Skip to main content

Have any questions? Our customer service is available at 01 79 72 32 33

E-learning platform
Download brochure

Privacy and cookies

What data we collect, why, how long we keep it and how to exercise your rights.

Table of Contents
H2 Example

Last updated: 29 October 2026

This page explains what personal data we collect, why, who we share it with, how long we keep it, and how to exercise your rights.

Questions? Email legal@edu-business-institute.com or call +33 1 79 72 32 33, Monday to Friday, 11 am–7 pm (Paris time).

1. Who is responsible for your data?

Data controller: Lorvarion Management Training FZCO (formerly EDU International Business Institute FZCO), Building A1, Dubai Digital Park, Dubai Silicon Oasis, PO Box 342001, Dubai, United Arab Emirates. Registration no. DSO-FZCO-7451. KHDA licence no. 634240. Hereafter "EDU Business Institute" or "we".

French subsidiary: EDU International Business Institute SAS, 60 rue François Ier, 75008 Paris, France, SIREN 938 498 631. It handles sales, invoicing and payments in France, and processes order and billing data for that purpose. It acts on behalf of Lorvarion Management Training FZCO, as a processor. Lorvarion Management Training FZCO is the sole data controller.

Contact person for your data: Nicolas Ballaz, director, at legal@edu-business-institute.com.

This policy covers www.edu-business-institute.com, its subdomains (including the course platform learning.edu-business-institute.com) and your exchanges with our teams (email, phone, chat).

It complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978, as amended.

2. What data and why?

2.1 Visiting the site and contact requests

  • Data: first name, last name, email, phone, subject and content of your message; technical connection data (IP address, browser).
  • Why: to answer your questions, present our courses and protect our forms against bots.
  • Legal basis: your consent (form checkbox) and our legitimate interest in securing the site.
  • Retention: up to 3 years after our last exchange.

2.2 Enrolment and payment

  • Data: identity and contact details; order content; date, amount, payment method, order number, billing data.
  • Why: to record your order, take payment (in full or in 3 instalments with Klarna), issue the invoice, and handle customer service, refunds, unpaid amounts and fraud prevention.
  • Legal basis: performance of the contract (our Terms of Sale) and our legal obligations (accounting, tax).
  • Retention: 5 years after the end of the service; 10 years for accounting records (invoices, order forms).
  • Bank cards: we never see your card numbers. They are handled directly by our payment providers (Stripe, Klarna, Apple Pay, Google Pay) over an encrypted connection.

2.3 Access to online courses

  • Data: login and password; connection data (IP address, date and length of sessions); progress, exercises, assessments.
  • Why: to give you access to the course for 1 year, track your progress, help if you lose your login details, and detect misuse (account sharing, copying content).
  • Legal basis: performance of the contract; our legitimate interest in preventing fraud.
  • Retention: while you have access to the course, then 5 years as proof of the contract.

2.4 Internship agreement and certificate of enrolment

  • Data: your first and last name, date of birth, phone, email, latest degree or training; an identity document (passport or residence permit); the host company's legal name and SIRET; the supervisor's name, email and position; internship dates, location, title and tasks; stipend and benefits; leave.
  • Why: to draw up, e-sign and send the internship agreement and certificate of enrolment, and, if you request a refund, to check that the agreement was refused.
  • Legal basis: performance of the contract.
  • Retention: 5 years after the internship ends, including the identity document.
  • Recipients: the host company and named supervisor. They alone are responsible for how they use your data during the internship.

2.5 Customer reviews

  • Data: name or username, rating, comment, date.
  • Why: to collect and publish your reviews of our courses, through Société des Avis Garantis.
  • Legal basis: our legitimate interest; your consent for publication.
  • Retention: as long as the review is published.

2.6 Marketing and information

  • Data: identity, email, phone.
  • Why: to send you information about our courses and offers.
  • Legal basis: your consent, or our legitimate interest for existing customers (offers similar to what they bought).
  • Retention: 3 years after your last active contact.
  • Unsubscribe: at any time via the link at the bottom of our emails or at legal@edu-business-institute.com. In France, you can also register free of charge on bloctel.gouv.fr to stop sales calls.

