Privacy Policy

This Privacy Policy describes how PrimeGuitarist.com collects, uses, stores, and protects the personal data of its users in connection with the use of the website and its associated services.

Its purpose is to provide you with clear and transparent information about your rights and about the measures implemented to ensure the confidentiality and security of your personal information.

PrimeGuitarist.com places particular importance on respecting your privacy and is committed to ensuring that the collection and processing of personal data are carried out in full compliance with applicable regulations, including:

  • Regulation (EU) 2016/679 of 27 April 2016, known as the General Data Protection Regulation (GDPR); and

  • The French Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended.

Purpose of This Policy

This Privacy Policy aims to inform users of the website PrimeGuitarist.com about how their personal data are collected, processed, and protected.

It seeks to ensure transparency, security, and respect for users’ rights, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (General Data Protection Regulation – GDPR) and French Law No. 78-17 of 6 January 1978, known as the Data Protection and Civil Liberties Act, as amended.

Definition of Personal Data

“Personal data” means any information relating to an identified or identifiable natural person, directly or indirectly.

This includes, for example:

  • first and last name, email address, and phone number,

  • connection data (IP address, session identifiers, browser used),

  • billing or payment information,

  • and any other data that can uniquely identify a user.

Scope of Application

This policy applies to all data processing activities carried out by Pierre Rochereau-Hérin, sole proprietor operating under the trade name PrimeGuitarist, acting as the data controller.

It covers, in particular:

  • data collected while browsing the website PrimeGuitarist.com,

  • data provided during a purchase, registration, or interaction via a contact form,

  • and data originating from third-party services such as payment or hosting platforms.

By accessing or using this website, the user acknowledges that they have read this Privacy Policy and agree to the collection and use of their personal data as described herein.

Identity of the Data Controller

The controller responsible for the processing of personal data collected through the website PrimeGuitarist.com is: Pierre Rochereau-Hérin

Sole proprietor operating under the trade name PrimeGuitarist

Registered with the Le Mans Trade and Companies Register (RCS) under number SIRET 989 363 031 00018

Business address: 11 rue Henri Barbusse, 72100 Le Mans, France

Contact: contact@primeguitarist.com

Pierre Rochereau-Hérin acts as the Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR) and determines the purposes and means of the processing of personal data collected via PrimeGuitarist.com.

Subprocessors and Technical Service Providers

For the proper operation of the website and the management of the services offered, PrimeGuitarist.com may use external service providers acting as Data Processors within the meaning of the GDPR, particularly for:

  • website hosting (e.g. o2switch or PlanetHoster),

  • payment processing (e.g. Stripe, PayPal, Systeme.io),

  • transactional or marketing email delivery,

  • audience measurement and analytics (e.g. Google Analytics or GDPR-compliant equivalents).

These subprocessors act solely under the instructions of PrimeGuitarist and are bound by strict confidentiality, security, and data protection obligations in compliance with applicable laws and regulations.

Data Collected

In the course of using the website PrimeGuitarist.com, Pierre Rochereau-Hérin, sole proprietor operating under the trade name PrimeGuitarist, may collect several categories of personal data.

This data is collected either directly from the user or automatically while browsing the website.

Identification Data

Collected through website forms (contact form, account creation, course registration, etc.):

  • First and last name

  • Email address

  • Phone number (if applicable)

  • Postal address (if applicable, particularly for physical products or invoices)

This data is necessary for managing orders, creating user accounts, communicating with users, and sending information related to the services provided.

Payment Data

Collected via secure payment service providers (such as Stripe, PayPal, or Systeme.io):

  • Payment-related information (card type, transaction ID, date, and amount).

PrimeGuitarist.com never has access to full credit card numbers or confidential payment details.

This information is processed exclusively by the respective payment providers, in accordance with their own privacy policies.

Technical Data

Collected automatically during website navigation:

  • IP address

  • Browser type and version

  • Operating system

  • Browser language

  • Pages visited, duration of visits, and user interactions

  • Data from cookies and tracking technologies (see dedicated section).

