RGPD

GTC, legal notices and privacy policy: what obligations apply to an online training sales website (Podia, Systeme.io, Learnybox…)?

Creating your online training sales website with a platform such as Podia is now simple and accessible. But beyond the technical side, an e-commerce website – even one dedicated to training courses – must comply with several legal obligations.

Contents
Schedule a discussion

Reading time:

6 min

Creating your online training sales website with a platform such as Podia is now simple and accessible. But beyond the technical side, an e-commerce website – even one dedicated to training courses – must comply with several legal obligations.

Among the essential documents are the legal notices, the general terms and conditions of sale (GTC) and the privacy policy. These three elements structure the relationship with your customers, secure your sales and ensure compliance with the applicable regulations (French Consumer Code, GDPR, LCEN).

Failing to put them in place can expose the trainer to penalties (fines, customer disputes, blocking of the website) and, above all, to a loss of trust. Conversely, clearly displaying these documents reassures your learners and positions you as a credible professional.

If you would like to call on an e-commerce lawyer, contact me!

The legal notices of an online training website

Legal notices are the first mandatory building block of any e-commerce website, including when you sell online training courses via Podia or another platform. They make it possible to clearly identify the website's publisher and host, so that visitors know whom they are dealing with.

In practical terms, your legal notices must contain:

  • Your full identity: surname and first name if you are a micro-entrepreneur, or company name if you operate through a company.
  • Your contact details: postal address, email, telephone number.
  • Your registration number (SIRET, RCS or RM depending on your activity).
  • The name and address of your website's host (even if you use Podia, you must mention its host).
  • The publication director (yourself or your company's legal representative).

Penalty in the event of absence: up to €75,000 in fines for an individual and €375,000 for a company (article 6, LCEN).

On Podia, publishing the legal notices is done easily, but it is up to you to provide the content. You should not copy and paste a generic template, because your information must be tailored to your activity as a trainer.

The general terms and conditions of sale (GTC) for an online training website (Podia, Systeme.io, Learnybox…)

The GTC are the legal core of your online training sales activity. They govern the contractual relationship with your customers and set the ground rules from the outset.

To be compliant and protective, your GTC must specify:

GTC — Online training
The general terms and conditions of sale (GTC) for an online training website
ClauseDetails
Price and payment termsAmount, method of payment (card, bank transfer), payment schedule in the event of payment in instalments.
Access conditionsImmediate access after payment, period of availability, access by subscription.
Refund rulesRefund possible in the event of error, with any applicable exclusions.
Right of withdrawalMandatory for consumers, unless waived in order to access the content immediately.
Intellectual propertyVideos, PDF materials or modules may not be copied or distributed without consent.
LiabilitySpecify the limits (learning outcomes are never guaranteed).
Provided for information purposes only; does not constitute legal advice.

Good to know: the GTC are mandatory as soon as you sell to consumers (French Consumer Code, art. L. 111-1 et seq.). Their absence can lead to penalties and disputes that are difficult to resolve.

On Podia, you can insert your GTC directly into the checkout funnel so that each customer accepts them before payment.

The privacy and cookie policy, and GDPR compliance

Every online training website collects personal data: first name, surname, email address, payment data, progress through the course… This information is protected by the GDPR and must be processed transparently. A CNIL lawyer can support you in achieving compliance.

Your privacy policy must specify:

  • The data collected: identification data, payment data, platform usage data.
  • The purpose of the collection: purchase management, access to training courses, sending newsletters.
  • The retention period: for example, customer data kept for as long as the commercial relationship is active, then archived for 3 years.
  • Users' rights: access, rectification, erasure, objection.
  • The use of cookies and trackers: in particular to analyse browsing or measure the performance of your training courses.
  • Any subprocessors: for example, Podia as the host and technical manager of your content.

Important: even though Podia provides a compliant technical framework, legal liability remains in your hands. It is up to you to draft a policy suited to your activity and to make it available to your customers.

A clear and personalised privacy policy is not only a legal obligation, but also a mark of seriousness that reassures your learners.

Let's discuss your needs for 15 minutes!

Setting up your GTC, legal notices and privacy policy on Podia

Drafting your legal documents is an essential step, but you still need to make them visible and accessible on your Podia website.

In practical terms, you must:

  • Create dedicated pages in Podia: one for the legal notices, one for the GTC, one for the privacy policy.
  • Insert clear links to these pages in your website's footer and in the ordering process.
  • Obtain customers' consent before payment: Podia allows you to integrate a checkbox confirming acceptance of the GTC.
  • Update your documents regularly: as soon as a rule changes (for example with the GDPR or consumer law), you must adapt your texts. A website maintenance contract can provide for these regular updates.
  • Adapt your texts to your activity: a trainer does not have the same obligations as a traditional e-merchant, particularly on the question of the right of withdrawal.

