Privacy Policy
Last updated: January 15, 2026
This privacy policy describes how Velvexium SAS (hereinafter "Velvexium", "we", "our") collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), the French Data Protection Act of January 6, 1978, as amended, and the ePrivacy Directive 2002/58/EC updated in 2024.
1. Data Controller
The controller of your personal data is Velvexium SAS, registered with the Paris Trade and Companies Register under number B 923 456 789, with registered offices at 14 Rue de Rivoli, 75004 Paris, France. For any questions regarding the protection of your data, you may contact our Data Protection Officer (DPO) at: dpo@velvexium.com.
2. Data Collected
In the course of providing our tax and social optimization advisory services, we collect the following categories of data: identification data (surname, first name, postal address, email address, telephone number), data relating to your financial and tax situation voluntarily provided during our consultations, browsing data (IP address, browser type, pages viewed, visit duration) via technical and analytical cookies, and data from contact forms submitted through our online platform.
3. Purposes of Processing
Your personal data is processed for the following purposes: providing our financial advisory and administrative support services (legal basis: contract performance), responding to your contact requests and inquiries (legal basis: legitimate interest), improving the quality of our services and website (legal basis: legitimate interest), compliance with our legal and regulatory obligations, particularly in tax matters (legal basis: legal obligation), and sending communications about our services, subject to your prior consent (legal basis: consent).
4. Data Retention Period
We retain your personal data only for the period necessary for the purposes for which it was collected. Data relating to advisory files is retained for 5 years from the end of the contractual relationship, in accordance with French legal obligations. Browsing data is retained for a maximum of 13 months. Data from contact forms is retained for 3 years from the last contact. Beyond these periods, your data is deleted or irreversibly anonymized.
5. Data Recipients
Your personal data may be shared with the following categories of recipients: our authorized employees and advisors, our technical subcontractors ensuring the hosting and maintenance of our platform (servers located exclusively within the European Union), and administrative and tax authorities as part of our legal obligations. We never sell or rent your personal data to third parties for commercial purposes.
6. Transfers Outside the EU
Velvexium is committed to not transferring your personal data outside the European Economic Area (EEA). All our servers and subcontractors are located within the EU. In the exceptional event that a transfer outside the EU becomes necessary, it would be governed by the standard contractual clauses adopted by the European Commission or any other appropriate safeguard provided for by the GDPR.
7. Your Rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights: right of access to your personal data, right to rectification of inaccurate or incomplete data, right to erasure (right to be forgotten) under the conditions provided by regulation, right to restriction of processing, right to data portability in a structured and machine-readable format, right to object to the processing of your data on legitimate grounds, and the right to withdraw your consent at any time. To exercise these rights, send your request by email to dpo@velvexium.com or by mail to our registered office. We commit to responding within one month. You also have the right to lodge a complaint with the CNIL (French National Commission on Informatics and Liberty).
8. Data Security
Velvexium implements appropriate technical and organizational measures to ensure the security and confidentiality of your personal data. These measures include TLS/SSL encryption of communications, strict access control to databases, pseudonymization of sensitive data, regular security audits conducted by certified providers, and proven backup and business continuity procedures.
9. Policy Modifications
Velvexium reserves the right to modify this privacy policy to comply with legislative and regulatory developments. Any substantial modification will be brought to your attention through a visible notice on our website. We encourage you to regularly consult this page to stay informed of any updates. The date of the last update is indicated at the top of this document.
10. Contact
For any questions about this privacy policy or to exercise your rights, you may contact us: by email at dpo@velvexium.com, by mail at Velvexium SAS, 14 Rue de Rivoli, 75004 Paris, France, or by phone at +33 1 42 36 78 90 (Monday to Friday, 9am to 6pm).