2.7 Exercising your rights

If you exercise your rights, we may ask for proof of identity. It is kept for 1 year (access or rectification) or 3 years (objection).

3. Our providers (service table)

These providers process your data on our behalf, only for the task shown. This table is kept up to date: each tool added or removed is one row.

  • Webflow, Inc. — Site hosting and contact forms — Form data, technical connection data — United States (EU-U.S. Data Privacy Framework)
  • Cloudflare Turnstile — Protecting forms against bots — IP address, browser technical data — United States (EU-U.S. Data Privacy Framework)
  • Ecwid (Lightspeed) — Enrolment and order page, invoicing — Identity, contact details, order details, billing data — United States (EU-U.S. Data Privacy Framework + standard contractual clauses)
  • Stripe — Card, Apple Pay and Google Pay payments; refunds — Payment and transaction data — Ireland (EU); transfers to the United States covered by the Data Privacy Framework
  • Klarna — Payment in 3 instalments (3 × €99) — Identity, contact details, payment data — Sweden (EU)
  • Apple Pay / Google Pay — Mobile payment — Payment data — United States
  • Teachable (course platform learning.edu-business-institute.com) — Course access, progress tracking, newsletter — Login details, connection, progress, email — United States and Brazil (Hotmart group); standard contractual clauses
  • E-signature provider (EU) — E-signature of internship agreements — Agreement data (intern, company, supervisor) — Ireland (EU), backups in Sweden (EU)
  • Email provider (EU) — Email — Content of your emails and contact details — Germany (EU)
  • Société des Avis Garantis — Collecting and displaying customer reviews — Name or username, review, request email — France (EU)
  • Tidio — Live chat with our customer service — Messages, IP address — EU servers; transfers to the United States (Tidio LLC) covered by the Data Privacy Framework and standard contractual clauses
  • YouTube (Google) — Playing the site's videos — IP address, browser data (when the video starts) — United States
  • jsDelivr, Amazon CloudFront — Loading the site's technical scripts and libraries — IP address — Global network
  • Cookiebot (Usercentrics A/S) — Cookie banner: recording and proving your choices — Consent choices, technical ID, anonymised IP address — Denmark (EU)
  • Google Tag Manager (Google) — Loading measurement and advertising tools, only after consent — IP address, browser technical data — Ireland (EU) / United States (Data Privacy Framework)
  • Google Analytics (Google) — Audience measurement: page views, journeys, traffic sources — Cookie ID, IP address, pages viewed, device, approximate location — Ireland (EU) / United States (Data Privacy Framework)
  • Google Ads / DoubleClick (Google) — Targeted advertising and campaign measurement (conversions, retargeting) — Cookie ID, pages viewed, clicks, conversions — Ireland (EU) / United States (Data Privacy Framework)
  • Meta Pixel and Facebook plugins (Meta) — Targeted advertising and campaign measurement on Facebook and Instagram — Cookie ID, pages viewed, actions on the site, IP address — Ireland (EU) / United States (Data Privacy Framework)
  • Hotjar — Behaviour analysis: clicks, scrolling, anonymised session recordings — Cookie ID, interactions, device, masked IP address — Malta (EU), data hosted in Ireland (EU)
  • Microsoft Clarity — Behaviour analysis: click maps, session recordings — Cookie ID, interactions, device, IP address — United States (Data Privacy Framework)
  • Microsoft Advertising — Bing advertising and conversion tracking — Cookie ID, clicks, conversions — United States (Data Privacy Framework)
  • Mapbox — Displaying maps — IP address, map area viewed — United States (EU-U.S. Data Privacy Framework)
  • Font Awesome — Displaying icons — IP address — United States (EU-U.S. Data Privacy Framework); no transfer if icons are hosted on our site
  • Telephony provider (France) — Customer-service phone line — Phone number, date, time and length of calls — France (EU)

Tools already used for payments, email and courses appear in this table even if they are not yet connected to the new site.

