Privacy and Personal Data Protection Policies

Data controller

DOCUTRAD – simplified joint-stock company (SAS) – RCS Paris 106 245 426
Registered office: 78 avenue des Champs-Élysées, Bureau 326, 75008 Paris, France
Email (GDPR): client@docutrad.fr

1. Scope & data subjects

This policy describes how DocuTrad collects – uses – stores and protects the personal data of website visitors and clients (individuals and professionals) – including via forms – the file-upload tool and review modules

2. Data collected

Identity & contact: surname – first name – email – phone – postal address
Documents submitted (via form/email and UploadKit): items and files required to perform the services (textual content and metadata)
Order & billing data: services ordered – quote/invoice number – purchase history
Payment: processed via Shopify Payments (DocuTrad neither stores nor accesses full card data)
Customer reviews: name/pseudonym – rating – comment – date – via Trustpilot and/or Google Reviews
Technical data & cookies: technical identifiers – browsing events – cookie consent choices

3. Purposes & legal bases

Performance of the contract (GDPR art. 6-1 b): receiving and handling requests – quotes – production/delivery – customer support
Legal obligations (art. 6-1 c): invoicing – accounting – fraud prevention – legal retention
Legitimate interest (art. 6-1 f): site improvement & security (technical logging – abuse prevention) – requesting reviews after purchase and displaying reviews (Trustpilot/Google) – dispute and debt management
Consent (art. 6-1 a) where required: non-essential cookies – email marketing if enabled

4. Roles & responsibility

Individual clients: docutrad acts as data controller
Professional clients/administrations: docutrad may act as a processor on written instructions (confidentiality agreement on request)
Main processors: Shopify (hosting, e-commerce back office and payment via Shopify Payments) – UploadKit (secure file upload) – Trustpilot / Google (collection/display of reviews) – Data is not resold – Disclosure to authorities only where required by law

5. Transfers outside the EU

Some providers may transfer data outside the EU/EEA – Such transfers are covered by appropriate safeguards (countries with an adequacy decision and/or Standard Contractual Clauses – SCCs) – The privacy policies of Shopify – Trustpilot – Google detail these mechanisms

6. Retention periods

Translation documents: kept strictly for the time needed to perform the service (unless a legal obligation or express request for retention/documentation applies) then deleted
Files uploaded via UploadKit: kept for the duration of order processing then deleted/purged according to our procedures
Accounting/invoices: 10 years (legal obligation)
Customer reviews: kept as long as they reflect a recent and useful purchase experience (and until a removal request compliant with the review platform's rules)
Marketing (if enabled): until consent is withdrawn
Technical logs: limited period necessary for security and audit

7. Your rights

You have the rights of access – rectification – erasure – objection – restriction – portability – and post-mortem directives – To exercise your rights: client@docutrad.fr – In the event of an unresolved difficulty – you may refer the matter to the CNIL (www.cnil.fr)

8. Security

Appropriate technical and organisational measures: HTTPS – access control – pseudonymisation where relevant – backups – minimisation principles – Payments are processed securely by Shopify Payments – Hosting is provided by Shopify – Audits and tests are carried out as needed

9. Cookies & trackers

On arriving at the site – a banner lets you accept all – refuse all or configure non-essential cookies (equal choices) – You can change your preferences at any time via the "Manage cookies" link in the footer – Certain features (advanced audience measurement – marketing) are only triggered with your consent

10. Customer reviews (Trustpilot / Google Reviews)

Following an order – docutrad may invite you to leave a review (legitimate interest) – Published reviews remain the responsibility of their authors and are hosted by Trustpilot and/or Google – docutrad may moderate any clearly unlawful review (abusive – defamatory – discriminatory – unrelated to a genuine experience)

11. Minors

Our services are intended for adults – Any request involving a minor must be made by a legal representative

12. Contact & complaints

For any question or to exercise your rights: client@docutrad.fr – A complaint may be filed with the CNIL

13. Updates

This policy may change (the most recent version is published on the website) – Last updated: 28 June 2026