This Policy explains how
The French Academy of Advanced Aesthetics d/b/a MBR Hunt LLC, the owner and provider of this Web Site, handles personal information through its professional online education program. This Policy applies to our use of any and all Data collected by us in relation to your use of the Web Site and any Services or Systems therein. The Academy is not a patient-care platform. Do not submit patient records, protected health information, identifiable clinical images, or other patient-identifying information.
MBR Hunt LLC d/b/a The French Academy of Advanced Aesthetics
185 Lincoln Street, Suite 105
Hingham, Massachusetts 02043, USA
info@thefrenchnp.com
This Privacy Policy describes how MBR Hunt LLC, doing business as The French Academy of Advanced Aesthetics (the “Academy,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information in connection with the Academy’s websites and webpages, online school, registration and checkout, courses, videos, community areas, messages, marketing, and support services. MBR Hunt LLC also does business as The French NP, its clinical and aesthetic medical practice brand. The French Academy of Advanced Aesthetics and The French NP are trade names of the same legal entity; neither is a separate company.
For purposes of applicable privacy laws, MBR Hunt LLC is the controller, business, or organization responsible for the personal information described in this Policy, except where a third party independently determines why and how it processes information.
The Academy is hosted through LearnWorlds. LearnWorlds processes student and visitor information on our behalf for platform functions and may process limited information for its own security, operational, and legal purposes under its own notices.
This Policy applies only to personal information handled in connection with the Academy. It does not govern information collected by MBR Hunt LLC d/b/a The French NP in connection with clinical care, patient treatment, or other healthcare services. Information handled in connection with clinical services is governed by the applicable Notice of Privacy Practices and healthcare privacy obligations.
Information you provide
- Identity and contact information, including name, email address, telephone number, billing address, country, and account credentials.
- Professional-credential information, including professional designation, license or registration number, issuing country and jurisdiction, expiration date, eligibility attestations, and verification status.
- Transaction information, including the course
purchased, price, currency, tax, payment status, refunds, chargebacks, and
limited payment-method details. Stripe processes complete payment-card
information; we generally do not receive or store complete card numbers.
- Academy activity, including enrollment, course
progress, video activity, completion status, downloads,
preferences, and support history.
- Community and communications content, including
posts, comments, profile information, private messages, and communications with
us.
- Marketing preferences and information you
provide through forms, surveys, waitlists, or promotions.
Information collected automatically
We and our service providers may automatically collect IP address, device and browser type, operating system, referring and exit pages, timestamps, approximate location derived from IP address, identifiers, page and video interactions, purchase and registration events, cookie choices, and similar usage information through cookies, pixels, software development kits, local storage, logs, and related technologies. See our Cookie Policy.
Information obtained from other sources
We may receive information from professional licensing authorities, regulatory bodies, publicly available professional registries, credential-verification sources, payment processors, fraud-prevention providers, advertising and analytics providers, referral sources, and marketing partners. This may include license type and status, issuing jurisdiction, publicly available restrictions or disciplinary information, transaction risk indicators, referral source, and campaign-attribution information.
Information we do not request
The Academy is not intended to collect patient records, protected health information, patient names or contact details, identifiable clinical photographs or videos, patient medical histories, or other patient-identifying or sensitive health information. Do not submit this information in profiles, community posts, private messages, support requests, or any other Academy feature. We may remove prohibited information and restrict or terminate accounts that submit it.
