Legal information
Privacy Policy
This policy applies to akuru.fr, pransha.akuru.fr and associated Akuru Language Academy services.
1. Who is responsible for your data?
The controller responsible for the processing described in this policy is Prasanna Deshapriya Jasinghege Don, a French sole trader under the micro-entrepreneur regime, trading as Akuru Language Academy and operating the Pransha Akuru programme.
SIREN: 130 179 286 — SIRET: 130 179 286 00013
Registered address: 8 bis rue Abel, 75012 Paris, France
Email: admin@akuru.fr
In this policy, “Akuru”, “we”, “us” and “our” refer to the controller above.
2. Scope
This policy applies when you:
- visit akuru.fr, pransha.akuru.fr or the checkout area at pransha.akuru.fr/checkout/;
- contact us or submit an enquiry;
- create a customer account;
- purchase or participate in a live online course, private lesson or related service;
- receive course recordings or materials; or
- subscribe to communications where that option is offered.
3. Data we process
Depending on how you use our services, we may process:
- Identity and contact data: name, email address, telephone number and billing address;
- Account data: username, password hash, account settings and account activity;
- Order and contract data: selected course, schedule, price, order number, payment status, refunds, invoices and customer messages;
- Payment-related data: payment method, transaction identifier, payment status, amount and limited card information such as card type or last four digits where supplied by the payment provider. We do not store your complete card number or security code;
- Course participation data: attendance, learning-related correspondence, questions, submitted work and information required to deliver the course;
- Recording data: your image, voice, display name or chat contribution if a live session is recorded;
- Technical and security data: IP address, browser/device information, timestamps, server logs, checkout session identifiers and information used to prevent fraud or misuse;
- Communication and preference data: enquiries, support requests, feedback, testimonials, marketing preferences and consent records.
Please avoid sending sensitive personal data unless it is genuinely necessary and we have asked you to provide it.
4. Why we process data and our legal bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Responding to enquiries and taking steps requested before a contract | Contact and enquiry data | Steps prior to entering into a contract; legitimate interests where appropriate |
| Creating an account, processing an order and delivering a course | Identity, contact, account, order and participation data | Performance of a contract |
| Processing card payments, authentication, fraud prevention and refunds | Identity, billing, transaction and technical data | Performance of a contract; legal obligations; legitimate interests in secure payment processing |
| Sending essential service messages, receipts and order updates | Contact and order data | Performance of a contract; legal obligations |
| Accounting, invoicing, tax and dispute management | Identity, order, invoice and transaction data | Legal obligations; establishment, exercise or defence of legal claims |
| Securing, maintaining and improving the website and checkout | Technical, security and usage data | Legitimate interests in operating a reliable and secure service |
| Recording a class or publishing identifiable feedback or testimonials | Image, voice, name and feedback | Consent, unless another lawful basis has been clearly communicated |
| Sending optional marketing communications | Contact and preference data | Consent, or another basis permitted by applicable law; you may unsubscribe at any time |
Where we rely on legitimate interests, we assess the necessity of the processing and balance it against your rights and reasonable expectations.
5. Payments through Stancer
Card payments are processed through Stancer (Iliad 78). Information necessary to initiate, authenticate, process, prevent fraud, refund and document a transaction is transmitted to Stancer and the entities involved in the card-payment scheme. Stancer may process some information as an independent controller where required by financial, anti-fraud or anti-money-laundering law.
Your full card number and card security code are entered into Stancer’s secured payment interface and are not stored in our WordPress/WooCommerce database. For more information, see Stancer’s privacy policy.
6. WordPress and WooCommerce
Our checkout uses self-hosted WordPress and WooCommerce software. Customer and order information is stored in the website database hosted for us. WordPress and WooCommerce are software components and are not, by themselves, recipients of your data. If we enable an optional external service supplied by Automattic or another extension provider, we will identify that provider here when it receives personal data.
7. Live classes, Zoom, recordings and intellectual property
Live online teaching is delivered using Zoom. When you join a session, Zoom may receive identifiers, device and connection information, and content you choose to share. Its own terms and privacy information also apply.
If a session will be recorded, participants will be informed before recording starts. Where consent is required, recording will not begin until the necessary consent has been obtained. Participants who do not wish to appear should contact us before the session so that an appropriate arrangement can be considered, such as keeping the camera and microphone off. Recordings are shared only with the intended course participants and must not be copied, republished or shared without permission.
Session recordings produced by Akuru Language Academy, together with Akuru’s presentations, lesson materials, graphics and other teaching content contained in them, are protected by intellectual-property rights and remain the property of Akuru Language Academy, subject to any rights belonging to participants or third parties. Recordings are provided exclusively for the personal learning use of authorised course participants. They may not be copied, downloaded where downloading is not expressly enabled, edited, republished, sold, publicly displayed or shared with another person without our prior written permission.
A participant’s image, voice, display name, chat messages or other contributions may constitute personal data and may also remain subject to that participant’s own rights. Recordings will not be used publicly or for advertising without separate appropriate permission.
For more information, see Zoom’s Privacy Statement.
8. Skool community
If you choose to join our community hosted on Skool, personal data such as your name, email address, profile information, course membership, posts, comments, messages and platform activity may be processed by Skool.com, Inc. to create and administer your account, operate the community, maintain security and provide its platform services.
