Privacy Policy

Cabinet LAWRENCE – Version 2.1 – Last updated 01/08/2026

1. Preamble

This Privacy Policy describes the conditions under which Cabinet LAWRENCE collects, uses, stores and protects the personal data of Users and Clients, in accordance with Regulation (EU) 2016/679 (the "GDPR") and the French "Informatique et Libertés" Act. It applies in particular to the "E.R.I.C." online ordering journey (the "Private Buyer" form, opening of the assignment, payment, and then booking of the private appointment if that option has been taken), as well as to subscription to the Cabinet LAWRENCE newsletter.

2. Data controller

The data controller is Cabinet LAWRENCE (SASU Cabinet Conseil LAWRENCE), reachable at contact@cabinet-lawrence.com. The controller's full legal information (registered office, RCS) is set out in the Legal Notice.

3. Data collected

As part of the E.R.I.C. journey and the management of the relationship, Cabinet LAWRENCE may collect:

• Identity and contact data: first name, last name and email address. The telephone number is not requested in the form; it may be requested later when booking the private appointment (via the scheduling tool).
• Project-related data: the reasons for buying (main residence, second home, investment, etc.), information indicating where the Client stands in their project, the desired support, the details freely provided for each question, as well as the preference for anonymity with respect to professionals.
• Data concerning "trusted persons" / third parties: where the Client chooses to associate one or more third parties, their first name, last name, relationship to the Client and email address (see article 3 bis).
• Appointment data (if the option has been taken): the booked slot and booking-management information, via the cal.com scheduling tool, which the Client accesses through a link sent after payment.
• Payment-related data: amount, status and transaction identifiers. Bank card data is processed exclusively by Stripe and is never collected or stored by Cabinet LAWRENCE.
• Proof-of-consent data: acceptance of this Policy, the GTC and the request for immediate performance, together with the version and a timestamp (see article 9 bis).
• Newsletter subscription data: email address, together with the associated proof of consent (version of this Policy, timestamp and subscription page), where the User subscribes to the newsletter (see article 4 bis).
• Technical data: connection data, logs and cookies strictly necessary for operation and security.
• Documents provided by the Client in connection with the assignment.

3 bis. Data concerning third parties (trusted persons)

The Client may provide the contact details of third parties ("trusted persons"). As these persons are not themselves the source of the entry, Cabinet LAWRENCE processes their data on the basis of its legitimate interest (enabling the follow-up wanted by the Client) and invites the Client, who undertakes to do so, to inform these persons beforehand of the disclosure and processing of their data. These third parties have the same rights as those described in article 9 and may exercise them at the address indicated.

4. Purposes of processing

• Processing orders and performing the "Private Buyer" Service.
• Opening and managing the file; organising the private appointment where it has been taken.
• Processing payments and managing orders.
• Sending service emails (summaries, confirmations, booking link, notifications).
• Sending the newsletter (news and articles) to persons who have subscribed to it (see article 4 bis).
• Managing the Client Area, where applicable.
• Preventing and combating fraud.
• Complying with legal, accounting and tax obligations.

4 bis. Newsletter

The User may subscribe to the Cabinet LAWRENCE newsletter in order to receive its news and articles. This processing is based on the person's consent (Article 6.1.a of the GDPR) and is carried out by double confirmation (double opt-in): the email address is only recorded as a subscriber after validation of a confirmation link sent by email. The User may withdraw their consent and unsubscribe at any time (unsubscribe link included in the emails, or a request to the contact address indicated in article 9). Proof of consent (version of this Policy, timestamp and subscription page) is recorded. Subscription data is retained until unsubscription (article 8). This data is neither sold nor shared with third parties for commercial purposes.

5. Legal basis

Processing is based, depending on the purpose, on:

• the performance of the contract or of pre-contractual measures (opening of the assignment, appointment, payment);
• the Client's consent (the "processing of personal data" checkbox in the E.R.I.C. journey; newsletter subscription confirmed by double opt-in);
• the legitimate interest of Cabinet LAWRENCE (fraud prevention, security, management of trusted persons);
• compliance with legal obligations (accounting, tax).

6. Recipients

The data is intended for the authorised internal team of Cabinet LAWRENCE, its technical processors (article 7) acting on instructions and, where applicable, the legally authorised authorities. The data is neither sold, rented nor transferred for commercial purposes.

7. Processors

Cabinet LAWRENCE uses processors governed by agreements compliant with article 28 of the GDPR:

• Stripe – processing of online payments (secure payment page to which the Client is redirected).
• Firebase / Google Cloud (Google) – hosting of the application, the database and the newsletter subscriber list.
• Google Workspace / Gmail (Google) – sending of service emails (summaries and notifications) and newsletter emails.
• cal.com – online appointment booking and management (the Client accesses it, after payment, via a link sent by email).
• Webflow – hosting of the showcase website.

8. Retention period

• Unfinalised files (form completed but Order not paid): 3 years from the last contact.
• Assignment files: for the time needed for the assignment + 5 years.
• Contractual and accounting documents: 10 years (legal obligation).
• Appointment data: for the time needed to manage the appointment, then archived with the file.
• Newsletter subscription data: until the person concerned unsubscribes.
• Inactive accounts: 3 years.

9. Users' rights

In accordance with the GDPR, everyone has a right of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw their consent at any time and to set directives regarding the fate of their data after their death.

These rights may be exercised with: contact@cabinet-lawrence.com. A reply is provided within a maximum of 31 clear days from receipt of the request by email. In the event of difficulty, the person concerned may lodge a complaint with the CNIL (www.cnil.fr).

9 bis. Proof of consent

When the E.R.I.C. journey is validated, acceptance of this Policy, the GTC and the request for immediate performance is recorded together with the version of the document and a timestamp, as proof. The same applies to newsletter subscription (article 4 bis).

10. Security

Cabinet LAWRENCE implements appropriate technical and organisational measures (a reinforced best-efforts obligation) to protect data against any unauthorised access, alteration, disclosure or destruction.

11. Data hosting & transfers outside the EU

The data is hosted within the European Union. As some processors (article 7) may operate outside the EU, any transfers are governed by appropriate safeguards (the European Commission's standard contractual clauses or equivalent mechanisms).

12. Cookies

The website uses only cookies strictly necessary for its operation and security. Payment takes place on a secure Stripe page and appointment booking on cal.com (accessible by redirection or by link): these pages, operated by their respective providers, may place their own trackers, necessary for their operation.

13. Amendments

This Policy may be amended at any time. The applicable version is the one in force at the time of collection; any substantial change is brought to the Users' attention. This version is Version 2.1.

End of document. — Cabinet LAWRENCE, Privacy Policy v2.1.