Privacy policy

This policy explains how Illidan Group FZ LLC (« My French Travel », « we ») collects and processes your personal data when you use my-french-travel.com, and the rights available to you under the General Data Protection Regulation (GDPR).

1. Controller and contact

The controller is Illidan Group FZ LLC, Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates.

For any question about this policy or to exercise your rights, contact contact@backmeup.fr. No data protection officer has been appointed.

2. What we do

My French Travel is a matching service: we introduce international travelers to independent partners in France — language schools, certified teachers and local hosts — for language stays, French courses and leisure activities. We are a connector, not an operator: the programme itself is delivered by the partner, with whom you book directly.

3. Data we collect

3.1 Data you provide through the form

• Identity: full name
• Contact details: email address, phone number including country code
• Your project: when you plan to travel to France, and the type of service you are interested in
• Consent: the fact that you agreed to be contacted, the exact wording shown to you, and the date and time of submission

All these fields are required to process your request, except where indicated otherwise on the form.

3.2 Technical and acquisition data

• Landing page, referring page, browser user agent
• Campaign parameters carried in the URL (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and advertising click identifiers (gclid, fbclid)
• Advertising and measurement cookie identifiers (_fbp, _fbc, the Google Analytics client ID), only if you consented to them
• IP address, processed by our hosting provider for security and traffic routing

This data lets us understand which campaign brought you to the site and measure its effectiveness. Where it relies on cookies or similar technologies, it is only collected after your consent.

4. Purposes and legal bases

Withdrawing your consent is possible at any time and does not affect the lawfulness of processing carried out beforehand.

5. Recipients

• The partner selected for your project in France (language school, teacher or local host). Once introduced, that partner becomes an independent controller for the contact it initiates with you, under its own privacy policy.
• Our service providers, acting as processors on our instructions: Vercel Inc. (hosting), our automation and data pipeline provider, and Google Cloud (BigQuery storage of submitted requests).
• Advertising and measurement platforms — Google and Meta — where you have consented. Identifiers such as your email address and phone number are only transmitted to them in a hashed (SHA-256) form, never in the clear.

Your data is never sold to third parties. It may be disclosed where required by law, at the request of a public authority, or to establish, exercise or defend legal claims.

6. Transfers outside the European Union

Your data is transferred outside the European Union, namely:

• to the United Arab Emirates, where the publisher is established;
• to the United States, for hosting (Vercel Inc.) and, subject to your consent, for advertising and measurement (Google, Meta).

These transfers are governed by the appropriate safeguards required under Chapter V of the GDPR, in particular the European Commission's standard contractual clauses, and for United States providers the EU-US Data Privacy Framework where the recipient is certified under it. You may request a copy of these safeguards at contact@backmeup.fr.

7. Retention

• Request and contact data: 36 months from your last contact with us.
• Proof of consent: retained for the duration required to demonstrate compliance, and no longer than the applicable limitation period.
• Consent to cookies: 12 months, after which the banner is shown again.
• Cookies and similar technologies: maximum 13 months from placement.

Longer retention may apply where required by accounting or tax obligations, or to establish or defend legal claims.

8. Cookies and similar technologies

This website uses cookies. On your first visit, a consent banner lets you accept or refuse each category, with « Accept all » and « Reject all » offered at the same level. No non-essential cookie is placed before you make a choice.

Consent is collected by our own banner — no third-party consent provider is involved, so making a choice sends nothing to an external company. Your choice, its date and its version are stored locally in your browser for 12 months, then the banner is shown again. Clearing your browser storage resets it.

Advertising and measurement tags are managed through Google Tag Manager and run in Consent Mode v2: until you consent, every advertising and analytics signal is set to « denied » and no such cookie is placed. Your choice is applied immediately and re-applied on each subsequent visit before any tag runs.

You can change or withdraw your choices at any time via the « Manage cookies » link in the site footer. You may also configure your browser to block or delete cookies; doing so may affect how the site works.

9. Security

We implement appropriate technical and organisational measures to protect your data: encrypted transport (HTTPS), access restricted to authorised personnel, and no exposure of our processing endpoints in the browser. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy of it;
• have inaccurate or incomplete data rectified;
• have your data erased;
• restrict processing;
• data portability;
• object to processing, including at any time to direct marketing;
• withdraw your consent at any time;
• give instructions on the fate of your data after your death.

To exercise these rights, write to contact@backmeup.fr. We may ask you for proof of identity where there is reasonable doubt. We reply within one month, extendable by two months for complex requests.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr, or with the supervisory authority of the EU country where you live.

11. Links to other websites

This website may link to third-party websites we do not operate. We are not responsible for their content or their privacy practices; we encourage you to read their own policies.

12. Children

The service is not intended for people under 16. Where a stay concerns a minor, the request must be submitted by a parent or legal guardian, who provides consent on the minor's behalf.

13. Changes to this policy

We may update this policy. Any new version is published on this page with an updated date. Where changes are material, we will inform you by appropriate means.