Privacy Policy and Personal Data Processing Policy

The data controller is:

2.1. This Policy has been developed in accordance with the Law of the Republic of Armenia "On Personal Data Protection" (LRA-49-N dated 18.05.2015) and other applicable regulations.

2.2. The Policy applies to all personal data that the Controller receives from users when visiting the website, filling out forms, making purchases, or otherwise interacting with French.Super services.

2.3. By using the website and making purchases, you confirm that you have read this Policy and agree to its terms.

2.4. This Policy may be updated. The current version is always available on this page.

Data you provide voluntarily:

• — name (for communication and order processing);
• — email address (to deliver access to purchased products and for communication);
• — phone number or Telegram/WhatsApp (for communication at your choice).

Data collected automatically:

• — website visit data (pages, time, referral source) via Google Analytics 4 — with your consent;
• — technical data: browser type, operating system, IP address (anonymized).

Payment data:

We do not collect or store bank card data (card number, expiry date, CVV). Payments are processed directly by the acquiring bank IDBank via a secure VPOS terminal.

Personal data is processed on the following legal grounds (in accordance with Article 6 of the RA Law "On Personal Data Protection"):

• — Data subject's consent — — when filling out forms and making a purchase;
• — Performance of a contract — — to provide access to purchased digital materials;
• — Legitimate interests of the controller — — to improve the service and prevent fraud;
• — Compliance with legal obligations — — to comply with tax and other applicable legislation.

We process your data exclusively for the following purposes:

• — processing and fulfilling orders for digital materials;
• — providing access to purchased books and updates;
• — processing payments via IDBank VPOS terminal;
• — contacting you regarding orders and technical support;
• — sending notifications about updates to purchased materials;
• — improving website quality based on analytics data;
• — responding to your questions and inquiries.

We do not use your data for third-party targeted advertising.

6.1. When paying by bank card, card details (number, expiry date, CVV) are entered directly on IDBank's secure payment page.

6.2. French.Super does not receive, process, or store bank card data.

6.3. IDBank processes payments in accordance with PCI DSS (Payment Card Industry Data Security Standard) security standards.

6.4. We may only receive masked card data (last 4 digits) from the bank for transaction identification.

6.5. Refunds for card payments are made to the same card used for the original payment.

7.1. Data is stored in secure systems with restricted access.

7.2. Data transmission is carried out through encrypted channels (HTTPS).

7.3. We retain your data for the duration of the contractual relationship and for 3 years after its termination — in accordance with the requirements of the legislation of the Republic of Armenia.

7.4. After the specified period, data is deleted or anonymized.

8.1. We do not sell or share your personal data with third parties for commercial purposes.

8.2. Data may be shared with the following categories of partners exclusively for the provision of services:

• — IDBank — — payment processing via VPOS terminal;
• — Google Analytics — — website visit analytics (with your consent);
• — Cloudflare — — website hosting and protection;
• — Messengers — (Telegram, WhatsApp) — if you chose this method of communication.

8.3. We disclose data at the request of authorized bodies of the Republic of Armenia in cases provided for by law.

9.1. Due to the use of international company services, your data may be processed outside the Republic of Armenia:

• — Google (Ireland/USA) — analytics (with your consent);
• — Cloudflare (USA) — hosting and content delivery.

9.2. We ensure an adequate level of data protection during cross-border transfers in accordance with the requirements of the RA Law "On Personal Data Protection".

In accordance with Chapter 4 of the RA Law "On Personal Data Protection", you have the right to:

• — obtain information about what data of yours we process;
• — request correction of inaccurate data;
• — request deletion of your data;
• — withdraw consent to data processing;
• — opt out of receiving marketing communications;
• — file a complaint with the Personal Data Protection Agency of the Republic of Armenia.

To exercise your rights, contact us at info@getfrenchsuper.com. We will respond within 30 days.

11.1. Our website uses technical cookies necessary for the proper functioning of the website (e.g., maintaining the authorization session).

11.2. Analytical cookies (Google Analytics 4) are used only with your consent. You can opt out of analytics in your browser settings or via the Google Analytics Opt-out extension.

11.3. We do not use advertising or third-party tracking cookies.

For questions related to personal data processing:

Response time for inquiries — up to 30 calendar days. Supervisory authority: Personal Data Protection Agency of the Republic of Armenia.