PRIVACY POLICY
Last updated: April 14, 2026
1. DATA CONTROLLER
The data controller responsible for the processing of your personal data is:
Company: CONCEPTCORE
Address: 6 Rue d'Armaille, 75017 Paris, France
SIREN: 944 477 793
Representative: Aurelien Fournier
Email: aurel@conceptcore.co
For any questions regarding your personal data or to exercise your rights, you may contact us at aurel@conceptcore.co.
2. SCOPE
This Privacy Policy applies to all personal data collected through the website conceptcore.co (the "Site") and related services, including masterclass purchases, live class registrations, mentorship program enrollments, and account creation.
3. DATA WE COLLECT
We collect the following categories of personal data, which are necessary to provide our services:
Identity data: First name, last name.
Contact data: Email address.
Account data: Username, encrypted password, purchase history.
Transaction data: Payment details (order amount, date, product purchased). We do not store full credit card numbers. Payment processing is handled securely by Stripe.
Technical data: IP address, browser type, device type, pages visited (collected via cookies and analytics tools).
Communication data: Messages you send to us via email or contact forms.
4. PURPOSES AND LEGAL BASIS
We process your personal data for the following purposes:
Contract performance (Article 6(1)(b) GDPR): To process your orders, deliver digital content, provide access to your account and community platforms, and manage your participation in live classes and mentorship programs.
Legal obligation (Article 6(1)(c) GDPR): To issue invoices and comply with French accounting, tax, and record-keeping requirements.
Legitimate interest (Article 6(1)(f) GDPR): To improve website security, prevent fraud, analyze site usage to improve our courses, and provide customer support.
Consent (Article 6(1)(a) GDPR): For sending marketing emails and newsletters (only if you have opted in) and for the use of non-essential cookies. You may withdraw your consent at any time.
5. RECIPIENTS OF DATA
We do not sell your personal data. We share it only with the following categories of service providers, who are contractually bound to protect your data in compliance with the GDPR:
Hosting: Framer B.V. (website hosting).
Payment processing: Stripe (secure payment handling).
Email communications: For sending course updates, order confirmations, and marketing emails (if opted in).
Community platforms: Discord (for live class and mentorship program access).
6. INTERNATIONAL TRANSFERS
Some of our service providers (such as Stripe and Discord) may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.
7. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
Active accounts: For the duration of your account's existence, to provide continued access to purchased content.
Invoices and billing records: 10 years, as required by French commercial law (Article L123-22 of the French Commercial Code).
Inactive accounts: Data is anonymized or deleted after 3 years of inactivity, unless retention is required by law.
Marketing data: Until you withdraw your consent or unsubscribe.
8. SECURITY
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These measures include data encryption, restricted access controls, and secure hosting infrastructure.
9. YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete data.
Right to erasure: You may request deletion of your data, subject to our legal retention obligations.
Right to restriction: You may request that we limit the processing of your data in certain circumstances.
Right to data portability: You may request your data in a structured, machine-readable format.
Right to object: You may object to processing based on legitimate interest or unsubscribe from marketing communications at any time.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at aurel@conceptcore.co. We will respond within one month, as required by the GDPR.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority:
CNIL (Commission Nationale de l'Informatique et des Libertes)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
10. COOKIES
Our Site uses cookies to ensure proper functionality and to analyze traffic.
Essential cookies: Required for the Site to function (session management, security). These cannot be disabled.
Analytics cookies: Used to understand how visitors interact with the Site and to improve our services. These are only activated with your consent.
You can manage your cookie preferences at any time through your browser settings or via the cookie banner displayed on the Site.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.