Legal
Privacy policy
Updated on August 17, 2026
This policy describes how NEW COMMERCE processes the personal data collected through new-commerce.com, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
Data controller
The data controller is:
Contact: amaury@new-commerce.com
NEW COMMERCE has not appointed a Data Protection Officer (DPO), as such an appointment is not mandatory given the nature and volume of the processing carried out.
Data collected and purposes
Contact form
When you use the contact form, we collect: last name, first name, email address, company, and the content of your message. A phone number may also be collected if you provide one.
This data is used to answer your request and, where relevant, to follow up on the business relationship. It is stored in our customer relationship management (CRM) tool, HubSpot.
Legal basis: pre-contractual measures taken at your request (article 6.1.b GDPR) for handling your enquiry; legitimate interest (article 6.1.f) for the commercial follow-up of business contacts.
Retention period: 3 years from your last contact with us.
Audience measurement
We use Google Analytics 4 to measure site audience (pages viewed, visit duration, traffic source, browsing data). This data is only collected after your consent has been obtained through the cookie banner.
Legal basis: consent (article 6.1.a GDPR). You may withdraw it at any time (see our cookie policy).
Retention period: 14 months maximum.
Interaction tracking (HubSpot)
Subject to your consent, HubSpot may set trackers that associate your browsing on the site with your contact record if you have previously given us your details.
Legal basis: consent (article 6.1.a GDPR).
Technical logs
As with any website, the server records technical logs (IP address, timestamp, pages requested) required for the operation and security of the site.
Legal basis: legitimate interest (security and proper operation of the service).
Retention period: 12 months maximum.
Recipients and processors
The data collected is intended solely for NEW COMMERCE. It is never sold, rented or transferred to third parties.
It is processed by the following technical sub-processors:
| Sub-processor | Role | Location |
|---|---|---|
| HubSpot, Inc. | CRM and forms | United States (EU data hosting possible depending on configuration) |
| Google Ireland Ltd / Google LLC | Audience measurement (GA4) | EU / United States |
| Railway Corporation | Site hosting | United States |
| Cloudflare, Inc. | CDN and security | United States (points of presence worldwide) |
Transfers outside the European Union
Some of these providers are established in the United States. The corresponding data transfers are governed by appropriate safeguards within the meaning of the GDPR: certification under the EU–US Data Privacy Framework (DPF) and/or the European Commission's standard contractual clauses.
Your rights
Under the GDPR, you have the following rights over your data: the right of access, rectification, erasure, restriction of processing, objection, and portability. You may also give instructions regarding the fate of your data after your death.
To exercise these rights, write to amaury@new-commerce.com. You will receive a reply within one month. Proof of identity may be requested in the event of reasonable doubt.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr or 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
Security
NEW COMMERCE implements appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure: encryption in transit (HTTPS), restricted access to tools, and providers offering recognised security guarantees.
Changes to this policy
This policy may be updated at any time, in particular if the site or the applicable regulations change. The date of the latest update appears at the top of the page.