Controller and contact
Sopika Uthayakumar is your contact for data relating to UTHAYA lessons. For questions and data requests: sopika16@hotmail.fr.
Data used
Email exchanges and bookings use contact details, availability, starting level and learning goals. A curriculum order uses a verified email address, price, consent records, payment identifiers and the technical data needed for access without an account. Sales remain closed until this flow is activated.
Free exercises and the HTML course can save progress and notes in the browser’s local storage. For those exercises, these records remain on the device; they are not a synchronised account. You can clear them in browser settings.
Children should use a fictional name for activities and be accompanied by an adult. Some activities optionally allow recording after the browser grants microphone permission; they can also be used without recording.
These recordings are processed in the browser for playback and are not uploaded to the site by these activities. They disappear when the page is closed or the recording is erased. If you choose to download a recording where the option is available, the downloaded copy remains on your device until you delete it.
Purposes and legal bases
Lesson requests and orders are processed to prepare or perform the contract. Payment records meet applicable legal obligations. Necessary security logs serve the legitimate interest of protecting the service. Optional uses requiring consent have a separate choice.
Providers and recipients
Vercel hosts the website. Cal.com supplies the external calendar, loaded when you choose to display available times. Stripe handles payments; UTHAYA does not store full card numbers.
Video lessons use Zoom or Google Meet as agreed for the appointment. Supabase hosts curriculum orders and access rights; Resend sends verification codes, order confirmations and recovery links. Each provider processes data necessary to its service under its own terms.
Data is not sold. Some providers may process data outside the European Union. Safeguards and processing locations depend on the service and professional account configuration. You can ask for the details applicable to your service.
Sopika’s monthly letter
Newsletter signup is optional and based on consent, confirmed using an emailed link. The letter is written in French and sent once a month. A purchase, booking or owner access never subscribes you automatically.
Supabase stores your email address, consent version and date, and confirmation / unsubscribe status. Resend sends confirmation messages and letters prepared by Sopika. UTHAYA adds no tracking pixel or personal reading tracking. Technical hashes limit abuse without storing plain IP addresses.
Each letter contains an unsubscribe link that works without an account. Withdrawal applies to subsequent sends. Unconfirmed and unsubscribed addresses are deleted within 30 days. To exercise other rights, email sopika16@hotmail.fr.
Retention
Unconverted enquiries are retained for up to three years after the last contact. Data needed for teaching or purchased resource access is kept during the contractual relationship, subject to legal obligations. Accounting records follow statutory retention requirements.
The digital withdrawal form stores your declaration and contact details in encrypted form to handle the request and establish receipt. Email and network hashes limit abuse without storing the plain IP address. These records are retained as needed to handle disputes and meet statutory obligations. Locally saved progress remains until cleared by the user or browser.
Browser storage and external services
The site uses storage needed to operate and for the preferences or progress you choose to save. This version integrates no advertising network. External services may use their own cookies when opened.
The embedded calendar only loads after your action. You can also open Cal.com directly in a separate window.
Your rights
Depending on the processing, you can request access, correction, deletion, restriction or portability, or object. Optional consent can be withdrawn without affecting earlier lawful processing.
Email sopika16@hotmail.fr. Replies follow GDPR time limits, generally one month. You can complain to the CNIL: https://www.cnil.fr.
Security
Communications use HTTPS. Digital orders and downloads use access controls. Newsletter addresses are encrypted at rest and accessible only to the sending service and authorised management.
© 2026 Sopika Uthayakumar — UTHAYA