Privacy Policy

1. Data controller

The data controller is Sec & Cloud (EURL), the company publishing TrustLeader, headquartered at 15 rue de la Paix, 75002 Paris, France. Email: dpo@trust-leader.com

2. Data collected

We collect the following data categories:

Identification data: first name, last name, email, hashed password
Connection data: IP address, connection logs, browser type
Usage data: simulation history, scores, progress, completed quizzes
Payment data: processed by our provider (Stripe)
Company data: name, size, sector (Enterprise accounts only)

3. Processing purposes

Service provision and operation
Personalization of user experience
Service and algorithm improvement
Billing and subscription management
Service-related communications
Legal compliance

4. Legal basis

Consent: non-essential cookies and marketing communications
Contract performance: service provision
Legitimate interest: service improvement and security
Legal obligation: billing and compliance

5. Retention periods

Account data: contract duration + 3 years after termination
Simulation data: as long as the account is active
Billing data: 10 years (legal obligation)
Connection logs: 12 months
Cookies: according to each cookie's lifetime

6. Data sharing

Your data is not sold. It may be shared with:

Technical providers: hosting, Stripe, analytics tools
Company administrators: aggregated team statistics (Enterprise accounts)
Competent authorities: in case of legal obligation

7. Security

We implement appropriate technical and organizational measures: SSL encryption, password hashing, access control, regular security audits.

8. Your rights

Under the GDPR, you have the following rights:

Access to your personal data
Rectification of inaccurate data
Erasure of your data
Restriction of processing
Data portability
Objection to processing
Withdrawal of consent at any time

To exercise your rights: dpo@trust-leader.com. You can also lodge a complaint with your national data protection authority.

9. Data outside EU

Some of our providers may be located outside the EU. We ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).

10. Contact

Email: dpo@trust-leader.com
Address: Sec & Cloud (EURL), 15 rue de la Paix, 75002 Paris, France