Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
LearnyBox is a French all in one platform to create, host and sell online courses, with sales funnels, email marketing and webinars, hosted in France within the European Union.
LearnyBox is a French all in one platform that lets creators build, host and sell online courses. It bundles landing pages, sales funnels, email marketing, payment and live or automated webinars in a single environment hosted in France.
Because it covers the full journey from marketing to course delivery, LearnyBox processes substantial personal data about prospects, buyers and learners.
LearnyBox processes account and contact data, payment details, course progress, email engagement and webinar attendance. It sets functional cookies to keep sessions and remember learners, and it can set analytics and marketing cookies to measure funnels and personalise communication.
Behavioural data from funnels and automated emails can build detailed profiles, which raises the sensitivity of the processing compared with a simple website.
The creator using LearnyBox is the data controller, while LearnyBox acts as a processor under an Art. 28 agreement. Course delivery and account management rest on contract, but analytics and marketing cookies fall under the ePrivacy Directive and require prior consent.
Email marketing must respect the rules on electronic communications, which generally means opt in for prospects and a clear unsubscribe option in every message.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent must be collected before analytics, advertising or tracking cookies are set, through a banner that offers a genuine refuse option and no pre ticked boxes. Marketing consent should be separate from the act of buying a course, so that purchase is never conditioned on accepting marketing.
Withdrawing consent must be as simple as giving it, and learners should keep access to their course regardless of their marketing choices.
LearnyBox hosts data in France within the European Union, so the core platform does not transfer personal data to third countries. Transfers can still arise if the creator connects external tools such as advertising pixels or non European email or video services, which then need their own safeguards.
Sign the processing agreement with LearnyBox, map every cookie and tracking script across your funnels, and gate the non essential ones behind a consent management platform. Document the lawful basis for course delivery, analytics and email marketing, and update your privacy and cookie notices accordingly.
Set retention periods for learner and prospect data, honour access and deletion requests, and keep proof of consent for marketing and cookies.
Websites using LearnyBox must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is not always mandatory for LearnyBox, but it is advisable because the platform combines learner data, behavioural tracking through funnels and email engagement, and webinar attendance. Where marketing automation profiles large audiences or monitors learner activity systematically, a DPIA helps document and mitigate the risks.
Sample consent text
We use LearnyBox to deliver our courses, funnels and webinars. With your consent we set analytics and marketing cookies to measure engagement and personalise our offers. You can accept, refuse or change your choices at any time.
Third-party domains contacted
learnybox.comapp.learnybox.comcdn.learnybox.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| learnybox_session | Functional | Session | Maintains the authenticated session for learners and account holders. |
| lb_auth | Functional | 30 days | Keeps a learner signed in across visits to the course area. |
| lb_funnel | Analytics | 6 months | Tracks progress through sales funnels to measure conversion. |
| lb_stat | Analytics | 13 months | Measures page and webinar engagement for reporting. |
| lb_mkt | Marketing | 13 months | Links email and advertising activity to personalise offers. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
LearnyBox sets functional cookies to keep sessions and remember learners across your courses and funnels. Depending on configuration it can also set analytics cookies to measure funnel performance and marketing cookies tied to email and advertising features.
Consent is required for analytics, advertising and tracking cookies used in your funnels and pages. Strictly necessary cookies for login and course delivery do not need consent, but they should still be described in your cookie notice.
Course access, payment and account management rely on the performance of a contract under Art. 6(1)(b) GDPR. Analytics, advertising cookies and prospect marketing rely on consent under Art. 6(1)(a) GDPR.
LearnyBox hosts data in France within the European Union, so the core platform does not transfer personal data to the United States. Transfers can arise only if you connect external tools, such as non European pixels or video services, which then need their own safeguards.
A DPIA is not always mandatory, but it is recommended because LearnyBox combines learner data with behavioural tracking across funnels and email. It becomes more clearly necessary where you profile large audiences or monitor learner activity systematically.
Sign the Art. 28 processing agreement, map every cookie and script in your funnels, and route the non essential ones through a consent management platform. Keep marketing consent separate from purchase, document your lawful bases, and set retention periods for learner and prospect data.
Alternatives include other learning and funnel platforms, both European and international, as well as a self hosted learning management system. When comparing them, favour providers that host within the EU and offer clear processing terms.
List the functional, analytics and marketing cookies used across your LearnyBox pages and funnels, with their purpose and duration. State the lawful basis for each category and explain how visitors can grant, change or withdraw consent.