Privacy and Personal Data Protection Policies

Data Controller

DocuTrad – Mohamed Bettaieb, sole proprietor (EI) – Address: 48 rue de la Varenne, 94100 Saint-Maur-des-Fossés (France) – GDPR Email: client@docutrad.fr

1. Scope & persons concerned

This policy describes how DocuTrad collects, uses, stores, and protects the personal data of website visitors and customers (individuals and professionals) – including via forms, the file upload tool, and review modules.

2. Data collected

Identity & contact: name – surname – email – telephone – postal address
Documents submitted (via form/email and UploadKit): documents and files necessary for the execution of services (textual content and metadata)
Order & Billing Data: Services ordered – Quote/Invoice number – Purchase history
Payment: processed by Stripe (DocuTrad does not store or access full card details)
Customer reviews: name/username – rating – comment – ​​date – via Trustpilot and/or Google Reviews
Technical data & cookies: technical identifiers – browsing events – cookie consent choices

3. Purposes & Legal Basis

Contract execution (Art. 6-1 b GDPR): receiving and processing requests – quotes – production/delivery – customer support
Legal obligations (art. 6-1 c): invoicing – accounting – fraud prevention – legal retention
Legitimate interest (art. 6-1 f): website improvement & security (technical logging – abuse prevention) – soliciting and displaying post-purchase reviews (Trustpilot/Google) – managing disputes and debt collection
Consent (art. 6-1 a) where required: non-essential cookies – email marketing if activated

4. Roles & Responsibilities

For individual customers: docutrad acts as the data controller
Business clients/administrations: docutrad can act as a subcontractor on written instructions (confidentiality agreement on request)
Main subcontractors: Shopify (e-commerce hosting and back-office) – Stripe (payment processing) – UploadKit (secure file uploads) – Trustpilot/Google (review collection/display) – Data is not resold – Disclosure to authorities only if required by law

5. Transfers outside the EU

Some service providers may transfer data outside the EU/EEA – These transfers are governed by appropriate safeguards (adequacy decisions and/or Standard Contractual Clauses – SCCs) – The privacy policies of Shopify, Stripe, Trustpilot, and Google detail these mechanisms

6. Shelf life

Translation documents: kept strictly for the time necessary for execution (unless legally required or expressly requested for retention/documentation) and then deleted
Files uploaded via UploadKit: kept only for the duration of order processing, then deleted/purged according to our procedures
Accounting/invoices: 10 years (legal obligation)
Customer reviews: retained as long as they reflect a recent and useful shopping experience (and until a removal request complies with the review platform's rules)
Marketing (if enabled): until consent is withdrawn
Technical logs: limited duration required for security and auditing

7. Your rights

You have the right to access, rectify, erase, object to, restrict the processing of, and transfer your data, as well as the right to provide instructions regarding the management of your data after your death. To exercise your rights, please contact: client@docutrad.fr – If the problem remains unresolved, you can contact the CNIL ( www.cnil.fr) )

8. Security

Appropriate technical and organizational measures: HTTPS – access control – pseudonymization where relevant – backups – principles of data minimization and "as little as necessary" – Payments are securely processed by Stripe – Hosting is provided by Shopify – Audits and tests are conducted as needed

9. Cookies & trackers

Upon arrival on the site, a banner allows you to accept all cookies, reject all cookies, or configure non-essential cookies (equal choice). You can modify your preferences at any time via the "Configure cookies" link in the footer. Some features (advanced audience measurement, marketing) only activate with your consent.

10. Customer reviews (Trustpilot / Google Reviews)

Following an order – docutrad may invite you to leave a review (legitimate interest) – Published reviews remain the responsibility of their authors and are hosted by Trustpilot and/or Google – docutrad may moderate any review that is clearly illegal (abusive – defamatory – discriminatory – unrelated to a real experience)

11. Minors

Our services are for adults – Any request involving a minor must be made by a legal guardian

12. Contact & Complaints

For any questions or to exercise your rights: client@docutrad.fr – Complaint can be lodged with the CNIL

13. Update

This policy may change (most recent version published on the website) – Last updated: 12/09/2025