This data helps ensure the technical functionality of the site, improve the user experience, and compile anonymized traffic statistics.

Usage and Activity Data

Collected as part of access to courses or the user area:

  • Purchase and transaction history

  • Access to videos and learning materials

  • Course progress

  • Login history (dates, times, and devices used)

This data is used to monitor access to content, provide customer support, and ensure the security of user accounts.

Optional Data

Users may voluntarily provide additional information via forms (e.g. comments, testimonials, customer reviews).

Such data is processed solely for the purpose of responding to the user’s request or showcasing their experience (for instance, on a testimonial page, with their explicit consent).

Data from Third-Party Services

When a user interacts with social networks (YouTube, Instagram, TikTok, etc.) or clicks on an affiliate link, certain data may be collected by these platforms in accordance with their respective privacy policies.

PrimeGuitarist.com has no control over such external data processing activities.

Purposes of Data Processing

The personal data collected on PrimeGuitarist.com are processed for specific, explicit, and legitimate purposes, in accordance with Article 5 of Regulation (EU) 2016/679 (GDPR).

These processing activities primarily aim to ensure the management of the services provided, optimize the user experience, and guarantee the security of both transactions and the website.

Management of Orders and Access to Courses

Data are used to:

  • Process orders and payments made through the website,

  • Provide access to purchased courses, lessons, tablatures, or videos,

  • Manage customer accounts, invoices, and transaction tracking,

  • Provide technical assistance or customer support when needed.

Legal basis: performance of a contract between the customer and PrimeGuitarist (Article 6(1)(b) GDPR).

Sending of Follow-Up Emails and Educational Content

This data is used to:

  • Send information related to a purchase (confirmation, access details, follow-up),

  • Deliver educational content, updates, or invitations to additional training programs,

  • Inform users about new products, resources, or similar offers that may be of interest.

Users may unsubscribe from promotional communications at any time using the link included in each email.

Legal basis: explicit consent (opt-in) (Article 6(1)(a)) or legitimate interest (Article 6(1)(f)) when the user is already a customer.

Response to Messages and Contact Requests

Information collected through the contact form or at contact@primeguitarist.com is used to:

  • Respond to questions, complaints, or requests for information,

  • Provide personalized assistance to users.

Legal basis: user consent (Article 6(1)(a) GDPR).

Audience Statistics and Website Improvement

Analytical tools (such as Google Analytics or GDPR-compliant equivalents) may be used to:

  • Measure website traffic,

  • Analyze browsing behavior,

  • Optimize content and website design to improve the user experience.

Data are anonymized wherever possible and do not allow for personal identification.

Legal basis: user consent for statistical cookies (Article 6(1)(a) GDPR).

Website Security and Fraud Prevention

Certain technical data (IP address, logs, session identifiers) are collected to:

  • Ensure the security and stability of the website,

  • Prevent fraud attempts or unauthorized access,

  • Protect user accounts and personal data.

Legal basis: legitimate interest of the data controller in ensuring the security of its services (Article 6(1)(f) GDPR) and compliance with a legal obligation (Article 6(1)(c) GDPR).

Compliance with Legal Obligations

Data may be used to:

  • Comply with accounting and tax obligations,

  • Provide information to competent authorities upon lawful request,

  • Ensure transaction traceability in accordance with French and European law.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Legal Basis for Processing

In accordance with Article 6 of Regulation (EU) 2016/679 (GDPR), each data processing activity carried out on PrimeGuitarist.com relies on a specific legal basis.

The main applicable legal bases are as follows:

User Consent (Article 6(1)(a) GDPR)

Certain types of data are collected and processed only after the user’s explicit consent.

This applies in particular to:

  • Subscription to the newsletter,

  • Sending of promotional or educational emails,

  • Use of analytical or marketing cookies,

  • Processing of requests submitted through the contact form.

The user may withdraw their consent at any time, without justification, by following the unsubscribe instructions included in each email or by contacting: contact@primeguitarist.com.

