Privacy Policy

Last updated: March 19, 2026

1. Data Controller

AnkleBreaker Consulting

34 rue du President Wilson, 78230 Le Pecq, France

SIRET: 912 705 860 00019

Email: contact@one-man-army.com

2. Data Collected

Account data

When you register, we collect: first name, last name, email address, password (encrypted), and chosen learning path.

Usage data

We automatically collect: module progress, login history, IP address, browser type, and pages viewed.

Payment data

Payments are processed by Stripe. We do not store your credit card data. We only retain the Stripe customer ID, transaction history, and invoices.

Cookie data

We use essential cookies (authentication, session), preference cookies (language), and, with your consent, analytics cookies. See our cookie policy for more details.

3. Purpose of Processing

Creating and managing your user account
Providing and personalizing training services
Processing payments and managing subscriptions
Sending service-related communications (confirmations, updates)
Improving our services and usage analysis
Complying with our legal and tax obligations

4. Legal Basis for Processing

Contract performance: processing necessary to provide our services (GDPR Article 6.1.b)
Consent: for non-essential cookies and marketing communications (GDPR Article 6.1.a)
Legitimate interest: for improving our services and security (GDPR Article 6.1.f)
Legal obligation: for retaining tax and billing data (GDPR Article 6.1.c)

5. Data Retention

Account data: retained for the duration of your account, then 3 years after last activity.

Billing data: retained for 10 years in accordance with French accounting obligations.

Cookie data: 13 months maximum in accordance with CNIL recommendations.

6. Data Recipients

Stripe (payments)

Stripe Inc. processes your payments as a data processor. Your credit card data is handled directly by Stripe in accordance with PCI-DSS standards. Privacy policy: stripe.com/privacy

Amazon Web Services (hosting)

Our services are hosted on AWS in the eu-west-3 (Paris) region. AWS acts as a technical data processor. Data remains within the European Union.

Google Calendar (coaching)

For 1:1 coaching sessions, we use Google Calendar and Google Meet. Only your name and email are shared for session scheduling.

7. Your Rights

Under the GDPR and the French Data Protection Act, you have the following rights:

Right of access: obtain a copy of your personal data
Right of rectification: correct inaccurate or incomplete data
Right to erasure: request deletion of your data ("right to be forgotten")
Right to data portability: receive your data in a structured, readable format
Right to object: object to the processing of your data on legitimate grounds
Right to restriction: request limitation of processing in certain cases

To exercise your rights, contact our DPO at: contact@one-man-army.com. You can also export or delete your data from the Settings page of your account.

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

8. Cookies

To learn more about our use of cookies, please refer to our cookie policy

9. Contact - Data Protection Officer

For any questions regarding the protection of your personal data, you may contact our DPO:

contact@one-man-army.com