GDPR
Data Controller
The data controller for personal data is Localnord LLC, an American company (Limited Liability Company) incorporated in the State of Delaware, represented by Robin Gastout.
Data Collected
Identification data
- First and last name
- Email address
- Phone number (optional)
- Company / agency name
Billing data
- Billing address
- Payment information (processed by Stripe — never stored by Localnord)
Usage data
- Connection logs (IP address, browser, date and time)
- Actions performed on the platform
- Google My Business data of clients managed through the platform
Cookies and trackers
- Essential cookies: session, authentication
- Analytics cookies: Google Analytics
- Marketing cookies: Meta Pixel (Facebook), only with your consent
Processing Purposes
- Service delivery — legal basis: contract performance
- Billing and accounting — legal basis: legal obligation
- Customer support and guidance — legal basis: legitimate interest
- Service improvement and statistics — legal basis: legitimate interest
- Commercial prospecting and advertising — legal basis: consent
Cookies — Details and Management
Google Analytics
Traffic analysis and visitor behavior. Anonymized data. You can install the opt-out module.
Meta Pixel (Facebook)
Advertising campaign effectiveness measurement. Only placed after consent. Manage your preferences on Facebook Ad Preferences.
Retention period
13 months maximum, in accordance with CNIL recommendations.
Data Retention Periods
Data Sharing
Localnord never sells your personal data to third parties.
Data Transfers Outside the EU
Data is stored in Ireland (European Union). Some subprocessors (Stripe, Vercel, Google, Meta) are located in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU-US Data Privacy Framework.
Your Rights
In accordance with the GDPR, you have the following rights:
- Access — obtain a copy of your data
- Rectification — correct inaccurate data
- Erasure — request the deletion of your data
- Restriction — restrict processing
- Portability — receive your data in a structured format
- Objection — object to processing
- Withdrawal of consent — at any time
To exercise these rights: sav@localnord.fr. Response within 30 days maximum.
Data Security
- Data encryption in transit (HTTPS/TLS)
- Data encryption at rest
- Secure authentication with password hashing
- Restricted access (principle of least privilege)
- Regular backups and disaster recovery plan
- Periodic security monitoring and audits
Data Breach
In the event of a breach likely to pose a risk to your rights and freedoms, Localnord commits to notifying the competent authority within 72 hours and informing you as soon as possible.
Complaint
You may file a complaint with the data protection authority in your country. For France: CNIL.
Changes
Localnord reserves the right to modify this policy at any time. In the event of a substantial change, you will be informed by email or through the platform.