Performance of a Contract (Article 6(1)(b) GDPR)

This legal basis applies when the processing of data is necessary for the performance of a contract or pre-contractual measures at the user’s request.

This includes, in particular:

  • Managing orders and payments,

  • Providing access to purchased courses, tablatures, videos, or learning materials,

  • Tracking transactions and communications related to contract execution.

Legal Obligation (Article 6(1)(c) GDPR)

Some processing activities are required by law, notably for:

  • Invoicing and accounting,

  • Retention of fiscal and accounting documents,

  • Responding to lawful requests from public authorities (administrative, judicial, or tax).

These processing operations are carried out in compliance with the legal obligations applicable to French sole proprietorships (micro-entreprises).

Legitimate Interest of the Data Controller (Article 6(1)(f) GDPR)

PrimeGuitarist may process certain data insofar as it is necessary to protect its legitimate interests, without infringing upon the fundamental rights and freedoms of the user.

This includes:

  • Securing the website and preventing fraud,

  • Managing and maintaining technical services,

  • Continuously improving the user experience,

  • Sending relevant information to existing customers about similar products or services.

Data Recipients

The personal data collected on PrimeGuitarist.com are strictly confidential.

They are accessible only to authorized individuals and service providers within the scope of their duties and for the sole purposes defined in this Privacy Policy.

Data Controller

Data are primarily processed by Pierre Rochereau-Hérin, sole trader operating under the trade name PrimeGuitarist, acting as the data controller.

Technical Service Providers and Trusted Partners

As part of the website’s operation and to ensure the proper delivery of its services, certain data may be temporarily shared with trusted technical service providers, such as:

  • The website hosting provider,

  • Secure payment platforms (such as Stripe, PayPal, or Systeme.io),

  • Email management or marketing automation tools (for newsletters, educational follow-up, etc.),

  • Maintenance or technical support providers acting under confidentiality agreements.

These third parties act solely on the instructions of PrimeGuitarist and are bound by strict confidentiality obligations as well as full compliance with the GDPR.

No Transfer or Sale to Third Parties

No personal data are sold, rented, or exchanged with third parties for commercial purposes.

PrimeGuitarist is committed to never sharing user information outside the framework strictly necessary for the provision of its services.

Legal or Regulatory Disclosure

Data may be disclosed to administrative, judicial, or tax authorities only where required by law or in response to a legal obligation, in accordance with Article 6(1)(c) of the GDPR.

Data Retention

The personal data collected on PrimeGuitarist.com are retained for a limited and proportionate duration, consistent with the purposes for which they were collected, in accordance with Article 5(1)(e) of Regulation (EU) 2016/679 (GDPR) and the recommendations of the CNIL (French Data Protection Authority).

Customer Data and User Accounts

Information relating to customers (identity, contact details, purchase history, access to courses, email exchanges, etc.) is retained for a maximum period of 3 years from:

  • the end of the commercial relationship (last purchase, last login to the account), or

  • the last contact initiated by the customer (login, message, or click in an email).

After this period, data may be deleted or anonymized for internal statistical purposes.

Legal basis: Article 6(1)(b) GDPR – performance of a contract and management of the customer relationship.

Billing and Accounting Data

Data related to billing and financial transactions (amounts, invoices, payment identifiers, accounting records) are retained for a period of 10 years, in accordance with French legal obligations for accounting and taxation.

Legal basis: Article L123-22 of the French Commercial Code and Article 6(1)(c) GDPR – legal obligation.

Prospect and Marketing Data

Data concerning non-customer prospects (e.g., newsletter subscription, free download, contact form without purchase) are retained for a maximum of 3 years from the last interaction initiated by the user.

After this period, they are deleted or anonymized unless renewed consent is obtained.

Legal basis: Article 6(1)(a) GDPR – user consent.

