Privacy Policy

1. Who we are

Français Prep is operated by KNIGHT SECURITY PTE. LTD., a company registered in Singapore. We sell preparation courses and lessons for the TCF Canada and TEF Canada examinations. We are not affiliated with France Education international, with CCI Paris Ile-de-France, or with Immigration, Refugees and Citizenship Canada.

For anything in this policy, including a request to see or delete your data, write to bonjour@francaisprep.com. A person reads that address.

2. What we collect, and why

We collect the minimum needed to sell you a course, give you access to it, and answer you when you write in. Specifically:

• Your email address, and your name if you sign in with Google. We need this to create your account, to send you a sign-in code, and to attach your purchase to you.
• Your purchase record: which tier you bought, when, and the reference numbers Stripe gives us. We never see or store your card number.
• Your course account and progress inside our learning platform: which courses you are enrolled in, which lessons you have opened, and any work you submit for marking.
• Anything you write to us, whether by email or in the chat widget on the site.
• Ordinary server logs, including IP address and browser, kept briefly so we can keep the service running and spot abuse.

We do not buy personal data, we do not sell it, and we do not use it to build advertising profiles.

3. Work you submit for marking

If you are on a tier that includes marking, the writing and speaking work you submit is personal data and we treat it as such. It is read by your teacher for the purpose of marking it and giving you feedback. It is not published, not shared with other students, and not used to train any machine learning system.

You can ask us to delete submitted work at any time, and we will, subject to anything we are separately required to keep for accounting purposes.

4. The companies that process data for us

We keep this list short deliberately, and it is accurate as of the date at the top of this page. Each of these companies handles a specific part of the service and nothing more:

• Stripe, for taking payment. Your card details go directly to Stripe and never reach our systems.
• Cloudflare, for sending transactional email such as your sign-in code, and for DNS and protection in front of our sites.
• Google, only if you choose to sign in with a Google account. In that case Google tells us your email address and name.
• Crisp, for the chat widget on the site, which stores the conversation you have with us there.
• Cal.com, for booking lessons and calls, which handles the scheduling page and the details you enter on it.
• OVH, which hosts our servers.

We do not currently run any advertising, behavioural analytics, or session recording on this site.

5. Where your data is held

Our own servers, including your account, your purchase record and your course progress, are hosted with OVH in the United Kingdom.

The companies listed above operate internationally and may process data outside the United Kingdom, including in the United States and the European Union. Where that happens we rely on the transfer safeguards those companies publish, and we choose established providers for exactly this reason.

Français Prep is operated from Singapore, and staff there can access account data in order to run the service and answer support requests.

6. Cookies

We use cookies for three purposes only:

• Keeping you signed in. This is a session cookie set when you log in, and the site cannot work without it.
• Running the chat widget, which Crisp uses to recognise you across page loads so a conversation is not lost.
• Remembering settings inside the course platform, such as which organisation you are viewing.

There are no advertising cookies and no third party tracking pixels, which is why you are not asked to dismiss a consent banner on every page.

7. How long we keep things

• Your account and course access: for as long as you have an account with us. Delete the account and this goes.
• Purchase and payment records: seven years, because tax and accounting rules require it. This is the one category we cannot delete on request.
• Work you submitted for marking: until you ask us to remove it, or until you close your account.
• Support conversations: two years, so we have context if you come back to us about the same thing.
• Server logs: thirty days.

8. Your rights

Wherever you live, you can ask us to show you the personal data we hold about you, to correct it if it is wrong, or to delete it. Write to us and we will act within thirty days.

Our candidates are spread across many countries, and local law may give you more than that. If you are in the European Union or the United Kingdom you have rights under the GDPR including data portability and the right to object to certain processing. If you are in Canada you have rights under PIPEDA, and in Quebec under Law 25. If you are in Singapore, where we are established, you have rights under the Personal Data Protection Act. We will honour a request made under any of these regimes rather than argue about which one applies to you.

If you think we have handled your data badly, tell us first and give us a chance to fix it. You also have the right to complain to the data protection authority where you live.

9. Children

This service is sold to adults preparing for an immigration or professional language examination. We do not knowingly create accounts for anyone under sixteen. If you believe a child has an account with us, write to us and we will remove it.

10. Changes to this policy

If we change how we handle personal data, we will change this page and move the date at the top. If the change is significant, for example adding a new company to the list above, we will email account holders rather than quietly editing the page.

11. Governing law

This policy is governed by the laws of Singapore. Nothing here removes a protection that the law where you live gives you and cannot be waived by agreement.