Privacy policy
1. Controller
LEBONFAX CERTIFICATIONS, SARLU (single-member limited company) — Trade register CI-ABJ-03-2024-B13-07019 — Taxpayer no. 2403148 C — 06 BP 2774 Abidjan 06, Côte d'Ivoire. Contact about your data: djougangmp@lebonfaxcertif.com · WhatsApp +225 07 02 45 11 78.
2. Data, purposes and legal bases
| Situation | Data | Why | Basis |
|---|---|---|---|
| Free diagnostic | Answers and score; optional: name, email, WhatsApp number | Show your result and, if you give your email, send you the answers | Your request |
| Free sign-up | Name, email, WhatsApp number | Create and secure your account | Your request (contract) |
| Tips and offers | Email, WhatsApp number, first name | Send you study tips and offers | Your consent (optional boxes, separate for email and WhatsApp) |
| Purchase | Name, email, country, WhatsApp number, offer, amount, payment status, date you accepted the terms | Process the order, open access, support, accounting | Contract; legal obligation |
| Using the platform | Progress, answers, exams, logins, devices | Provide the preparation, secure the account | Contract; legitimate interest (security) |
| Visiting the website | Pages viewed, clicks to WhatsApp, originating campaign, language | Measure audience and campaign effectiveness | Legitimate interest (audience measurement) |
| Exchanges with us | Notes of our exchanges | Reply to you and support you | Legitimate interest |
We collect no sensitive data (health, religion, opinions…). Payment details are entered on CinetPay's page: we never see them.
3. Audience measurement
The platform measures its own visits, without advertising cookies or third-party tools and without recording your IP address, using a random identifier stored in your browser and renewed every 13 months. Statistics are deleted after 13 months. If your browser asks not to be tracked ("Do Not Track", "Global Privacy Control"), nothing is recorded. Your visits are linked to your name only if you agreed to receive our tips and offers.
4. Lead scoring
To support you better, we rank requests by your journey (diagnostic completed, offers viewed, payment started…). This ranking never uses your country, language or sensitive data and produces no automated decision about you: it only helps us decide whom to contact first.
5. Messages you may receive
- About your account or order: activation, payment confirmation, password; if your payment does not go through, at most two reminders; after purchase, a "first steps" message and a reminder if you do not log in for 7 days.
- Only with your consent: study tips and offers, by email and/or WhatsApp depending on the boxes you ticked.
- At most 3 messages a week. Every email has a one-click unsubscribe link. On WhatsApp, reply "STOP" or write to us.
6. Recipients and processors
Only authorised LEBONFAX CERTIFICATIONS staff access your data. Our providers process it only on our behalf:
| Provider | Role | Country |
|---|---|---|
| o2switch | Hosting of the platform and data | France |
| CinetPay | Payment | Côte d'Ivoire |
| Email service (for example Brevo) | Sending emails | France / European Union |
Hosting in France means a transfer outside your country if you live in Africa; it is covered by the host's safeguards and the formalities required by the competent authorities. We never sell or rent your data.
7. Retention periods
| Data | Period |
|---|---|
| Lead without purchase | 3 years after last contact, then automatic deletion |
| Account and progress | Duration of access, then 3 years |
| Payments and accounting records | 10 years (accounting obligation), even if the account is deleted |
| Visit statistics | 13 months |
| Unsubscribe list | As long as needed to respect the choice |
8. Your rights
You can access, correct or erase your data, object to marketing, withdraw consent, and ask for restriction or portability. Write to djougangmp@lebonfaxcertif.com: we reply within one month (extendable by two months for complex requests). You can also complain to the data protection authority of your country, for example: ARTCI (Côte d'Ivoire), CDP (Senegal), CNIL (France), ICO (United Kingdom), NDPC (Nigeria), Data Protection Commission (Ghana), ODPC (Kenya).
9. Security
Encrypted connection (HTTPS), hashed passwords, optional two-factor authentication, rate limiting, restricted and logged admin access, regular backups.
Version of 6 November 2026. In case of discrepancy, the French version prevails.