Technical Data and Cookies

Technical data (IP addresses, logs, session identifiers, language preferences, etc.) and cookies placed on the user’s device are retained for no longer than:

  • 13 months for audience measurement cookies,

  • 6 months for cookies strictly necessary for the website’s operation.

Beyond these durations, cookies are automatically deleted or renewed with user consent.

Legal basis: Article 82 of the French Data Protection Act and CNIL recommendations of October 1, 2020.

Security and Fraud Prevention Data

Logs and security-related data (login attempts, suspicious IP addresses, server logs, etc.) may be retained for up to 12 months for the purposes of diagnosing or preventing technical or fraudulent incidents.

Legal basis: Article 6(1)(f) GDPR – legitimate interest in ensuring website security.

Data Security

PrimeGuitarist.com implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of the personal data it processes, in accordance with Articles 32 to 34 of Regulation (EU) 2016/679 (GDPR).

The website PrimeGuitarist.com is hosted on the secure servers of o2switch, located in France. These servers provide a high level of physical and logical security consistent with GDPR requirements.

Personal data are hosted on secure servers within the European Union, meeting high standards of protection and availability.

Technical service providers (hosting, payment platforms, emailing tools, etc.) are selected for their GDPR compliance and their commitments to data security.

Technical safeguards

To prevent unauthorized access, loss, alteration, or disclosure of data, PrimeGuitarist.com notably applies:

• SSL/TLS encryption for all communications and transactions on the site;

• use of strong passwords and restricted access policies for administrator accounts;

• regular backups on protected servers;

• a web application firewall (WAF) and monitoring tools to detect intrusion attempts or suspicious activity;

• frequent updates of the operating system, CMS, and extensions to address known vulnerabilities.

Organizational safeguards

Access to personal data is strictly limited to Pierre Rochereau-Hérin and, where applicable, to authorized technical processors engaged in operating the site (hosting, maintenance, invoicing, payments, etc.).

These processors act as data processors within the meaning of the GDPR and are bound by strict confidentiality obligations.

Any person with access to the data is informed of its confidential nature and subject to duties of protection and discretion.

Incident notification

In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons (unauthorized access, loss, theft, disclosure), PrimeGuitarist.com will:

• notify the CNIL within a maximum of 72 hours after becoming aware of the breach, in accordance with Article 33 GDPR; and

• where applicable, inform the affected users in accordance with Article 34 GDPR, where the breach is likely to result in a high risk to their rights and freedoms.

Cookies

Definition

A cookie is a small text file stored on the user’s device (computer, tablet, smartphone) when visiting a website.

It enables the website to remember certain information about the user’s browsing activity or preferences (language, cart, session, statistics, etc.) in order to improve the online experience.

Cookies do not directly identify an individual, but may be considered personal data when they relate to an identifiable user (such as an IP address or session ID).

Purpose of Cookies Used on PrimeGuitarist.com

PrimeGuitarist.com uses different types of cookies to ensure the website functions properly and to improve the quality of its services:

Technical and functional cookies (essential)

  • Necessary for the website’s operation.

  • Enable session management, payment security, cart retention, and display preferences.

These cookies are required for the proper functioning of the website and do not require user consent.

Audience measurement (analytics) cookies

  • Used to analyze website traffic (pages visited, time spent, traffic sources, device used, etc.) to improve content and performance.

  • May be installed by GDPR-compliant tools such as Google Analytics, Matomo, or a self-hosted equivalent.

These cookies are placed only with the user’s explicit consent (opt-in via the banner or browser settings).

Social media and sharing cookies

  • Allow integration of sharing buttons (YouTube, Instagram, TikTok, Facebook, etc.) or display of embedded content (widgets, videos, social feeds).

  • These platforms may deposit their own cookies to track user activity across other websites.

The placement of these cookies is subject to the user’s prior consent.

Consent Management

When visiting PrimeGuitarist.com for the first time, users are informed of the presence of cookies through an information banner.

They may then:

  • Accept,

  • Refuse, or

  • Customize the placement of non-essential cookies.

