Privacy Policy
Effective Date
March 3, 2026
1. Information We Collect
We collect information you provide directly: • Contact information (name, email) via forms • Account details (username, profile info) for subscription services • Payment information (processed by third-party providers, not stored by us) • Communications (emails, support messages) We automatically collect: • Usage data (pages visited, features used, timestamps) • Device information (browser type, IP address, operating system) • Cookies and tracking technologies (analytics, preferences)
2. How We Use Your Information
Your information is used to: • Process purchases and deliver products • Provide customer support and respond to inquiries • Send transactional emails (receipts, account updates) • Send marketing communications (with your consent, opt-out anytime) • Improve our products and user experience • Detect and prevent fraud or abuse • Comply with legal obligations
3. Legal Basis for Processing (GDPR)
We process your data based on: • Contract performance (delivering products you purchased) • Legitimate interests (improving services, fraud prevention) • Consent (marketing emails, analytics cookies) • Legal obligations (tax records, financial compliance)
4. Data Sharing & Third Parties
We share data with: • Payment processors (Stripe, Paddle) for transaction processing • Hosting providers (Firebase, Google Cloud Platform) for infrastructure • Analytics services (Google Analytics) for usage insights • Email services (for transactional and marketing emails) We do not sell your personal data. Third parties are bound by contracts to protect your information.
5. Cookies & Tracking
We use cookies for: • Essential functions (authentication, preferences) • Analytics (understanding user behavior) • Performance (optimizing loading times) You can control cookies via browser settings. Disabling cookies may limit functionality.
6. Data Retention
We retain personal data only as long as necessary: • Contact form submissions: 2 years • Purchase records: 7 years (tax compliance) • Account data: Until account deletion is requested • Analytics data: 14 months (anonymized) You can request deletion at any time (subject to legal retention requirements).
7. Your Rights (GDPR/CCPA)
You have the right to: • Access your personal data • Rectify inaccurate information • Request deletion ("right to be forgotten") • Object to processing or restrict it • Data portability (receive your data in a structured format) • Withdraw consent at any time • Lodge a complaint with a supervisory authority (CNIL in France) To exercise your rights, email: contact@clemichelabs.com
8. International Data Transfers
Your data may be transferred to and processed in countries outside the EU (e.g., USA via Google Cloud). We ensure adequate safeguards through: • Standard Contractual Clauses (SCCs) • Adequacy decisions by the European Commission • Processor agreements with data protection obligations
9. Security
We implement industry-standard security measures including encryption (HTTPS/TLS), access controls, and regular security audits. However, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
10. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately for deletion.
11. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or website notice 30 days in advance. Continued use after changes constitutes acceptance.
12. Contact & Data Protection Officer
For privacy inquiries or to exercise your rights: Email: contact@clemichelabs.com Subject: "Privacy Request" ClémicheLabs Paris, France