Privacy Policy

1. Data Controller

The data controller for personal data collected on this site is:

---

2. Data Collected

We collect the following personal data as part of our business activities:

Identification Data

• First and last name
• Email address
• Phone number (optional)
• Postal address (for billing)
• Company name and VAT number (for businesses)

Transaction Data

• Order history
• Products purchased
• License keys assigned
• Invoices

Technical Data

• IP address
• Browser type and operating system
• Pages visited and browsing time
• Cookies (see dedicated section)

---

3. Purposes of Processing

Your personal data is collected for the following purposes:

• Order fulfillment: processing purchases, delivering digital products, license management
• Customer relationship management: technical support, responding to contact requests
• Legal obligations: billing, accounting, retention of proof of purchase
• Service improvement: anonymized analysis of site usage
• Communication: sending purchase-related notifications (product updates, renewals)

---

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

• Contract performance: to process your orders and provide purchased products
• Legal obligation: to comply with our accounting and tax obligations
• Legitimate interest: to improve our services and ensure site security
• Consent: for sending commercial communications (newsletter)

---

5. Data Retention Period

Your personal data is retained for the following periods:

• Customer account data: throughout the business relationship, then 3 years after the last contact
• Billing data: 10 years (legal accounting requirement)
• Connection data: 1 year
• Cookies: 13 months maximum

---

6. Data Recipients

Your personal data may be shared with the following recipients:

• Payment providers: Stripe, PayPal (for secure payment processing)
• Hosting provider: o2switch (site and data hosting)
• Analytics tools: Google Analytics (anonymized data)
• Accountant: for tax and accounting obligations

We never sell your personal data to third parties.

---

7. Transfers Outside the EU

Some of our service providers may be located outside the European Union (notably Stripe and Google). In such cases, we ensure that these transfers are governed by appropriate safeguards:

• European Commission standard contractual clauses
• Data Privacy Framework certification (USA)

---

8. Cookies

This site uses cookies to function properly and improve your experience.

Strictly Necessary Cookies

These cookies are essential for the site to function and cannot be disabled:

• User session (account login)
• WooCommerce shopping cart
• Cookie preferences
• Security (CSRF protection)

Performance Cookies

These cookies allow anonymous analysis of site usage:

• Google Analytics (with IP anonymization)

You can manage your cookie preferences through your browser settings or our consent banner.

---

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is being processed and receive a copy
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your data (within legal limits)
• Right to restriction: request restriction of processing of your data
• Right to portability: receive your data in a structured, readable format
• Right to object: object to the processing of your data for legitimate reasons
• Right to withdraw consent: at any time for consent-based processing

How to Exercise Your Rights

To exercise these rights, contact us by email at contact@maximepotier.fr, specifying your request and attaching a copy of an identity document if necessary.

We commit to responding within one month of receiving your request.

---

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for all communications
• Hashed passwords (not stored in plain text)
• Restricted access to personal data
• Regular secure backups
• Regular security updates

---

11. Complaints

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the CNIL (French Data Protection Authority):

---

12. Changes

This privacy policy may be modified at any time to reflect legal changes or changes in our practices. The date of the last update is indicated at the bottom of this page.

We encourage you to regularly check this page to stay informed about our data protection practices.

Last updated: November 30, 2025