PRIVACY POLICY

Last updated: September 5, 2025

1. Data Controller

COVER AR
34 Lotissement Les Acacias
76150 La Vaupalière
France

Email: contact@cover-ar.com

2. Data Collected

We collect the following information:

  • Full name

  • Business email address

  • Phone number

  • Company name and address

  • VAT number (if applicable)

Payment information is processed exclusively by Stripe. COVER AR does not store full banking details.

For equipment rental, identity verification may be conducted through Stripe Identity. Identity verification data is processed directly by Stripe and not stored by COVER AR.

We may also collect limited technical data (such as device identifiers). Only essential session cookies are used.

3. Purpose of Processing

Data is used solely for:

  • Account creation and management

  • Billing and payment tracking

  • Technical support

  • Identity verification (equipment rental)

  • Compliance with legal obligations

No marketing or promotional emails are sent. Only transactional emails related to service usage (confirmations, invoices, account notifications) are issued.

4. Legal Basis

Processing is based on:

  • Performance of a contract

  • Compliance with legal obligations

  • Legitimate interest (security and fraud prevention)

5. Data Retention

Personal data is retained for the duration of the contractual relationship and archived for five (5) additional years for legal and accounting purposes.

Data processed via Stripe Identity is retained directly by Stripe according to its own privacy policy.

6. Data Recipients

Personal data may be shared with:

  • OVHcloud (hosting provider)

  • Stripe (payment processing and identity verification)

  • Accounting service providers

  • Legal or governmental authorities where required by law

7. International Transfers

Certain data may be transferred outside the European Union, including via Stripe and Stripe Identity.

Appropriate safeguards are implemented in compliance with GDPR requirements.

8. Your Rights

Under applicable data protection laws (including GDPR and UK GDPR), you may request access, correction, deletion, restriction, objection, or portability of your data.

If you are located in the United Kingdom, your rights are protected under the UK GDPR.

If you are located outside the European Union, you may have additional rights under your local data protection laws.

You may exercise your rights by contacting dpo@cover-ar.com.

You may also lodge a complaint with the French data protection authority (CNIL).

9. Security

Reasonable technical and organizational measures are implemented to protect personal data from unauthorized access, alteration, or disclosure.

10. Cookies

Only essential session cookies necessary for user authentication and session maintenance are used. No advertising or tracking cookies are deployed.

11. Intended Audience

The services are exclusively intended for business users and are not directed toward minors.

12. Changes

COVER AR reserves the right to modify this Privacy Policy at any time. Any updated version will be published on the Platform.