Privacy

This privacy policy explains how Theoasso collects, uses and protects your personal data when you use the website and its services.

The controller of your personal data is:

Theoasso SIRET: 99208402000013 Registered office: 16 rue Cuvier, 69006 Lyon, France Publication director: Stéphane Hamelin

For questions about your personal data: Email: contact@theoasso.com

The public website is hosted by Vercel. Data is stored on its infrastructure in accordance with its security standards.

Depending on how you use the website, we may collect:

a) Data you provide directly

Account creation: first and last name, email, encrypted password and address(es)

Orders: billing address, telephone number (if requested) and order details

Contact: information submitted through forms (message, email, etc.)

Comments (if enabled): content and associated metadata

b) Data collected automatically

Technical data: IP address, browser, operating system, pages visited and logs

Cookies and tracking technologies (see the Cookies section)

c) Payment Direct debits are handled by GoCardless. The website does not store your bank card details; payment information is handled by the payment provider. Provider: GoCardless

We process your data to:

Manage orders and deliveries (performance of a contract)

Manage your customer account (performance of a contract)

Provide customer support (legitimate interests and/or performance of a contract)

Issue invoices and meet accounting requirements (legal obligation)

Secure the website and prevent fraud (legitimate interests)

Audience measurement Tool: Matomo Analytics

Your data may be shared only with the necessary recipients:

Theoasso team (orders and support), Théobills team (account creation), and Caleb team (licence creation)

Technical providers (hosting and maintenance)

Payment providers (depending on your payment method)

Transactional email: Brevo. Newsletter registrations: Google Sheets (email, date, source and status).

We do not sell your data.

We retain data only for as long as necessary:

Order and billing data: the statutory accounting retention period (generally 10 years in France)

Customer account: while the account is active, followed by deletion or anonymisation after 3 years of inactivity.

Contact form enquiries: 4 months

Cookies: see the Cookies section (retention varies by cookie)

The website may use cookies for:

Website operation (payment session and security)

Audience measurement with Matomo, without analytics cookies. You can opt out at any time using the control on this page.

Under the GDPR, you have the following rights:

Access to your data

Rectification

Erasure (subject to legal limits)

Objection

Restriction of processing

Data portability

Withdrawal of consent (for example, cookies or the newsletter)

To exercise your rights: Email: contact@theoasso.com

You may also lodge a complaint with the French data protection authority, the CNIL.

We implement appropriate security measures (HTTPS, updates and access controls, among others). No system is invulnerable. In the event of a serious incident, applicable legal notification requirements will be followed.

Some payment, analytics and email providers may process data outside the EU. In such cases, appropriate safeguards are required, such as standard contractual clauses. Providers concerned: Vercel, GoCardless, Brevo and Google Sheets

Pages may include embedded content such as videos, maps or social media. These services may collect data through their own cookies in accordance with their privacy policies.

Theoasso 16 rue Cuvier, 69006 Lyon, France Email: contact@theoasso.com

Publication director: Stéphane Hamelin Hosting: Vercel © Theoasso – All rights reserved