Privacy policy

Version in force as of 26 July 2026.

1. Data controller

The personal data collected on the physio-learning.com website, in the Physio Learning app and in connection with our courses is processed by PHYSIO-LEARNING.COM (trading name: Physio Learning), a SAS with a share capital of 1 000 €, RCS Marseille 892 765 686, 18 chemin de Mimet, 13015 Marseille, France.

For any question about your data, or to exercise your rights: hello@physio-learning.com.

2. Data collected and purposes

• Creating and managing your account: surname, first name, email address, telephone number, postal address, postcode, town, country, profession, type of practice, professional registration number (RPPS, ADELI, INAMI or equivalent), profile photograph if you upload one, the institution and year group of your initial training, and where applicable your year of qualification. Legal basis: performance of the contract.
• Educational and administrative monitoring of courses: enrolments, progress, assessment results, attendance, attestations, training agreements and certificates, and the audit-trail data required by the funding bodies: the ANDPC, which administers the DPC, the French three-yearly continuing professional development obligation, the FIF PL, which funds training for self-employed professionals, and the OPCO skills operators, which fund training for employees. Legal bases: performance of the contract and the legal obligations of a training provider.
• Periodic certification: if you use this feature, the courses you declare, including those completed outside Physio Learning, the supporting documents you attach to them, and the monitoring of your cycle. Legal basis: performance of the contract.
• Progress, levels and leaderboards: experience points, level, streaks, goals and your standing relative to other learners. You can remove yourself from the leaderboards in the app settings. Legal basis: performance of the contract.
• Invoicing and payment: online payments are processed by our provider Stripe; Physio Learning never has access to your full bank card details. Invoices are retained under accounting obligations. Legal bases: performance of the contract and legal obligation.
• Community spaces: the content you post (messages, questions to instructors). Legal basis: performance of the contract.
• Practitioner map (PhysioMaps): once your first course is validated, your professional profile is added to our public map. You can remove yourself at any time, and choose field by field what is displayed, from Settings › PhysioMaps. See section 7. Legal basis: legitimate interest (making trained practitioners known to the public looking for them), with an immediate right to object and no consequences.
• Support and customer relations: exchanges by email or WhatsApp when you contact us. Legal basis: legitimate interest (answering your requests).
• Communication and direct marketing: sending information about our courses by email and, unless you have turned it off, by WhatsApp, with the option to unsubscribe in every message. We measure the opens and clicks of these messages, and take them into account so as not to write to you the same thing as to everyone else. Legal basis: consent or legitimate interest depending on your situation. See also section 6.
• Prospective customers: when you leave us your contact details without creating an account (form, downloaded document, trade show), we retain them in order to send you information about our courses. Legal basis: consent or legitimate interest. Unsubscribing is possible in every message.
• Access security: connection logs, device identifiers, notification tokens, and the approximate location of connections (town, country) in order to detect the shared use of an account, an individual course place not being transferable. Legal basis: legitimate interest (security of the service and protection of our rights).

We collect no health data about you. The topics of the courses you take describe your professional activity, not your state of health.

3. Recipients and processors

Your data is accessible only to authorised staff at Physio Learning and to our processors, strictly to the extent necessary for their tasks. We neither sell nor rent your data.

• Google Cloud Platform, Firebase and the Google Workspace services: hosting of the app, authentication, notifications, error reports, sending of emails, storage of your course documents, administrative spreadsheets, calendar and video conferencing for sessions.
• Stripe: online payment.
• SiteGround: hosting of the website.
• Postmark: delivery of our emails, and measurement of their opens and clicks.
• Twilio: sending verification codes by SMS when you sign in by telephone.
• Green API: technical delivery of our WhatsApp messages.
• Make.com: automation of our internal processes (enrolments, payments, administrative follow-up).
• Notion: hosting of some of the teaching content displayed in the app.
• Google Maps Platform: displaying the practitioner map and searching within it.
• Meta Platforms Ireland Limited: see below.
• Funding bodies (ANDPC, FIF PL, OPCO, employer) when your course is funded by a third party: the required supporting documents are sent to them.

Targeted advertising and lookalike audiences

We send Meta Platforms Ireland Limited your email address and, where you have given it to us, your telephone number, in the form of cryptographic hashes.

Why. To avoid showing you advertisements for a course you have already taken, and to allow Meta to identify healthcare professionals with a profile comparable to yours in order to offer them our courses. We receive no individual information about you in return, and we send neither your name, nor your courses, nor any data about your practice.

What Meta does with it. Meta compares these hashes with those of its own users. The matches feed an advertising audience. Data that matches no account is deleted by Meta.

Legal basis. Your acceptance of our terms of use, which describe this transfer, and our legitimate interest in promoting our courses to professionals likely to find them of interest.

For how long. Your contact details remain in this audience for as long as your account exists and you have not objected.

