Privacy Policy

1. Data Controller
   Spice Road, headquartered at 16, Rue Sainte-Cécile, 75009 Paris, France, is responsible for processing personal data collected via the website www.spiceroad.fr.

2. Data Collected
   Categories of personal data that may be processed:

• Identification and contact data: name, first name, email address, phone number — entered via contact or quote forms.

• Browsing data: IP address, browser type, pages visited — via cookies and analytics tools (Google Analytics).

3. Purposes and Legal Bases

<table> <thead> <tr> <th>Purpose</th> <th>Data Concerned</th> <th>Legal Basis</th> </tr> </thead> <tbody> <tr> <td>Processing contact requests</td> <td>Identity, email, phone</td> <td>Execution of a pre-contractual request</td> </tr> <tr> <td>Improvement of the website and traffic monitoring</td> <td>Browsing data</td> <td>Legitimate interest of the publisher</td> </tr> <tr> <td>Cookie management</td> <td>User preferences</td> <td>Explicit consent</td> </tr> </tbody> </table>

4. Retention Period

• Contact data: retained for 3 years from the last interaction.

• Browsing data (cookies): maximum duration of 13 months, unless renewed consent is given.

5. Data Recipients

• Internal: Spice Road’s marketing and support teams.

• Hosting provider: Hostinger International LTD (Cyprus), responsible for the security and confidentiality of data.

• Authorized subcontractors: technical service providers bound by confidentiality agreements (e.g., Google Analytics for audience measurement).

6. Data Transfers Outside the EU
   Data is hosted within the European Union (Cyprus). No transfers outside the EU are performed.

7. Cookies
   The website uses:

• Strictly necessary cookies for website functionality.

• Analytics cookies (Google Analytics): to measure and optimize traffic.
  You can configure or refuse cookies via your browser settings.

8. Security
   Technical and organizational measures compliant with Article 32 of the GDPR are in place: SSL encryption, restricted access control, regular backups.

9. Your Rights
   In accordance with the GDPR and the French Data Protection Act, you may exercise:

• Right of access: to obtain confirmation of the use of your data.

• Right of rectification: to correct inaccurate data.

• Right to erasure (right to be forgotten).

• Right to restriction of processing.

• Right to data portability.

• Right to object on legitimate grounds.

For any request, please contact:
Email: contact@spiceroad.fr

You may also file a complaint with the CNIL (www.cnil.fr).

10. Policy Updates
    This policy may be updated to reflect legal or technical developments. The date of the latest update is indicated on the homepage.