Courtesy translation. This document is an English translation of the French original (“Politique de confidentialité”), provided for information purposes only. In the event of any discrepancy or dispute as to interpretation, the French version shall prevail.
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, “GDPR”) and Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended (the French Data Protection Act, Loi Informatique et Libertés), Nour Ezzedeen informs you of how your personal data is collected, processed and protected in the course of her activity carried on under the trade name La Méthode Forgée.
No Data Protection Officer (DPO) has been appointed. Any request relating to your personal data should be sent directly to the data controller at the address given above.
| Data category | Data collected | Purpose of processing | Legal basis (Art. 6 GDPR) |
| Identification | First name, surname | Performance of the contract, client relationship management | Art. 6(1)(b) – performance of a contract |
| Contact | Email address, telephone number | Communications relating to the services; sending of commercial information (with consent) | Art. 6(1)(b) – performance of a contract; Art. 6(1)(a) – consent for marketing |
| Payment | Bank card data (processed by ThriveCart) | Processing and securing of payments | Art. 6(1)(b) – performance of a contract |
| Training | Progress tracking, certificates of completion | Legal obligation (French Labour Code, Art. L.6353-1) | Art. 6(1)(c) – legal obligation |
| Browsing | IP address, browsing data, analytics cookies | Audience measurement and website improvement | Art. 6(1)(a) – consent |
| Advertising | Browsing data via Meta Pixel | Display of targeted advertisements on Meta platforms | Art. 6(1)(a) – consent |
Nour Ezzedeen undertakes to collect only the data strictly necessary for the purposes pursued, in accordance with the data minimisation principle set out in Article 5(1)(c) of the GDPR.
The data collected is intended for Nour Ezzedeen (data controller) and, where applicable, the following third-party providers, acting as processors within the meaning of Article 28 of the GDPR:
| Provider | Role | Place of processing | Safeguards |
| ThriveCart | Online payment and sales platform | United States | EU Standard Contractual Clauses; successor to the Privacy Shield |
| Kit (formerly ConvertKit) | Email list management and newsletter sending | États-Unis | EU Standard Contractual Clauses |
| Google Analytics (Google LLC) | Audience measurement and browsing statistics | United States | EU Standard Contractual Clauses; IP anonymisation enabled |
| Meta Platforms (Meta Pixel) | Targeted advertising and conversion tracking | États-Unis | EU Standard Contractual Clauses |
These providers are authorised to use your data only for the purposes strictly necessary to perform their services on behalf of Nour Ezzedeen and are bound by confidentiality and security obligations.
Some of the providers referred to in Section 3 (ThriveCart, Kit, Google, Meta) are established in the United States. These transfers to a third country are governed by appropriate safeguards, in accordance with Chapter V of the GDPR, in particular through the use of the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914 of 4 June 2021).
| Data category | Durée de conservation |
| Client data (contracts, orders, invoices) | Duration of the contractual relationship + 5 years (civil limitation period, Art. 2224 of the French Civil Code) |
| Training data (agreements, certificates) | 5 years from the end of the training (accounting and legal obligations) |
| Marketing data and email lists | 3 years from the last active contact or until consent is withdrawn |
| Browsing data and analytics cookies | 13 months maximum (CNIL recommendation, Deliberation No. 2020-091) |
| Advertising data (Meta Pixel) | According to the settings defined in Meta Business Manager |
| Payment data | Not retained by Nour Ezzedeen — processed and stored by ThriveCart |
Pursuant to Articles 15 to 22 of the GDPR, you have the following rights in respect of your personal data:
To exercise your rights, send your written request, together with proof of identity, to: contact@methodeforgee.com
You will receive a response within one (1) month of receipt of your request (this period may be extended by two further months in the case of a complex request, with prior notice — Art. 12(3) GDPR).
You also have the right to lodge a complaint with the competent supervisory authority: Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, France — www.cnil.fr
The website uses cookies and trackers falling into three categories:
a) Strictly necessary cookies (no consent required): these enable the website to function and remember your basket or session.
b) Analytics cookies (consent required): Google Analytics is used to measure website audience. This data is collected in aggregated and anonymised form. You may refuse this processing via the website’s cookie manager or by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).
c) Advertising cookies (consent required): the Meta Pixel measures the effectiveness of advertising campaigns run on Meta platforms (Facebook, Instagram). You can set your advertising preferences directly from your Meta account.
Your consent is collected on your first visit through a cookie management banner. You may change or withdraw it at any time.
Nour Ezzedeen implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, accidental loss or destruction, in accordance with Article 32 of the GDPR. These measures include in particular the use of secure connection protocols (HTTPS), restricted access to data and the use of certified providers.
This Privacy Policy may be updated at any time to reflect legal, regulatory or technical developments. The date of the last update is shown in the header. It is the user’s responsibility to consult it regularly. In the event of a substantial change, Nour Ezzedeen undertakes to inform users by any appropriate means.