Legal information

Privacy Policy

Last updated: 16 September 2026

To be reviewed by a professional before going live This text is a draft written from what the site actually does. It has not been approved by a lawyer. The items framed in orange are still to be completed.

1. Data controller

The data controller is the publisher of the site, identified in the legal notice. Any request about your data can be sent to it through the form on the Customer Service page.

2. Data collected, purposes and legal bases

Email address. Purpose: to send you our new research. Legal basis: your consent, collected through a tick box that is not pre-ticked and then confirmed by email (double opt-in). You can withdraw it at any time through the unsubscribe link in every email.

Systeme.io measures whether emails are opened and whether the links they contain are clicked, by means of an invisible image loaded on opening. These statistics are used only to remove from the list addresses that no longer open anything; they are not used for any profiling. Blocking images in your mail application is enough to prevent this measurement, without losing the emails.

Sending the book

Email address. Purposes: to give you access to the book “The Twelve Keys to Investing”, then to send you our analyses and offers. Legal basis: your consent, given by signing up after reading the notice under the form. You can withdraw it at any time through the unsubscribe link in every email.

Subscription and Premium Area

Identity, email address, country, billing data; payment data is processed exclusively by Stripe and is never passed on to the publisher. Purposes: performing the subscription contract, access to the Premium Area, invoicing, accounting and tax obligations. Legal basis: performance of the contract and compliance with legal obligations.

A customer's email address may also be used to tell them about offers for services similar to those they have bought. Legal basis: the publisher's legitimate interest, with the possibility of objecting at any time, free of charge, through the link in every email or the Customer Service form.

Contact form

First name, last name, email address, content of the message. Purpose: to handle your request and reply to you. Legal basis: the publisher's legitimate interest in replying to the requests it receives. To limit abusive sending, an irreversible fingerprint of your IP address is kept for one hour; the address itself is not stored.

Technical data

The hosting provider keeps connection logs (IP address, pages viewed, timestamp) for security purposes, for a limited period set by the hosting provider and stated in its own privacy policy. The site uses no audience measurement tool and sets no tracking cookie.

3. Recipients and processors

Your data is neither sold nor transferred. It is processed, on behalf of the publisher and within the limits of the purposes above, by the following providers:

Systeme.io (a French company, data hosted in the European Union): newsletter, sending of the book, subscription, Premium Area.
Stripe: card payment. Stripe may transfer data to the United States, under the safeguards provided for by the GDPR (standard contractual clauses).
Hosting provider of the site: Namecheap, Inc..
YouTube (Google): only if you start playing the video. Before that click, no data is sent to Google; the player uses the privacy-enhanced domain youtube-nocookie.com.

Data may move between the European Union and Switzerland: each recognises that the other provides an adequate level of protection, which allows these exchanges without additional safeguards. Any transfer to another country relies on the European Commission's standard contractual clauses or on a recognised equivalent mechanism.

Data may also be disclosed to authorities that lawfully request it, and to the publisher's advisers (accountant, lawyer) strictly as far as their assignment requires.

4. Retention periods

Newsletter: until you unsubscribe, then deletion.
Subscription: for the duration of the contractual relationship, then retention limited to the statutory retention period for accounting records.
Contact form messages: twelve months after the last reply, then deletion.
IP address fingerprint linked to the form: one hour.
Informing former customers about similar services: two years after the last purchase, unless they object earlier.

5. Your rights

You have a right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent at any time, without affecting earlier processing. To exercise these rights, write to us through the Customer Service form; we reply within one month. You may also refer the matter to the competent supervisory authority: the CNIL in France, the Data Protection Authority in Belgium, the Federal Data Protection and Information Commissioner in Switzerland.

6. Security

Data is protected by appropriate measures: encrypted connection, restricted access to the administration, limits on sending attempts, providers bound by confidentiality commitments. No bank data is stored by the publisher.

7. Cookies

The use of cookies is described in the cookie policy.

8. Minors

The paid services of the site are reserved for adults. The site does not knowingly collect data about minors. If a parent or guardian finds that a minor has provided data, they can ask for it to be deleted through the Customer Service form.

9. Updates

This policy may be updated to reflect changes to the site or to the regulations. The date of the last update is shown at the top of the page.