Privacy Policy
Rémy Tortosa
Last updated: 13 October 2026
I care about your privacy and aim to collect only the personal information needed to provide, manage and improve your experience on remytortosa.com and its related platforms.
This Privacy Policy explains what information I collect, why I use it, who may process it on my behalf, and the rights you have over your personal data.
1. Who is responsible for your data
Rémy Tortosa is responsible for the personal data collected through this website and the services provided through it.
For any privacy-related question or request, you can contact:
hello@remytortosa.com
2. Information I may collect
Depending on how you use the website and my programs, I may collect:
Your name and email address.
Account and login information.
Information about the programs, courses or memberships you purchase or access.
Your activity within the platform, such as completed practices, favorites, progress, saved plans and other preferences connected to your account.
Information you choose to send through contact forms, coaching requests or support messages.
Newsletter and communication preferences.
Basic technical and security information necessary to operate and protect the platform, such as login activity, device or browser information and IP address.
Payment card details are processed securely by Stripe. I do not receive or store your full card details.
3. How your information is used
Your personal data may be used to:
Create and manage your account.
Give you access to the programs, courses or memberships you have requested or purchased.
Process payments and manage subscriptions or purchases.
Save your progress, favorites, plans and other member preferences.
Send important service-related emails, including account access, password resets, purchase confirmations and essential updates.
Respond to support messages, contact requests and coaching enquiries.
Send newsletters or marketing emails when you have chosen to receive them.
Maintain the security and proper functioning of the website and member platform.
Meet legal, accounting and tax obligations.
The legal basis depends on the purpose of the processing. It may include the performance of a contract with you, your consent, compliance with a legal obligation, or my legitimate interest in operating and securing the service. CNIL
4. Service providers
I use trusted service providers to operate the platform.
These may include:
Lovable and Supabase for website infrastructure, database services and authentication.
Stripe for secure payment processing.
MailerLite for newsletters and email marketing.
Bunny.net for video hosting and delivery.
Email and infrastructure providers used to send transactional emails and operate the service.
These providers only receive the information necessary to perform their respective services and process personal data according to their own contractual and data-protection obligations.
I do not sell your personal information.
5. International data transfers
Some service providers may process or store information outside your country or outside the European Economic Area.
Where required, such transfers are protected through recognised legal mechanisms such as adequacy decisions, contractual safeguards or Standard Contractual Clauses.
European data-protection rules require users to be informed when their information may be transferred outside the EU and about the safeguards used. CNIL
6. How long your information is kept
Personal data is kept only for as long as necessary for the purpose for which it was collected.
Account and member data may be kept while your account or access remains active and for a reasonable period afterwards where necessary to manage the relationship or resolve requests.
Information used for marketing is removed when you unsubscribe and may otherwise be deleted after a period of inactivity. As a general French data-protection benchmark, prospect marketing data should not normally be retained beyond three years from collection or the last meaningful interaction. CNIL
Purchase, invoice and accounting information may need to be retained for longer periods where required by law. In France, certain accounting documents and supporting invoices must generally be retained for ten years. Service Public Entreprendre
Data that is no longer required will be deleted, anonymised or securely archived when a legal retention obligation applies. Personal data should not be retained indefinitely. CNIL
7. Cookies and essential technologies
The platform may use cookies or similar technologies that are necessary for functions such as secure login, authentication, account sessions and website security.
If non-essential analytics, advertising or marketing technologies are introduced, they will be handled in accordance with applicable consent requirements.
More information may be provided in the separate Cookie Policy.
8. Your rights
If data-protection laws such as the GDPR apply to you, you may have the right to:
Access the personal information held about you.
Correct inaccurate or incomplete information.
Request deletion of your personal information where applicable.
Request restriction of certain processing.
Object to certain uses of your information.
Receive certain information in a portable format.
Withdraw your consent at any time when processing is based on consent.
To exercise any of these rights, contact:
hello@remytortosa.com
I may need to verify your identity before processing a request.
Under the GDPR, requests should generally be answered without undue delay and normally within one month. You also have the right to lodge a complaint with your local data-protection authority. If you are in France, this includes the CNIL. European Commission
9. Security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse or disclosure.
No online service can guarantee absolute security, but I work with established service providers and limit access to personal information to what is necessary to operate the platform.
10. Automated decisions
I do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you.
11. Changes to this Privacy Policy
This Privacy Policy may be updated when the platform, services or legal requirements change.
When significant changes are made, the updated version and revision date will be published on this page.
For questions about this Privacy Policy or the use of your personal data, contact:
hello@remytortosa.com