Privacy policy
What data we process, why, and what your rights are. This policy complies with the GDPR and the Swiss Federal Act on Data Protection (FADP). Last updated: 29 September 2026.
Controller
Eric Pignol, Phronesis IT, 115 rue du Comte de Permissions, 01220 Divonne-les-Bains, France. Contact: contact@phronesis-it.fr.
This website
This site sets no advertising or tracking cookies. On the payment pages and client area only, Stripe sets cookies that are strictly necessary for payment security and fraud prevention. Fonts are hosted on our own server. To know which pages are visited and how many people call us or book an audit, we use Plausible Analytics (Plausible Insights OÜ, Estonia, European Union): it sets no cookies, collects no data that could identify you and does not track you across websites. Our host, Hostinger, keeps technical logs (IP address, date, page requested) to keep the service secure.
Data we process
When you contact us
By phone, email or WhatsApp: your name, contact details and the content of your request, so we can reply and prepare a proposal. Legal basis: pre-contractual steps and legitimate interest. Retention: 3 years after the last contact if no contract is signed. If you choose WhatsApp, your messages pass through that service, operated by Meta, under its own terms. For sensitive information, please call.
When you fill in the form
Your name, phone number, profile (business or private), town and description of your needs are sent to us by email so we can call you back. Legal basis: pre-contractual steps. Retention: 3 years after the last contact if no contract is signed.
When you request a call back or use the assistant
The help button sends your name, phone number, preferred time and message to us by email, solely so we can call you back. The assistant first answers from replies we have prepared. For more open questions, it may use Anthropic's artificial intelligence service (United States): only the text of the conversation is sent, without your name or IP address, and we do not keep conversations. Please do not share passwords or sensitive data.
When you book an audit
Bookings are handled by our own module, hosted on our server at Hostinger: no third-party service is involved. We receive your name, email, phone number, profile, town, preferred way to talk and any notes, to arrange the appointment and send you a confirmation. Legal basis: pre-contractual steps. Retention: 12 months after the appointment date, then automatic deletion. For a gift card, we also keep the recipient's first name, the message and the sender's name, to produce the card. For training credits, we keep your email address, balance and credit history for as long as they are valid, then for the legal accounting retention period.
When you pay or use your client area
Payment is displayed directly on our pages, in a secure frame provided by Stripe. For the client area, your email address is only used to send you a temporary sign-in link; your subscriptions and invoices are read from Stripe when you visit and are not stored on our server. Payments are processed by Stripe Payments Europe Ltd (Ireland). We never see your full card or bank details: we receive your name, email, amounts and the last four digits of your payment method. Legal basis: performance of the contract and accounting obligations.
When you are a client
Contract and billing data, kept for the duration of the contract and then 10 years for accounting records, as required by article L.123-22 of the French Commercial Code.
Data stored on your devices
During an intervention we may have access to data that belongs to you. We process it only on your behalf, as a processor, under the data processing agreement signed with you. We keep no copy of it. Remote sessions are end-to-end encrypted: the connection servers they pass through cannot read their content.
Recipients
Your data is never sold or shared for marketing. It is accessible to Phronesis IT and to its technical providers, within the limits of their role: Hostinger (website and booking hosting), Plausible (anonymous audience measurement), Stripe (payments), Hostinger (email) and [accountant].
Transfers outside Europe and Switzerland
Stripe may, in some cases, process data in the United States, as may Anthropic when the assistant uses artificial intelligence. These transfers are covered by the EU–US and Swiss–US Data Privacy Framework or by standard contractual clauses.
Security
Two-factor authentication on all our accounts, an encrypted password manager, encrypted devices, and access revoked after every intervention.
Your rights
You may request access to your data, its correction, deletion or portability, restriction of processing, or object to it. Write to contact@phronesis-it.fr; we reply within one month. You may also contact the CNIL (cnil.fr) in France or the Federal Data Protection and Information Commissioner (edoeb.admin.ch) in Switzerland.