Tip: Avoid the free templates found on the Internet. They are rarely complete and do not cover your specific needs. Poorly drafted GTC or a poorly drafted privacy policy can backfire on you in the event of a dispute.

In summary, Podia gives you the technical tools to publish your documents, but it is up to you to provide content that is clear, tailored and compliant with the law.

Publishing your training courses on Podia or on other online training sales websites is a unique opportunity to grow your business. But to secure your sales and inspire confidence in your learners, your legal notices, your GTC and your privacy policy must be clear, accessible and compliant with the law.

If you would like to create or review the legal documents for your online training website, I can support you in order to ensure full compliance tailored to your activity.

I want reliable legal documents!

To learn more

Which legal documents are needed for an online training sales website?

An online training sales website must display three essential documents: the legal notices, the general terms and conditions of sale (GTC) and the privacy policy. They structure the relationship with customers, secure sales and ensure regulatory compliance.

Are legal notices mandatory on a training website?

Yes. Like any website accessible to the public, a training sales website must display legal notices identifying the publisher and the host, in accordance with the LCEN. They allow customers to know who is responsible for the website and its content.

Why have GTC to sell online training courses?

A training sales website is an e-commerce website subject to the French Consumer Code. The GTC govern the sale: price, payment, access to the training, right of withdrawal and warranties. They secure sales and clarify the relationship with learners.

Is a privacy policy mandatory?

Yes. As soon as the website collects personal data, a privacy policy that complies with the GDPR is mandatory. It informs learners about the data collected, its purpose, its retention and their rights, and ensures transparency of processing.

What penalties apply in the absence of these documents?

Failing to put these documents in place can expose the trainer to penalties: fines, customer disputes, or even blocking of the website. Beyond that, the absence of these documents undermines learners' trust and the trainer's professional credibility.

Do these obligations apply with platforms such as Podia?

Yes. Whatever platform is used (Podia, Systeme.io, Learnybox), the training sales website remains subject to legal obligations: legal notices, GTC and privacy policy. Technical simplicity does not exempt you from regulatory compliance.

What legal framework applies to an online training website?

A training sales website is subject to several sets of rules: the French Consumer Code for the sale, the GDPR for personal data and the LCEN for the legal notices. Compliance with this framework determines the website's compliance.

Is a lawyer useful for an online training website?

An e-commerce lawyer helps draft legal notices, GTC and a privacy policy that are compliant and tailored to the sale of training courses. This support secures sales, prevents disputes and strengthens the trainer's credibility.

Still have questions?

Our team is available!

Have a question?

Your information will remain strictly confidential.
Thank you! We will get back to you shortly. If you'd like to speed things up, schedule a time with me directly here:
Schedule a 15-minute call
Oops! Something went wrong while submitting the form.
Homme en costume bleu foncé avec cravate et pochette blanche, bras croisés, regardant vers l'avant.

Ressources

Aller plus loin

00
article(s) affiché(s) sur
00

7 min

AI ACT - Implementation
The AI Act is the very first legal framework addressing the risks of AI and enabling Europe to play a leading role on the global stage.

6 min

QWANT: The CNIL Reminds the Company of Its Obligations Regarding the Processing of Personal Data
The protection of personal data has become a crucial issue in the digital age, where every online interaction generates a multitude of information that may be exploited. The case of QWANT, the French search engine, is a prime example of the challenges that companies face in com

13 min

Cyberattacks against companies: directors' legal liability and legal defence strategies
Cyberattacks targeting companies engage the liability of corporate officers and require suitable strategies.

7 min

Assessing the loss linked to the mobilisation of employees
Assessing the loss linked to the mobilisation of employees is of paramount importance in the context of contractual liability, particularly when disputes arise following the termination of a contract.

10 min

Pre-Contractual Disclosure Document (DIP): a crucial document in your franchise project
In the world of franchising, one document stands out for its fundamental and mandatory nature: the Pre-Contractual Disclosure Document, commonly known as the DIP.

7 min

EAA: Key Requirements and Implications for Compliance
Directive (EU) 2019/882, commonly known as the European Accessibility Act, represents a significant step forward in harmonising accessibility requirements within the European Union. This legislation aims to ensure that various products and services, whether automated teller
Book an appointment
Book an appointment📆 15-Min Meeting