| Purpose |
Examples |
EEA/UK Legal Basis, where applicable |
| Provide the Academy |
Create and authenticate
accounts; process enrollment; deliver purchased courses and protected videos;
track progress; provide support, community, and messaging
functions. |
Performance of a contract;
legitimate interests in administering and securing the Academy. |
| Process payments |
Process purchases, taxes,
receipts, refunds, chargebacks, and payment disputes; detect and prevent
payment fraud. |
Performance of a contract;
legal obligations; legitimate interests in fraud prevention and claims. |
| Verify eligibility |
Confirm age and
professional status; check public licensing registries; request clarification;
approve, deny, suspend, or revoke access where appropriate. |
Steps to enter and perform
a contract; legitimate interests in protecting the public, Academy integrity,
and content. |
| Communicate |
Send confirmations,
security alerts, course notices, policy updates, support responses, and other
transactional or service communications. |
Performance of a contract;
legal obligations; legitimate interests. |
| Market and measure |
Send promotional
communications where permitted; administer preferences; measure campaigns;
understand course interests; use analytics or advertising technologies where
enabled. |
Consent where required;
otherwise legitimate interests, subject to applicable opt-outs. |
| Operate and improve |
Analyze use and engagement;
troubleshoot; test features; maintain performance; improve content,
accessibility, navigation, and student experience. |
Legitimate interests in
operating and improving the Academy; consent for nonessential technologies
where required. |
| Protect rights and comply |
Secure systems; prevent
misuse and account sharing; enforce Terms; protect intellectual property;
maintain records; comply with law; establish, exercise, or defend claims. |
Legal obligations;
legitimate interests; establishment, exercise, or defense of legal claims. |
You may withdraw consent at any time without affecting processing completed before withdrawal. Information identified as required during registration or checkout is necessary to determine eligibility, create an account, process a purchase, or provide the Academy. If you do not provide required information, we may be unable to enroll you, grant access, or complete a transaction.
We may disclose personal information to the following categories of recipients for the purposes described in this Policy:
- LearnWorlds and its authorized subprocessors for
website and school hosting, authentication, course delivery, video
functionality, communications, analytics, support, and platform security.
- Stripe, financial institutions, tax tools, and
fraud-prevention providers for checkout, payment processing, tax calculation,
refunds, fraud prevention, and disputes.
- Google, including Google Analytics, and Meta
when analytics or advertising features are enabled, subject to applicable
consent and privacy controls.
- Klaviyo or another email and marketing provider
if enabled for communications, forms, preference management, segmentation, and
campaign measurement.
- Professional licensing authorities, public
registries, and credential-verification providers to confirm eligibility and
professional status.
- Other authorized Academy users. Profile
information, community posts, comments, and other content submitted to
community areas may be visible to them. Private messages are visible to
intended recipients and may be accessible to us and our platform providers when
reasonably necessary for moderation, support, security, legal compliance, or
enforcement of our Terms.
- Professional advisers, accountants, auditors,
insurers, consultants, and vendors that help us operate, secure, administer, or
evaluate the Academy.
- Law enforcement, regulators, courts, government
authorities, or other parties when reasonably necessary to comply with law,
respond to lawful process, address fraud or safety, protect rights, or
establish and defend legal claims.
- A buyer, successor, lender, investor, or other participant in a merger,
financing, reorganization, sale, bankruptcy, or transfer involving all or part
of our business, subject to appropriate protections.
Our providers are permitted to process information for the services they provide and as otherwise allowed by their agreements and applicable law. Some providers may independently control limited processing, such as payment-network, fraud-prevention, security, or legal-compliance activities.
We use or may use cookies and similar technologies for authentication, security, checkout, course delivery, preferences, analytics, email measurement, and advertising. Depending on which features are enabled, providers may include LearnWorlds, Stripe, Google Analytics, Meta, and Klaviyo. Naming a provider in this Policy does not itself activate that provider; information is transmitted only when the relevant integration or feature is enabled.
Where applicable law requires consent, nonessential analytics, advertising, and marketing technologies will not be activated until consent is provided. Available cookie controls may allow you to accept, reject, or select categories and later change your choices. Browser settings and legally recognized universal opt-out mechanisms may also apply. Please review our separate Cookie Policy for detailed categories, anticipated technologies, durations, and controls.
We do not sell personal information for money. If analytics or advertising integrations are enabled, disclosures to those providers may be considered a “sale,” “sharing,” or processing for targeted advertising under some U.S. state laws. Where an applicable law grants the right, you may opt out through the Academy cookie-preference tool, a supported legally recognized universal opt-out signal, or a privacy request to us.
Marketing consent is separate from acceptance of the Academy Terms and is not required to purchase or access a course. You may unsubscribe from promotional email at any time using the link in the message or by contacting us. We may continue to send transactional, account, security, purchase, legal, or course-service communications where appropriate.
If Klaviyo or another provider is enabled, we may use information such as email address, subscription status, consent records, purchases, course interests, website activity, device information, and email opens or clicks to administer subscriptions, measure engagement, segment audiences, and personalize permitted communications. Email pixels and link tracking may be restricted by your device, email-client, and privacy settings.
