Legal · updated 3 September 2026
Privacy policy
How personal data is handled on begbud.com, under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Controller
Andersson Casper Lars Jonathan, trading as BegBud, 7 rue Notre-Dame de Lorette, 75009 Paris, France · SIREN 108 817 149. Contact for any data question: [email protected] or +33 7 45 70 26 58. No data protection officer is required or appointed.
2. What is collected, why, and on what basis
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Name, company, email, telephone, billing address, VAT number | Taking and performing an order; issuing the invoice | Performance of a contract (art. 6.1.b) | 10 years (accounting obligation) |
| Order reference, engagement, amounts, payment status | Order management, accounting, dispute handling | Contract and legal obligation (art. 6.1.b, 6.1.c) | 10 years |
| Enquiry form: name, company, email, telephone, message | Answering the enquiry | Consent / pre-contractual steps (art. 6.1.a, 6.1.b) | 3 years from the last contact |
| Information shared during an engagement (documents, notes) | Delivering the advisory work | Performance of a contract (art. 6.1.b) | 3 years after the engagement, then deleted |
| Technical logs: IP address, request time, user agent | Security, fraud prevention, service availability | Legitimate interest (art. 6.1.f) | 12 months |
Providing the fields marked as required on the order form is necessary to conclude the contract and to issue a lawful invoice; without them the order cannot be taken.
3. Payment data
Card numbers and bank credentials are never collected, seen or stored by BegBud. Payments are processed by the Consultant's payment service provider, a regulated payment institution established in the European Union, which acts as an independent controller for the payment transaction and applies PCI-DSS requirements. BegBud receives only the payment status, the amount, the method and a transaction reference.
4. Who else sees the data
- Payment service provider — to take and reconcile the payment.
- Hosting and network providers — the site's server operator and the content-delivery network named in the legal notice, acting as processors.
- Email provider — to send order confirmations, invoices and replies.
- Accountant and, where legally required, the tax authorities.
Data is not sold, rented or exchanged, and is not used for advertising profiling. Processing takes place in the European Union; where a processor operates outside the EEA, transfers rely on the European Commission's standard contractual clauses.
5. Your rights
You may request access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting past processing. Write to [email protected]; we answer within one month. Erasure cannot extend to invoices and accounting records the law obliges us to keep for ten years.
You also have the right to lodge a complaint with the French supervisory authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
6. Security
The site is served exclusively over TLS. Order data is held on a server in a controlled environment with restricted administrative access, and payment credentials never reach it. Access to enquiry and order records is limited to the Consultant.
7. Cookies
Only strictly necessary cookies are used, and there are no analytics, advertising or social-network trackers. See the cookie policy.
8. Changes
This policy may be updated to reflect changes in the service or the law. The date at the top of the page always shows the current version.