How to object. As this is direct marketing, your objection is unconditional: you do not have to give any reason and we cannot refuse it. The unsubscribe link in each of our emails counts as an objection. You can also write to us at hello@physio-learning.com. In both cases we ask Meta to remove your contact details, and this objection has no consequences for access to your courses.

Some of these providers (in particular Google, Stripe, Meta, Twilio, Postmark, Make.com and Notion) may process data outside the European Union; these transfers are governed by adequacy decisions or by the European Commission’s standard contractual clauses.

4. Retention periods

Your account data is retained for as long as you use the service, then archived or deleted at the end of the applicable statutory periods. Invoices and accounting records are retained for 10 years.

Two sets of records must be distinguished:

• Course documents (training agreements, attendance and payment attestations, certificates) are retained for the periods required by funding bodies and by the regulations governing vocational training. They outlive the deletion of your account, because we must be able to account for them to a funding body or an audit.
• Your learning data (progress, assessment answers, time spent, certification cycle) is on the other hand deleted at your simple request, with no need for you to give a reason.

Data may be retained longer where a legal obligation or a dispute justifies it.

5. Your rights

Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the rights of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to lay down instructions on what becomes of your data after your death. Where processing rests on your consent, you may withdraw it at any time. Where direct marketing is concerned, you may object without having to give a reason and we cannot refuse it.

These rights are exercised by email at hello@physio-learning.com. You will receive a reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

6. Cookies, trackers and audience measurement

The website and the app use trackers that are strictly necessary for them to work: authentication, security, language and theme preferences. They do not require consent.

We also use Google Analytics to measure the audience of the website and of the app.

On the website, no measurement cookie is placed without your agreement: a banner asks for your choice on your first visit, and refusing is as easy as accepting. Until you have accepted, or if you refuse, measurement is limited to anonymous technical signals, with no cookie and no identifier (Google’s “consent mode”). In every case the advertising features remain switched off: no advertising cookie, no sharing for advertising purposes, no resale. Your choice is kept for 13 months at most, after which we ask you again; you can change or withdraw it at any time through the “Manage my cookies” link in the footer: withdrawal takes effect immediately.

In the mobile app, this measurement is switched on as soon as you arrive. You can object by writing to us at hello@physio-learning.com.

Pages viewed after a click in our emails

When you click a link contained in one of our emails, we record which course page or pricing page you then view. This allows us to tailor the following messages to what actually interests you, rather than writing to you the same thing as to everyone else.

This tracking is deliberately limited.

• We place no cookie and read nothing on your device for this. You are recognised solely through the link you have just clicked.
• If you arrive on the website other than by clicking in one of our emails, your visit remains anonymous.
• Only course pages and pricing pages are concerned. The rest of the website, in particular the blog and the legal pages, is not tracked in this way.
• We never record the content of web addresses beyond the page itself.

Legal basis. Our legitimate interest in sending you relevant information rather than generic messages.

How to object. The unsubscribe link in each of our emails counts as an objection, with no need to give a reason. The visits already recorded are then deleted.

For how long. This information is kept for as long as your account or your subscription to our communications exists.

This tracking is separate from the audience measurement above, which cannot identify you.

7. PhysioMaps (practitioner map)

The PhysioMaps service, published by Physio Learning, is a public directory: the profiles it displays can be viewed by anyone, without an account and without signing in.

You are added to it once your first course is validated, and not before. This rule has applied since 26 July 2026; practitioners who registered before that date may appear without having met it, with the same means of removal. What appears there is your name, your profession, your type of practice, the courses you have validated with us, those you declare having taken elsewhere if you enter them, your town and the approximate location of your practice, and whether or not you take on placement students.

You keep control of three things, from Settings › PhysioMaps in the app: removing yourself entirely from the map, choosing field by field what is displayed (exact address, email, telephone, practice website, booking link, professional registration number), and correcting your information. Removal is immediate and has no consequences for access to your courses.

The map is supplied by Google Maps Platform (Google Ireland Ltd). Displaying the map and the address search features (autocomplete, geocoding) involve sending the corresponding queries to Google; this processing is covered by Google’s privacy policy.

The “around an address” search (for example a patient’s address used by a practitioner during a teleconsultation) is neither recorded, nor logged, nor sent to our audience measurement tools: the address entered is used solely, for the duration of the session, to centre the map and to sort the results by distance. It never appears in the page URL.

8. Security

Physio Learning implements appropriate technical and organisational measures to protect your data: encryption of exchanges (HTTPS), secure authentication, partitioned access to personal areas, hosting with certified providers. The practitioner map is an exception to that partitioning, by design: it is a directory intended to be public, and section 7 states exactly what appears there and how to remove it. In the event of a data breach likely to create a risk to your rights, you will be informed in accordance with the regulations.

9. Updates

This policy may be updated to reflect changes to the service or to the regulations; the applicable version is the one published on this page with its date. See also our terms of use and our terms of sale.