User consent is stored for a maximum period of six (6) months, in accordance with CNIL recommendations.

Once this period expires, the site will again request consent.

Browser Settings

Users may disable or delete cookies at any time through their web browser settings.

Instructions vary depending on the browser used:

  • Google Chrome: Settings → Privacy and Security → Cookies and other site data

  • Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data

  • Safari: Preferences → Privacy

  • Microsoft Edge: Settings → Privacy, Search and Services

Refusing certain cookies may prevent the website from functioning properly or limit some features (video playback, cart, login, etc.).

Cookie Preferences

Users may modify or withdraw their consent at any time through the dedicated page:

Cookie Settings 

You can change your cookie preferences at any time by clicking here.

Processors and Transfers Outside the European Union

Use of External Service Providers

To ensure the proper operation of the website and the provision of its services (hosting, payments, emailing, statistical analysis, etc.), PrimeGuitarist.com engages several trusted external providers selected for their compliance with the GDPR and European data-protection laws.

These providers act strictly within the scope of their assignments and under precise contractual instructions. They may not use personal data for any purpose other than the agreed services.

Main providers include:

  • Systeme.io (course management, emails, payments)

  • Stripe and PayPal (secure payment processing)

  • Google (analytics, advertising tools, hosting of ancillary services)

  • Web hosting provider (secure hosting of the WordPress site)

  • External emailing platform (current or future) — for newsletters, marketing automations, or educational communications (e.g., Brevo, MailerLite, ConvertKit, ActiveCampaign), in compliance with the GDPR.

Data Transfers Outside the European Union

Some providers may process or store data outside the European Union, notably in the United States.

In such cases, PrimeGuitarist.com ensures that transfers are carried out in accordance with Chapter V of the GDPR, i.e., under a legal framework guaranteeing an adequate level of protection.

Transfers are based in particular on:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission; or

  • The EU–U.S. Data Privacy Framework (successor to the Privacy Shield), recognized by the Adequacy Decision of 10 July 2023;

  • Or any other equivalent safeguards recognized under the GDPR.

Provider Commitments

Each provider engaged by PrimeGuitarist.com undertakes to:

  • Process personal data solely for the purposes of the contracted services;

  • Implement appropriate technical and organizational measures to ensure confidentiality and security;

  • Notify PrimeGuitarist.com of any security incident relating to data processed on its behalf.

List of Providers

An up-to-date list of providers likely to process personal data (and their locations) is available on request at: contact@primeguitarist.com.

Changes to the Privacy Policy

PrimeGuitarist.com reserves the right to amend this Privacy Policy at any time, in order to adapt it to:

  • Legislative or regulatory developments (particularly those related to the GDPR or the French Data Protection Act);

  • Recommendations from the CNIL or other competent European authorities;

  • Or any technical or organizational changes affecting the management of personal data (for example, the addition of a new service provider or functionality).

Any modification takes effect from the date it is published on the PrimeGuitarist.com website.

The date of the latest update is indicated at the bottom of this page.

Users are therefore encouraged to review this policy regularly to stay informed of any changes.

In the event of a material change affecting the nature or purpose of data processing, PrimeGuitarist.com undertakes to notify affected users by email or by a visible notice on the website, in accordance with Article 13 of the GDPR.

Associated Contractual Documents

For further information regarding the use of the website, the protection of personal data, or the terms of sale, the user is invited to consult the following documents:

All of these documents are accessible at any time from the footer of the PrimeGuitarist.com website.

Together, they constitute an indivisible legal framework, forming the complete contractual agreement between the user and the publisher.

By browsing, purchasing, or using the website, the user fully and unconditionally accepts these terms and conditions.

Translations

The website PrimeGuitarist.com is available in several languages to facilitate understanding for international users.

However, in the event of any discrepancy or difference in interpretation between the translated versions and the French version of this Privacy Policy, the French version shall prevail.

Effective Date

This Privacy Policy shall take effect on the date of its publication on the website.

Last updated: October 16, 2025.