Depending on the processing concerned, Skool may act as our service provider or as an independent data controller. Skool’s own privacy policy applies to processing carried out for its own purposes. Please review Skool’s Privacy Policy before joining. Skool may process data outside the European Economic Area, subject to the applicable transfer safeguards.
Joining the Skool community is optional unless a specific course description clearly states before purchase that community access is an integral part of that course.
9. Cookies and similar technologies
The checkout uses strictly necessary cookies and local storage to maintain the cart, checkout session, security and account login. These technologies are necessary to provide the service and do not require consent where the legal exemption applies.
Analytics, advertising, embedded-media or social-media cookies will be used only after consent where consent is legally required. You can change or withdraw your choice at any time through Cookie settings in the website footer. The cookie-choice record is retained for six months. Refusing optional cookies will not prevent you from purchasing a course.
Where enabled, Google Analytics 4 is blocked until consent is given. Advertising features, Google Signals and advertising personalisation are disabled in the website configuration described by this policy.
10. Who receives data?
Access is limited to what is necessary. Recipients may include:
- authorised Akuru Language Academy personnel;
- HostGator.com, LLC, for website hosting, the Academy’s server-side PHP API and MySQL database, session storage and associated email delivery;
- Stancer, banks, card schemes and fraud-prevention participants, for payments and refunds;
- Zoom, for live course delivery and recordings;
- Skool, for the course community, learning space and materials;
- Google, for consent-based Google Analytics and YouTube content used in the Academy;
- DiceBear, when its service is used to generate or display Academy avatars;
- Substack, if you choose to subscribe to the Pransha Akuru mailing list through its external subscription page;
- professional advisers such as our accountant, legal adviser or insurer;
- competent public authorities, courts or regulators where disclosure is legally required.
We do not sell personal data. Service providers may use data only under the applicable contract and law, except where they act as independent controllers for their own legal obligations.
11. International transfers
Some providers may process data outside the European Economic Area. Where this occurs, we use or rely on a lawful transfer mechanism, such as an adequacy decision or European Commission standard contractual clauses, together with appropriate supplementary safeguards where required. You may contact us for information about the safeguards relevant to your data.
12. Retention
We retain data only for as long as needed for the stated purpose and applicable legal obligations.
| Data | Intended retention |
|---|---|
| Orders, invoices and accounting evidence | 10 years from the end of the relevant financial year, where required by French accounting law |
| Electronic consumer contracts worth at least €120 | 10 years from delivery or performance where the statutory rule applies |
| Active customer account | While active; then deleted or anonymised after 2 years of inactivity, except data retained under a legal obligation |
| Failed, cancelled or abandoned checkout records | 90 days, unless needed for security, fraud prevention or a dispute |
| Enquiries from people who do not become customers | Up to 3 years from collection or the last meaningful contact |
| Customer data used for permitted marketing | During the relationship and up to 3 years after the end of the relationship or last meaningful contact, unless you object sooner |
| Course attendance and routine teaching correspondence | Course duration plus 12 months, unless needed for a dispute or requested follow-up |
| Class recordings | The access period communicated at purchase, followed by deletion within 30 days after that access period ends, subject to necessary backups |
| Security and server logs | Normally 12 months, unless an incident requires longer retention |
| Consent and objection records | For the time needed to demonstrate compliance and respect your choice |
Backup copies may persist for a limited additional period before secure rotation. Data required for a legal claim may be isolated and retained until the applicable limitation period expires.
13. Security
We use proportionate technical and organisational safeguards, including HTTPS, access controls, updates, backups, authenticated transactional email and payment processing through a regulated payment provider. No online system can be guaranteed completely secure; if a breach creates a risk to individuals, we will follow the applicable notification requirements.
14. Your rights
Subject to the conditions in the GDPR and French law, you may request:
- access to your personal data;
- correction of inaccurate or incomplete data;
- deletion of data;
- restriction of processing;
- portability of data you provided where applicable;
- objection to processing based on legitimate interests or to direct marketing;
- withdrawal of consent at any time, without affecting earlier lawful processing; and
- information about relevant international-transfer safeguards.
Send requests to admin@akuru.fr. We may ask for information necessary to verify your identity. We normally respond within one month, subject to lawful extensions.
If you believe your rights have not been respected, you may complain to the Commission nationale de l’informatique et des libertés (CNIL): www.cnil.fr.
15. Adults and children
Our currently advertised group programmes are intended for adults. We do not knowingly invite children to create checkout accounts or purchase without the involvement of their legal representative. Contact us if you believe a child has provided data inappropriately.
16. Changes to this policy
We may update this privacy policy from time to time to reflect changes to our services, providers, practices or legal obligations. The latest version and its effective date will always be published on this page, and we encourage you to review it periodically.
Where a change materially affects existing customers, their rights or the way we process their personal data, we will provide an appropriate additional notice, such as a prominent website notice or email, where required. If we intend to use previously collected personal data for a new purpose, we will provide the relevant information before beginning that processing. Changes will not retroactively reduce rights granted by applicable law.
Effective date and last updated: 2 October 2026.