We are located in the United States. LearnWorlds is established in Cyprus, and our service providers and their subprocessors may process information in the United States, European Economic Area, United Kingdom, and other countries. Privacy laws in those countries may differ from those where you live.
Where required, we and our providers rely on recognized safeguards for restricted transfers, such as adequacy decisions, approved contractual protections, or standard contractual clauses. You may contact us to request additional information about safeguards relevant to your personal information, subject to lawful confidentiality and security limitations.
If applicable law requires us to designate a local representative, we will make the representative's identity and contact information available through this Policy or another legally permitted notice. Until then, international users may direct privacy questions and requests to us using the contact information in Section 18.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide ongoing course access, maintain records, comply with law, resolve disputes, prevent fraud, and enforce agreements. Retention depends on the record, relationship, platform configuration, and applicable legal requirements.
| Record Category |
General Retention Approach |
| Account, enrollment,
progress, and completion records |
For the duration of the
account and course availability, and afterward as reasonably needed to document
purchases, completion, access, and contractual obligations. |
| Professional credentials
and verification |
While eligibility or access
remains relevant and afterward as reasonably needed for audit, safety, dispute,
fraud-prevention, and legal purposes. We avoid retaining unnecessary identity
documents when a registry check is sufficient. |
| Payments, tax, accounting,
and disputes |
Generally up to seven years
after the relevant transaction or longer if required for an audit, dispute,
chargeback, tax matter, or legal claim. |
| Community content and
messages |
Until deleted, removed, or
the relevant feature/account closes, subject to moderation, security, backup,
evidentiary, and legal needs. Content visible to recipients may remain in their
possession. |
| Support and service
communications |
For as long as reasonably
needed to resolve the issue, maintain service history, improve support, enforce
Terms, or address claims. |
| Marketing records |
Until you unsubscribe,
withdraw consent, or we no longer need the record. We may retain a suppression
record to honor an opt-out. |
| Cookie, analytics,
advertising, and security data |
According to the applicable
platform configuration, cookie duration, consent choice, security need, and
provider retention settings described in our Cookie Policy or provider notices. |
We may retain deidentified or aggregated information where permitted by law and may keep information longer when reasonably necessary for litigation, investigation, legal hold, security, or compliance. Providers may retain information under their agreements and independent legal obligations. Deletion from active systems may not immediately remove information from encrypted backups, which are overwritten or isolated under routine schedules.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account the nature of the information and our operations. Measures may include access controls, authentication, vendor oversight, staff and contractor confidentiality obligations, secure payment processing, system monitoring, backups, and incident-response procedures.
No online system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of account credentials, using a unique password, and promptly notifying us of suspected unauthorized access.
Depending on where you live, the law that applies, and whether a legal threshold or exception is satisfied, you may have rights to:
- Know whether we process your personal information and access or receive a copy of it.
- Correct inaccurate personal information.
- Request deletion of personal information.
- Receive portable information in a usable format.
- Restrict or object to certain processing, including direct marketing.
- Withdraw consent without affecting processing completed before withdrawal.
- Opt out of certain targeted advertising, sale, sharing, or profiling, where applicable.
- Appeal a decision on a privacy request, where applicable.
- Lodge a complaint with an applicable privacy or data-protection authority.
These rights are subject to
applicable definitions, legal exceptions, retention obligations, and identity
verification. We will not unlawfully discriminate against you for exercising a
privacy right.
To submit a request, email
info@thefrenchnp.com with the subject “Privacy Request.” Describe your
request and the account or email address involved. We may request information
reasonably necessary to verify your identity and authority. Authorized agents
may submit requests where permitted, but we may require proof of authorization
and verification of the individual.
