LÉA & PARTNERS
Privacy
Updated: 22 September 2026.
Data controller
LEA AND PARTNERS CONSULTING L.L.C-FZ, a free-zone limited liability company operating under the Léa & Partners brand. Trade licence no. 2539606.01 — Meydan Free Zone, Dubai, United Arab Emirates. Registered address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. Contact: support@leaandpartners.com.
To exercise your rights: support@leaandpartners.com.
Data and purposes
Contact: name, email address, subject and message, to answer your enquiry. These fields are required to submit the form. Please avoid including sensitive data or information about a child.
Account: identity, email address, username, password hash and security information, to create and protect your access. Required fields are necessary for account creation; other profile information is optional.
Orders and services: buyer’s contact details, references and amounts, payment status, ticket holder and entry check, course access rights and progress. Without the required information, we cannot provide the service. When a buyer books for someone else, they supply that person’s name for the ticket; that person can exercise their rights by contacting us.
Newsletter, when available: email address, evidence of subscription and confirmation, unsubscribe status; optional first name, telephone, city and interests. Declining the newsletter does not prevent account creation or contacting us.
Security: technical information and logs necessary to prevent abuse. Technical providers may process IP addresses and device information.
Learning area: personal notes are stored in your account so you can find them by course. They are not shown to instructors in their management tools. Course conversations retain your messages, the team’s replies, their dates and read status to support your learning. Authorised team members can view and respond to these conversations.
Conversation notifications are sent by email with a link to the website, without including the message content. Replies are made in the learning area; this messaging service is not connected to WhatsApp.
Legal bases and communications
Where the GDPR applies, account creation and management, requested pre-contractual steps and fulfilment of orders are based on the contract or pre-contractual measures. General enquiries are based on our legitimate interest in responding to people who contact us; preventing abuse and defending our rights are based on the corresponding legitimate interests. Records whose retention is required by law are subject to the relevant legal obligation.
The newsletter and optional analytics rely on your consent. You can withdraw it at any time; withdrawal does not affect prior lawful processing. Account confirmation, access recovery and order messages serve the operation of the service and do not automatically subscribe you to the newsletter.
Data access and providers
Authorised team members access only the information needed for their duties. The website uses Sites and its Cloudflare infrastructure for operation and storage, Google Workspace for sending emails, and Stripe for payments when sales are open. Full card details are not stored by Léa & Partners.
If your package includes WhatsApp support, exchanges take place through that service. An introduction to a partner involves only the information needed for the requested introduction. The partner’s services are separate. Authorities may receive information where required by law.
Retention: technical periods and other data
Login sessions: valid for seven days for a customer and one day for a team member; expired sessions are cleaned up when new sessions are created. Signing out invalidates the relevant session.
Security links: initial account confirmation is valid for 24 hours; password recovery and email change confirmation are valid for 30 minutes. Expiry prevents their use; it does not delete the associated account. Expired tokens are cleaned up when new security links are issued.
Analytics: a 30-day window, with older data cleaned up when a new record is added or the dashboard is viewed. The analytics choice is valid for 180 days in the browser.
Contact messages and course conversations, personal notes, accounts, newsletter subscriptions, orders, progress, delivery histories and management logs: no single automatic deletion period is currently configured. Retention must be limited to handling the request, providing access or services and, for necessary evidence, meeting legal obligations and resolving disputes. Specific archiving periods and deletion schedules for these categories remain to be finalised. Erasure requests can be sent to support@leaandpartners.com; any legal reasons for retaining certain records must then be explained to you.
Unsubscribing stops newsletter deliveries; it does not automatically erase evidence of the choice or unsubscribe status. The initial confirmation link expires after seven days.
Your rights
You can write to support@leaandpartners.com or to the company’s postal address, specifying your request and the email address linked to the service. You will never be asked for your password. Additional proof is requested only where necessary and proportionate to verify your identity.
Depending on applicable law, you may request access, rectification, erasure, restriction or portability of your data, object to certain processing and withdraw consent. Deletion may be limited by a legal obligation or the defence of a right; disabling an account should not be confused with erasing all records.
Where the GDPR applies, a response must be provided within one month; a justified extension within the regulation’s limits must be announced during that first month. You may contact the competent supervisory authority, including the CNIL in France. Rights under applicable UAE regulations remain protected.
International processing
The website’s data controller is established in the United Arab Emirates. Team members working there may access information needed to handle your enquiries and services. Sites / Cloudflare, Google Workspace, Stripe and, when used, WhatsApp may also involve international processing.
Processing countries, contracting entities, providers’ own retention periods and safeguards for each transfer have not all been established for this installation. We therefore claim neither exclusively European hosting nor contractual clauses that have not been verified. For available information: support@leaandpartners.com.
Optional analytics
With your consent, analytics record public pages viewed, a random session identifier, visit times, the referring website’s domain and device category. They do not contain your name, email, IP address or URL parameters. These are pseudonymised data, not identification of visitors by name. Private areas are excluded.
You can accept, refuse or withdraw consent through the analytics preferences on this page or the Cookies page. Withdrawal stops future recording and requests deletion of the current session’s data. Previous sessions are not linked to your account. Technical logs required to operate the website are separate from these analytics.