Our teams. Only authorised staff have access: the teaching and administrative team (agreements, courses) and the sales and customer-service team (orders, requests). Our team is based in France and Dubai.

Legal obligations. Your data may be disclosed to authorities where required by law or a court decision.

We never sell your data.

The detailed list of our providers is available on request at legal@edu-business-institute.com.

4. Transfers outside the European Union

We are based in Dubai (United Arab Emirates), and some providers are in the United States or Brazil (Teachable). Your data may therefore be processed outside the European Union.

We protect these transfers:

  • to countries the European Commission recognises as offering adequate protection (for example, US companies certified under the EU-U.S. Data Privacy Framework);
  • otherwise, through appropriate safeguards such as the European Commission's standard contractual clauses.

Data exchanges between our French subsidiary (France) and Lorvarion Management Training FZCO (United Arab Emirates) are covered by appropriate safeguards in accordance with Articles 44 et seq. of the GDPR.

You can get more information about these safeguards at legal@edu-business-institute.com.

5. Your rights

You can at any time:

  • access your data and get a copy;
  • correct or update it;
  • have it erased when it is no longer needed or you withdraw consent;
  • restrict its use, for example while a dispute is checked;
  • object to its use based on our legitimate interest, and to marketing at any time;
  • withdraw your consent at any time;
  • receive your data in a readable format to pass it to another organisation (portability);
  • give instructions about your data after your death.

How: email legal@edu-business-institute.com, or write to the address in Article 1. We reply within one month.

Complaints: if you are not satisfied with our answer, you can contact the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or the data protection authority in your country.

6. Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure:

  • HTTPS across the site;
  • encrypted payments through our providers;
  • access limited to authorised staff.

If a data breach creates a risk, we notify the competent authority and, where required by law, the people affected.

Be careful about what you make public online, especially in reviews or on social networks.

7. Cookies

What is a cookie? A small file placed on your device when you visit a site. It helps the site work or remember some information.

What we use. The site uses cookies needed for it to work and, only if you accept, audience-measurement and advertising cookies.

Your consent first. On your first visit, a cookie banner (Cookiebot) lets you accept all, reject all (just as easily) or choose by category. Until you accept, no statistics or advertising cookie is set and the tools concerned are not loaded. Ignoring the banner counts as a refusal. Your choice is kept for 6 months, after which we ask again. You can change it at any time via the "Manage cookies" link at the bottom of every page.

  • Webflow — Site operation and security — Necessary — Not required
  • Cloudflare Turnstile — Protecting forms against bots — Necessary — Not required
  • Ecwid / Stripe / Klarna — Ordering and secure payment — Necessary — Not required
  • Tidio — Live chat — Functional — Yes, via the banner
  • Société des Avis Garantis — Displaying the review widget — Functional — Yes, via the banner
  • YouTube — Playing a video when you click it — Third party — Yes, via the banner
  • Cookiebot — Remembering your cookie choices — Necessary — Not required
  • Mapbox — Displaying maps — Functional — Yes, via the banner
  • Font Awesome — Displaying icons — Functional — Not required if hosted on our site; otherwise yes, via the banner
  • Google Analytics — Audience measurement — Statistics — Yes, before being set
  • Hotjar / Microsoft Clarity — Browsing behaviour analysis — Statistics — Yes, before being set
  • Google Ads / DoubleClick — Targeted advertising and campaign measurement — Advertising — Yes, before being set
  • Meta Pixel / Facebook plugins — Targeted advertising and campaign measurement — Advertising — Yes, before being set
  • Microsoft Advertising — Advertising and conversion tracking — Advertising — Yes, before being set

Managing cookies in your browser. You can block or delete cookies at any time in your browser settings (Chrome, Firefox, Safari, Edge, etc.). Some site features, such as ordering, may then stop working.

8. Links and social networks

The site links to our Instagram and LinkedIn pages and to other sites. When you use them, these services process your data under their own privacy policies, for which we are not responsible.

If you contact us through a social network, we may reply there.

9. Changes

We may update this policy, for example when we change tools. The last update date is shown at the top of the page. We will let you know about any significant change.

This policy is written in French; if translated, the French version prevails.