Privacy policy

Last updated: 11 May 2025

How we collect, use and protect your personal data.

This privacy policy explains how Rethink Spark processes personal data and your rights regarding that data.

This privacy policy describes how Rethink Spark collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable laws outside the European Union.

1. Data Controller

Rafael Sanchez – Rethink Spark 7 Avenue Saint-Jean, 06400 Cannes, France Email: contact@rethinkspark.com

2. Data collected

  • Identification information: first name, last name, email, password (user account)
  • Payment data (processed securely via Stripe)
  • Contact form data
  • Navigation data: IP address, browser type, pages visited (via Google Analytics)
  • Marketing data (newsletter subscription via Brevo)

3. Purposes of processing

  • Manage user accounts and access to services
  • Process payments and billing (Stripe)
  • Send transactional and marketing emails (Brevo)
  • Respond to contact form inquiries
  • Analyze traffic to improve the site (Google Analytics)
  • Serve targeted advertising (Google Ads - coming soon)

4. Legal basis for processing

  • Performance of a contract (account creation, payment)
  • Consent (newsletter, cookies, advertising)
  • Legitimate interest (service improvement, security)
  • Legal obligation (billing)

5. Recipients of data

Your data may be shared with: - Stripe (secure payments) - Brevo (email campaign management) - Google (Analytics, Google Ads) - Site hosting provider (OVH) - Legal authorities if necessary

Some of these providers may be located outside the EU. We ensure they provide adequate protection or use standard contractual clauses approved by the European Commission.

6. Cookies and trackers

This site uses cookies to improve your experience, analyze traffic and serve ads. You can accept or refuse cookies via the consent banner.

7. Data retention periods

  • Account data: as long as the account is active + 3 years after deletion
  • Marketing data: 3 years after last interaction
  • Billing data: 10 years (legal requirement)
  • Analytical and advertising cookies: maximum 13 months
  • Contact form data: 3 years after last exchange

8. Your rights

You may at any time: - Access your data - Request rectification or deletion - Restrict or object to processing - Exercise your right to data portability - Withdraw your consent (newsletter, cookies, etc.)

To exercise your rights: contact@rethinkspark.com

9. Policy updates

This policy may be updated. Users will be informed in case of significant changes.

11 May 2025