We only collect the information necessary to sell you our courses and accessories, give you access to your account and respond to your enquiries. We never sell or rent out your data, and the website contains no advertising or tracking: it counts visits anonymously and without the use of cookies. The only exception is that, for logged-in customers, it retains a record of the members-only content they have viewed (see below). Here, in plain language, is what we do with your information.
Who is responsible for your data?
REVIHA, 102 chemin Ibarrartea
64310 Saint Pée sur Nivelle
Email: contact@reviha.org
You can use this address to ask any questions about your data and to exercise your rights (see below).
What we collect, and why
Your customer account
This is created when you place your first order.
- Data: your email address, first name, surname, chosen language and password. For the forum, your username is also required.
- Why: to give you access to your courses, allow you to view your orders, send you relevant emails (order confirmation, dispatch notification, forgotten password) and enable you to participate in the forum.
- Legal basis: the performance of the contract between us when you make a purchase.
- How long: for as long as your account exists. As your access to the courses has no time limit, your account remains open until you request its deletion. An account with no purchases, which has remained unused for 3 years, may be deleted.
Your password is never stored in plain text: the website only retains an encrypted hash of it, which no one can decipher, not even us. In your customer account, you can change your first name, surname, language and password at any time. To change your email address, please contact us.
Your orders
- Data: what you have purchased, prices and the date. If your order includes a parcel, we also retain the delivery address and telephone number entered on the payment page. We also keep a record of the boxes you have ticked (acceptance of the terms and conditions of sale and, for courses, a request for immediate access with a waiver of the right of withdrawal), along with the date and time, as proof.
- Why: to process and deliver your order, grant you access to your courses, issue a refund where applicable, and maintain our accounts.
- Legal basis: the performance of the contract, and our legal obligations (accounting, invoices).
- For how long: 10 years, as required by law for accounting records.
Payment
Payment is made via Stripe’s secure page. Your card number is entered on Stripe’s site: our website never sees it and never stores it. Stripe receives your email address, the order details and the order amount from us. Stripe also uses this data to fulfil its own obligations (fraud prevention, banking requirements), in accordance with its own privacy policy.
Delivery of accessories
To send you a parcel, we pass on your name, address and telephone number to La Poste (Colissimo). If the parcel leaves the European Union, this information also appears on the customs declaration.
The forum
The forum is for Members only. You appear there under your username, never under your real name or email address. Your posts are read by other forum participants; topic titles, however, are visible to all visitors. If your account is deleted, your posts remain on the forum so as not to disrupt discussions, but they are marked ‘Former member’. You may ask us to delete a post.
Content restricted to Members
- Data: for every piece of Members-only content you access (page, tip, forum topic), its title and the date of your first visit.
- Why: to prove that the immediate access you requested did in fact commence, in the event of a dispute regarding a refund.
- On what basis: our legitimate interest in being able to provide this evidence.
- For how long: for as long as your account exists.
The contact form
Your first name, email address, subject line and message are sent to us by email. They are used solely to reply to you, and we retain them for the duration of the correspondence.
The newsletter
- Data: your email address and the language of the page where you subscribed.
- Why: to send you our latest tips and announcements about our new modules.
- On what basis: your consent, which you give when you subscribe and which you can withdraw at any time.
- For how long: until you unsubscribe.
The newsletter is sent via Mailchimp, to whom we provide your email address. Each newsletter contains an unsubscribe link: just one click is all it takes. You can also write to us.
Website security
To block bots attempting to guess passwords, the website records the IP address from which failed login attempts originate, in the form of an encrypted hash, and deletes it after 15 minutes. Like any web server, this site’s server also keeps a technical log of visits (IP address, page requested, date, browser), which is retained for a few weeks at most, for the security and proper functioning of the site.
Traffic measurement
To find out which pages are being viewed and to improve the site, we track visits using Matomo, an open-source programme installed on our own server. These figures are not shared with anyone, and are not used for advertising or to identify you.
- The data includes: pages viewed, date and time, the website you came from, device and browser type, language, and your country, deduced from your IP address. This address is shortened before being recorded (the last two numbers are removed): it can no longer be used to identify you.
- No cookies: nothing is stored on your device to recognise you from one visit to the next.
- Legal basis: our legitimate interest in monitoring website traffic. In accordance with the recommendations of the CNIL, this processing does not require your consent; however, you may still opt out.
- How long: details of visits are deleted after 25 months; only the totals (number of visits per page, per country, etc.) are retained.
Your visits are no longer counted. Count my visits again
If your browser is set to ‘Do Not Track’ or ‘Global Privacy Control’, your visits will never be counted.
Cookies
The website only sets small cookies that are essential for its operation or that remember your preferences. There are no adverts or social media buttons, and the audience measurement tool does not use any cookies: this is why no banner asks for your consent.
- TURENNE_SESSION: retains your shopping basket and keeps you logged in during your visit; it also protects forms. It is deleted when you close your browser, and you are logged out after 30 minutes of inactivity.
- language: remembers the language you have chosen from the language menu for one year.
- statistics: only if you opt out; it retains your opt-out for 13 months.
Course videos
The videos are hosted on Vimeo (and, in some cases, on YouTube). Their players are set not to track your browsing activity (Vimeo’s ‘Do Not Track’ option, YouTube’s ‘enhanced privacy’ mode). When you play a video, your browser still connects to their servers, which then receive your IP address, just as with any website you visit.
Who else sees your data?
No one other than us and the service providers who help us run the site, each performing their specific task:
- the website host, OVH SAS, whose server is located in the following country: Canada;
- our email service provider (OVHcloud), which sends emails on behalf of the site;
- Stripe, for payments;
- La Poste (Colissimo), for parcels;
- Mailchimp, for the newsletter;
- Vimeo and YouTube, when you play a video.
The website’s machine translations (DeepL service) only apply to our own texts: none of your data is passed on to them. Visitor statistics (Matomo) remain on our server: no one else has access to them.
Some of these service providers are based outside the European Union, notably in the United States. These transfers are governed by the safeguards provided for in the European General Data Protection Regulation (GDPR): an adequacy decision by the European Commission (for example, the EU–US Data Protection Framework, or the one recognising Canada) or the European Commission’s standard contractual clauses.
Your rights
You may at any time:
- find out what data we hold about you and receive a copy of it;
- have it corrected if it is inaccurate;
- have it erased (except where we are required by law to retain it, such as orders and invoices);
- object to its use, or request that its use be restricted;
- receive it in a commonly used format so that you can share it with someone else (data portability);
- withdraw your consent to receive the newsletter;
- tell us what we should do with your data after your death.
Simply write to us at contact@reviha.org. We will reply within one month at the latest. We may ask you to prove that you are indeed the data subject if we have any doubts.
If you feel that we are not respecting your rights, you may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés) at www.cnil.fr/fr/plaintes or by post: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Younger users
If you are under 15, please ask your parents for permission before subscribing to the newsletter or creating an account.
Changes
If our data processing practices change, this page will be updated. The date below indicates the latest version.
Last updated: 27 October 2026.