Marketing data (newsletter): retained until unsubscription, or 3 years from the last active contact.
Cookies: see the Cookie Policy for specific retention periods.

8. Your Rights

Under the GDPR, you have the following rights over your personal data: the right to access, rectify, erase, restrict processing of, object to processing of, and port your data. You may also set instructions regarding the fate of your data after your death.

To exercise these rights, contact us at van@thepianoclub.co. We will respond within a maximum of one month. You also have the right to lodge a complaint with the French data protection authority (CNIL — www.cnil.fr) or with the data protection authority of your own country of residence.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Payment is secured by our providers Stripe and PayPal, which are PCI-DSS certified.

10. Changes to This Policy

This Privacy Policy may be updated at any time. The version in force is the one published on the website at the time of your visit.

Last updated: to be completed at the date of publication.