Privacy policy
What we collect, why, for how long, who we share it with — and how to exercise your rights.
Data controller
The controller for data collected through this site is:
TYCHE SAS — 10 Mail Pierre Desproges, 93500 Pantin, France — Bobigny Trade Register 883 759 946.
Contact: hello@tyche.fr — +33 6 21 75 10 52
Given its size and the nature of its processing, TYCHE SAS is not required to appoint a data protection officer. Any request concerning your data may be sent directly to the address above.
Guiding principle
We collect only the data we actually need to answer your enquiry and carry out our engagements. We sell no data, we rent none, and we run no targeted advertising. No profiling or automated decision-making takes place on this site.
Data collected and purposes
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form Answering an enquiry or quotation request |
Name, company, e-mail address, telephone (optional), type of need, message content | Pre-contractual steps taken at your request (art. 6(1)(b) GDPR) | 3 years from the last contact, where the enquiry does not lead to an engagement |
| E-mail and telephone exchanges Managing the business relationship |
Business contact details and the content of exchanges | Legitimate interest in managing our business relationship (art. 6(1)(f) GDPR) | 3 years from the last contact |
| Contractual and accounting records Performing and evidencing engagements |
Identification data, billing data | Performance of the contract (art. 6(1)(b)) and legal obligation (art. 6(1)(c)) | 10 years, under French accounting and tax obligations (art. L.123-22 of the Commercial Code) |
| Audience measurement Understanding traffic and improving content |
Pages viewed, referring source, device type, truncated IP address | Your consent (art. 6(1)(a) GDPR and art. 82 of the French Data Protection Act) | 14 months maximum; consent requested again after 6 months |
Mandatory fields on the contact form are marked as such. Without them we cannot process your enquiry.
Cookies and trackers
No audience-measurement cookie is set before you consent. The Google Analytics script is not loaded until you click “Accept” in the banner shown on your first visit. Declining is as easy as accepting and degrades nothing about your visit.
| Cookie | Issuer | Purpose | Lifetime |
|---|---|---|---|
tyche_consent | tyche.fr | Remembering whether you accepted or declined audience measurement. Strictly necessary, exempt from consent. | 6 months |
_ga, _ga_* | Google Analytics 4 | Distinguishing visitors and measuring traffic. Set only after acceptance. | 13 months |
You can change your choice at any time via the “Manage cookies” link in the footer, or delete cookies from your browser settings.
Recipients and processors
Your data is processed by TYCHE SAS and, where applicable, by the following technical providers acting as processors within the meaning of article 28 GDPR:
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Netlify, Inc. | Site hosting and receipt of contact-form messages | United States | European Commission standard contractual clauses |
| Google Ireland Ltd. | Audience measurement (Google Analytics 4) and delivery of the site’s web fonts | European Union, with possible transfers to the United States | EU–US Data Privacy Framework and standard contractual clauses |
In the course of company-formation and directorship engagements, we may have to pass the identification data of directors and beneficial owners to the authorised authorities and intermediaries of the country concerned (trade register, company registry, bank, local accountant) where regulation requires it. Such disclosure is then a legal obligation.
Outside these cases, no data is disclosed to third parties.
Security
The site is served entirely over HTTPS. Messages received through the form are stored on our host’s infrastructure with restricted access and forwarded to a professional mailbox protected by strong authentication. Engagement documents are kept in named-access workspaces.
Your rights
Under Regulation (EU) 2016/679 and French Act no. 78-17 of 6 January 1978 as amended, you have the following rights:
- Access — confirmation that your data is processed, and a copy of it.
- Rectification — correction of inaccurate or incomplete data.
- Erasure — deletion of your data, subject to our statutory retention obligations.
- Restriction — temporary suspension of processing you contest.
- Objection — objection to processing based on our legitimate interest.
- Portability — retrieval of the data you provided, in a structured format.
- Withdrawal of consent — at any time, for processing that depends on it, without retroactive effect.
- Post-mortem directives — instructions on the fate of your data after your death.
To exercise these rights, write to hello@tyche.fr or to TYCHE SAS, 10 Mail Pierre Desproges, 93500 Pantin, France. We reply within one month of receiving your request. Proof of identity may be requested where there is reasonable doubt as to who you are.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
Changes to this policy
This policy may be amended to reflect a change in our processing or in regulation. The date of the last update appears below. Where a change is substantial, fresh consent will be sought if the law requires it.
Last updated: September 2026.