Privacy Policy

1. Controller and contact

LINGUISTIC COMMUNICATION (SIREN 880433222; SIRET 88043322200010), 3 rue des Groseilliers, 93100 Montreuil, France, is the controller for the processing described in this policy. Privacy questions, rights requests, and requests concerning a connected TikTok account can be sent to linguistic.com@gmail.com.

2. Scope

This policy applies to linguistic-communication.com, its enquiry and diagnostic forms, and optional tools operated by Linguistic Communication that connect to third-party social platforms such as TikTok. A school, client, or platform may provide a separate notice when it controls the relevant processing.

3. Data we collect

• Enquiries and diagnostics: name, organisation, role, email, telephone number, message, programme needs, quiz or diagnostic answers, recommendations, and submission time.
• Service and business records: correspondence, proposals, scheduling information, contracts, invoices, delivery records, and information required to manage a client or instructor relationship.
• Technical and security data: IP address, device and browser information, requested URL, timestamps, response status, and security or error logs generated when you use our systems.
• Consent and measurement data: your measurement choice, pages viewed, event type, contact-channel type, approximate location, advertising click identifiers, browser/device information, and Google cookies when you consent.
• TikTok connection and publishing data: when an authorised user connects a TikTok account, we may receive the account's platform identifier, display name, profile image, granted permissions, access and refresh tokens, and connection status. When a user chooses to publish, we process the submitted video or other media, cover image, caption, selected publishing settings, scheduled time, platform publication identifier, status, and error information.

We do not ask for or receive your TikTok password. We do not intentionally collect special-category data through website forms or social publishing tools; please do not submit it unless it is strictly necessary and an appropriate legal basis has been agreed.

4. Why we use data and our legal bases

• To answer enquiries, prepare proposals, and take steps requested before a contract: steps before entering a contract and our legitimate interest in responding to genuine business enquiries.
• To deliver teaching, programme, assessment, scheduling, or related services: performance of a contract.
• To operate, secure, troubleshoot, and improve our systems: our legitimate interests in reliable and secure service operation.
• To connect a TikTok account and publish content selected by an authorised user: the user's explicit platform authorisation and performance of the requested service. A user can revoke platform access at any time.
• To load optional Google Analytics and Google Ads measurement: consent. Refusing or withdrawing consent does not restrict website features.
• To keep accounting, tax, compliance, and dispute records: legal obligations and legal claims.

We do not sell personal data. We do not use TikTok data or enquiry data for unrelated advertising, and we do not make decisions producing legal or similarly significant effects solely by automated means.

5. TikTok authorisation and data deletion

TikTok access is used only to provide the account-connection and publishing functions selected by an authorised user. We request only the permissions needed for the enabled functions and process submitted content only to schedule, publish, confirm, or troubleshoot that user's requested publication.

You can disconnect Linguistic Communication from the connected TikTok account through TikTok's account settings or revoke the granted permissions on TikTok. You may also email linguistic.com@gmail.com with the subject “TikTok data deletion request”. Please identify the connected account without sending a password or access token. After verification, we will delete or de-identify the connection tokens, connected-account metadata, unpublished media, and publishing records that we are not legally required to keep. Revocation prevents new publishing but cannot remove a post already published on TikTok; the account owner must delete that post on TikTok.

6. Optional Google measurement

With your permission, the website loads Google Tag Manager container GTM-W3555X4P, Google Analytics stream G-CSWR0DHEBR, and Google Ads tag AW-17961824466. These tools help us understand site use, diagnose page performance, and determine whether an advertisement led to a genuine enquiry or direct contact action.

Optional measurement remains disabled until you choose “Allow measurement”. Advertising personalisation and advertising user-data consent remain disabled even when measurement is allowed. We do not send names, email addresses, telephone numbers, enquiry subjects, or free-text messages through Google Tag Manager.

Your choice is stored in your browser for up to 180 days and is requested again when that period or the consent-policy version expires. You can change it at any time with “Measurement settings” in the footer.

7. Recipients and service providers

Access is limited to authorised Linguistic Communication personnel and service providers that need the data to host and secure our systems, deliver email, manage bookings, provide approved measurement, or operate the requested social-platform connection. Relevant third parties include Google for consented measurement, Cal.com when you choose to book a meeting, and TikTok when you connect an account or publish content. These providers process data under their own terms, our instructions where applicable, and applicable law.

We may also disclose data when required by law, to protect rights or system security, or in connection with a legitimate business reorganisation subject to appropriate safeguards.

8. International transfers

Some providers, including Google, Cal.com, and TikTok, may process data outside France or the European Economic Area. Where required, transfers rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. Provider privacy notices contain further information about their locations and safeguards.

9. Retention

• Enquiry and prospect records are generally kept for up to three years after the last meaningful contact.
• Contract, invoice, and accounting records are kept for the periods required by French law, commonly up to ten years for accounting evidence.
• Technical and security logs are generally kept for no more than twelve months unless an incident requires longer.
• TikTok access and refresh tokens are kept only while the connection is active. Unpublished submitted media is removed after publication, cancellation, disconnection, or a short operational recovery period. Publishing metadata and troubleshooting logs are generally kept for no more than twelve months unless a contract, security incident, or legal obligation requires longer.
• The website measurement choice is stored for up to 180 days. GA4 user-level and event-level data are configured for a maximum of 14 months; aggregated reporting may remain available for longer under Google's controls.

Backups may retain deleted information for a limited recovery cycle and are not used for ordinary business processing. We may retain a minimal record where needed to document a rights request, prevent abuse, or establish, exercise, or defend legal claims.

10. Your rights

Subject to the conditions in applicable law, you may request access, correction, erasure, restriction, or portability; object to processing based on legitimate interests; and withdraw consent at any time without affecting earlier lawful processing. You may also give instructions concerning your data after death where French law provides that right.

Send a request to linguistic.com@gmail.com. We may ask for proportionate information to verify identity. You may lodge a complaint with the French data-protection authority, the CNIL.

11. Security

We use proportionate technical and organisational safeguards, including encrypted transport, restricted administrative access, secret-management controls, input validation, security logging, backups, and access revocation procedures. No internet service is completely risk-free, so authorised users must also protect their devices and connected-platform accounts.

12. Children

The website's business enquiry and social-publishing functions are not directed to children. A minor should not connect a social account or submit business contact data without the involvement of a parent, guardian, school, or other authorised adult where required.

13. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version is identified by the date above. Material changes affecting an active connected account will be communicated through an appropriate service channel when reasonably possible.