Last updated: May 2026

1. Data Controller

The website www.roots-unity.com is operated by:

• Roots Unity SASU — Capital €1
• Registered office: 45 rue Léon Bathiat, boîte 61, 59600 Maubeuge, France
• Registration: RCS Valenciennes (pending)
• Represented by Stéphane Jacquet, President
• Contact: contact@roots-unity.com

2. Personal Data Collected

We collect the following personal data:

• Contact forms: name, email, phone (optional), message content
• Service bookings: name, email, billing address, professional status
• Technical data: IP address, browser type, pages visited (server logs)
• Cookies: see section 7

3. Purposes and Legal Bases

Purpose	Legal basis (GDPR Art. 6)
Responding to inquiries	Consent / pre-contractual measures
Service delivery	Contract performance
Invoicing and accounting	Legal obligation
Site security and analytics	Legitimate interest

4. Recipients and Sub-processors

Your data may be shared with the following sub-processors, bound by contractual data protection clauses:

• OVH SAS (France) — hosting
• Automattic / WordPress (USA) — CMS framework
• WPForms — form processing (data stored on OVH)
• Payment providers (Stripe, banking institutions) — when applicable

No data is sold or shared with third parties for marketing purposes.

5. Data Retention

• Contact forms: 3 years after last interaction
• Client files (active contract): duration of the engagement
• Accounting records: 10 years (legal obligation)
• Server logs: 12 months
• Marketing consent (if applicable): until withdrawal

6. Your Rights

Under the GDPR and applicable national laws (France, Belgium, Luxembourg), you have the right to:

• Access your personal data
• Request rectification or erasure
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority (CNIL in France, APD in Belgium, CNPD in Luxembourg)

To exercise these rights: contact@roots-unity.com

7. Cookies

This website uses:

• Strictly necessary cookies (session, language preference) — no consent required
• Analytics cookies — only with your prior consent (cookie banner)

You may manage your cookie preferences at any time via your browser settings.

8. International Transfers

Some sub-processors (e.g. Automattic) are based outside the EU. Transfers are framed by EU Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework.

9. Security

We implement appropriate technical and organizational measures (HTTPS encryption, access controls, regular backups, security updates) to protect your data against unauthorized access, alteration, or loss.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. Material changes will be notified via the website banner. The current version is dated at the top of this page.