If applicable law gives you the right to appeal, reply to our decision
or email info@thefrenchnp.com with the subject “Privacy Appeal.” Identify
the original request and explain why you believe the decision should be
reconsidered.This section applies only to the extent a U.S. state privacy law covers our processing. The categories below describe personal information we may collect and disclose for business purposes. We do not necessarily collect every example about every person.
| Category |
Examples |
Sources |
Recipients/Business Purposes |
| Identifiers and customer
records |
Name, email, phone,
address, account ID, IP address, professional license number, payment-related
records. |
You; devices; LearnWorlds; Stripe; registries; referral sources. |
Platform, payment,
security, credential, support, communications, professional advisers. |
| Commercial information |
Courses considered or
purchased, prices, discounts, refunds, transaction and support history. |
You; LearnWorlds; Stripe. |
Platform, payment, tax,
accounting, support, analytics, fraud prevention. |
| Internet and activity
information |
Browsing, login, device,
page, video, course, email, ad, and interaction information. |
Devices; cookies; platform;
analytics, email, and advertising tools when enabled. |
Platform, security,
analytics, email, advertising, support. |
| Professional information |
Designation, license
number, jurisdiction, expiration, public status, verification result. |
You; licensing authorities;
public registries. |
Credential verification,
Academy administration, safety, legal compliance. |
| Communications and user
content |
Posts, comments, profiles,
private messages, feedback, and support communications. |
You and other authorized
Academy users. |
Platform, intended
recipients, moderation, support, security, legal compliance. |
| Approximate geolocation |
General location inferred
from IP address. |
Devices; platform;
analytics or security providers. |
Security, fraud prevention, localization, analytics. |
| Account-access information |
Username, password or
authentication credentials maintained in protected form. |
You; LearnWorlds. |
Authentication, platform
administration, security. |
We do not knowingly use or disclose sensitive personal information for purposes that require a separate right to limit under applicable U.S. state privacy laws. We do not offer financial incentives or price differences in exchange for personal information.
We do not sell personal information for money. When optional advertising technologies are enabled, identifiers and Internet or activity information may be disclosed to analytics or advertising providers in a manner that some laws call sale, sharing, or targeted advertising. Where required, you may opt out using our cookie controls, a supported legally recognized universal opt-out mechanism, or the request process in Section 10.
Where applicable, you may exercise the rights described in Section 10 and object at any time to processing for direct marketing. You may also lodge a complaint with the supervisory authority in the country where you live or work, or where you believe a violation occurred. UK users may contact the UK Information Commissioner’s Office, and Swiss users may contact the Federal Data Protection and Information Commissioner.
We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects. Automated fraud, security, or eligibility tools may flag an account or transaction for review, but we may use human review before making a consequential enrollment or access decision where required by law.
Community features are designed for authorized Academy users, but information shared there should not be treated as private or confidential. Other users may view, copy, or retain posts, comments, profile information, and content visible to them. Private messages are disclosed to intended recipients and may be accessed as described in Section 4. Do not post patient information, confidential business information, or information you do not want disclosed to the applicable audience.
We may moderate, preserve, restrict, or remove content and investigate reports for safety, security, legal compliance, support, or enforcement. We do not undertake to monitor every post or message.
The Academy is intended exclusively for eligible licensed healthcare professionals who are at least 18 years old. Eligible professions are MD/DO, NP/APRN, PA/PA-C, RN, DDS/DMD, and international equivalents of those credentials. Individuals under 18 and individuals who do not satisfy the applicable professional requirements may not create an account, purchase, or use the Academy.
We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 submitted personal information, we may close the account and delete the information, subject to applicable legal, security, transaction, and record-retention requirements. A parent or guardian who believes a minor provided information may contact us.
The Academy may contain links to or integrations with third-party services. Those parties may independently collect and process information under their own terms and privacy notices. This Policy does not control independent third-party practices, and we encourage you to review the relevant notices.
We may preserve or disclose information when we reasonably believe it is necessary to comply with law or legal process; respond to government requests; protect the rights, property, safety, privacy, or security of MBR Hunt LLC, the Academy, The French NP, users, patients, the public, or others; detect or prevent fraud or misuse; enforce agreements; or establish, exercise, or defend legal claims.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal information may be reviewed, transferred, or disclosed as part of that transaction, subject to applicable law and appropriate protections.
We may update this Policy to reflect changes in our services, technologies, vendors, practices, or legal obligations. We will post the revised Policy and update the effective or last-updated date. If a change materially expands how we use previously collected personal information, we will provide additional notice or obtain consent when required by law.
MBR Hunt LLC d/b/a The French Academy of Advanced Aesthetics
MBR Hunt LLC d/b/a The French NP
185 Lincoln Street, Suite 105
Hingham, Massachusetts 02043, USA
Email: info@thefrenchnp.com
Last updated: August 1, 2026
