Home / Privacy policy

Privacy policy

How Upbuy processes personal data collected on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. The French version of this page is binding.

Data controller

UPBUY, SASU with share capital of 1 000 €, RCS Valenciennes 104 168 851, registered office at 5 avenue Émile Zola, 59410 Anzin, represented by its president, Bilal Arbaj.
Contact: contact@upbuy.io.

Data collected

Upbuy only collects data you voluntarily send via the contact form or by email:

  • identity: name, first name, job title;
  • professional contact details: company, email address, phone where provided;
  • content of your message and nature of your request;
  • for consultant applications: CV and professional information you choose to share.

Please do not send special-category data within the meaning of Article 9 GDPR.

Purposes and legal bases

Respond to your request and, where applicable, prepare a proposalPre-contractual steps at your request (Art. 6.1.b GDPR)
Review consultant applicationsPre-contractual steps at your request (Art. 6.1.b GDPR)
Follow up with prospects and clientsUpbuy's legitimate interest in developing and managing its business (Art. 6.1.f)
Keep the website secureLegitimate interest (Art. 6.1.f)

Recipients

Data is intended for Upbuy only. It may be processed on Upbuy's behalf and strictly for their assignment by technical providers: website hosting, email and, once set up, an automated form-handling tool. Data is neither sold nor transferred to third parties.

Transfers outside the European Union

The site is hosted in Switzerland by Infomaniak Network SA. Switzerland benefits from an adequacy decision of the European Commission recognising a level of protection equivalent to that of the European Union.

Retention

  • Contact requests with no follow-up: 3 years from the last exchange.
  • Unsuccessful applications: 2 years from the last exchange, unless earlier deletion is requested.
  • Client data: during the contractual relationship, then for the applicable statutory limitation periods.
  • Hosting technical logs: limited period set by the host for security reasons.

Cookies

This site does not set cookies, uses no audience-measurement tools and calls no third-party tracking services. Fonts are hosted with the site. No consent banner is therefore required.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to define directives regarding what happens to your data after your death. To exercise them, write to contact@upbuy.io or by post to the registered office. A response will be provided within one month.

If you believe your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

Security

Upbuy implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure, including encryption of exchanges (HTTPS) once it is in service.

Changes to this policy

This policy may be updated, in particular when a new tool is introduced. The date of the latest update appears below. The French version prevails.

Last updated: 17 October 2026.