1. Purpose of the Policy

This Privacy Policy describes how Fox-Plan collects, uses, and protects the personal data of users of its website and services.

Its purpose is to ensure transparency in data processing activities and to guarantee compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and the amended French Data Protection Act.

2. Interpretation and Definitions

In this Privacy Policy, “We”, “Us”, or “Our” refer to FoxPlan SAS, 4 Place Maurice Berteaux, 78400 Chatou, France. The Company acts as the Data Controller under the GDPR.

Personal Data means any information relating to an identified or identifiable individual, such as your name, email address, or usage data.

3. Collecting and Using Personal Data

Personal Data

We collect only the data necessary to provide and maintain the Service, including:

• Email address
• First and last name
• Organization (if applicable)
• Usage Data (e.g. access times, page visits)

Usage Data

Collected automatically through website usage (e.g. IP address, browser type, session duration). This helps us improve reliability and performance.

4. Tracking Technologies and Cookies

FoxPlan uses essential cookies and analytics cookies to improve your experience. No advertising or marketing cookies are used without consent.

• Essential Cookies – authentication and security.
• Preference Cookies – remember language or display settings.
• Analytics Cookies (optional) – anonymized traffic data via Google Analytics.

You can manage your cookie preferences anytime using the “Manage Cookies” option on our site.

5. Use of Your Personal Data

We use Personal Data strictly for the following purposes:

• To provide and maintain the Service.
• To manage your account and authentication.
• To provide support or respond to requests.
• To notify you about service updates or incidents.
• To improve system performance (aggregated analytics).

We never sell or rent personal data.

6. Retention and Storage

7. Transfer of Data

All data is hosted in France on servers operated by Scaleway SAS. We do not transfer data outside the European Economic Area. If an external service requires transfer, EU Standard Contractual Clauses are applied to ensure protection.

8. Processors and Service Providers

Fox-Plan uses technical service providers for certain operations (hosting, backup, support, messaging).

These providers act only under Fox-Plan’s instructions, are bound by confidentiality agreements, and are required to ensure the security of the data they process.

None of these providers transfer data outside the European Union without adequate safeguards, such as the EU Standard Contractual Clauses.

Scaleway Data Processing Agreement (DPA)

Our hosting provider, Scaleway SAS, acts as a Data Processor under the General Data Protection Regulation (GDPR). All customer data is hosted within the European Union (France) in Scaleway’s certified data centers. The processing of this data is governed by Scaleway’s Data Processing Agreement (DPA), which defines the security, confidentiality, and data protection obligations applicable to their services.

You can review Scaleway’s DPA directly download the official document (PDF): Scaleway Data Processing Agreement – PDF version.

For transparency, Scaleway guarantees that data is not transferred outside the European Economic Area (EEA) without adequate safeguards, and that all processing is performed in compliance with the GDPR and the French CNIL’s recommendations.

9. Disclosure and Security

We may disclose data only when legally required, to protect our rights, or ensure the security of the Service. Security measures include encryption (HTTPS/TLS), restricted access, and regular monitoring.

Encrypted Data Storage

All customer data stored in our databases is encrypted at rest using industry-standard algorithms (AES-256 or equivalent) to prevent unauthorized access. Access to production databases is strictly limited to authorized personnel under secure authentication and logging controls. Backups are also encrypted and stored in secure data centers operated by Scaleway in France. These measures ensure that customer information remains protected even in the event of unauthorized system access or data export.

10. Analytics and Third Parties

• Google Analytics – anonymized traffic statistics. You can opt out using the Google opt-out add-on.
• Google reCAPTCHA – used to prevent spam or automated abuse, subject to Google’s Privacy Policy.

11. GDPR Privacy Rights

Under the GDPR, you have the right to:

• Access, correct, or delete your personal data.
• Request data portability.
• Object to processing for legitimate reasons.
• Withdraw your consent at any time.

To exercise your rights, please contact us:

Email: dpo@fox-plan.com

You may also file a complaint with the CNIL: www.cnil.fr.

12. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, Fox-Plan will notify the CNIL within 72 hours and inform the affected individuals as soon as possible.

13. Data Protection Officer (DPO)

The Data Protection Officer of Fox-Plan can be contacted at the following address:

Email: dpo@fox-plan.com

14. Links to Other Websites

Our Service may contain links to other websites not operated by Fox-Plan. We are not responsible for their content or data protection practices. Please review their privacy policies before providing any information.

15. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or notice on our site at least 30 days before they take effect.

16. Contact Us

If you have any questions about this Privacy Policy, contact us:

• Email: dpo@fox-plan.com
• Address: FoxPlan SAS, 4 Place Maurice Berteaux, 78400 Chatou, France