Privacy Policy

Cabinet LAWRENCE – Version 2.0 – Last updated on 20/07/2026

1. Preamble

This Privacy Policy describes the conditions under which Cabinet LAWRENCE collects, uses, retains and protects the personal data of Users and Customers, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French "Data Protection Act". It applies in particular to the online ordering journey "E.R.I.C." ("Private Buyer" form, mission opening, payment, then booking of the private appointment if the option was purchased).

2. Data controller

The data controller is Cabinet LAWRENCE (SASU Cabinet Conseil LAWRENCE), reachable at contact@cabinet-lawrence.com. The controller's full legal information (registered office, RCS) appears in the Legal Notice.

3. Data collected

As part of the E.R.I.C. journey and the management of the relationship, Cabinet LAWRENCE may collect:

• Identity and contact data: first name, last name and email address. The telephone number is not requested in the form; it may be requested later when booking the private appointment (via the scheduling tool).
• Data relating to the project: the reasons for buying (primary residence, second home, investment…), the elements indicating where the Customer stands in their project, the support requested, the details entered freely for each question, and the anonymity preference vis-à-vis professionals.
• Data relating to "trusted persons" / third parties: when the Customer chooses to associate one or more third parties, their first name, last name, relationship to the Customer and email (see article 3 bis).
• Appointment data (if the option was purchased): booked slot and booking-management information, via the cal.com scheduling tool which the Customer accesses via a link sent after payment.
• Payment data: amount, status and transaction identifiers. Bank-card data is processed exclusively by Stripe and is never collected or stored by Cabinet LAWRENCE.
• Consent-evidence data: acceptance of this Policy, of the T&Cs and of the request for immediate performance, with version and time-stamp (see article 9 bis).
• Technical data: connection data, logs and cookies strictly necessary for operation and security.
• Documents provided by the Customer as part of the mission.

3 bis. Data concerning third parties (trusted persons)

The Customer may enter the contact details of third parties ("trusted persons"). As these persons are not themselves at the origin of the entry, Cabinet LAWRENCE processes their data on the basis of its legitimate interest (enabling the follow-up desired by the Customer) and invites the Customer, who undertakes to do so, to inform those persons in advance of the communication and processing of their data. These third parties have the same rights as described in article 9 and may exercise them at the address indicated.

4. Purposes of processing

• Processing orders and performing the "Private Buyer" Service.
• Opening and managing the file; organising the private appointment when it has been purchased.
• Processing payments and managing orders.
• Sending service emails (summaries, confirmations, booking link, notifications).
• Managing the Client Area, where applicable.
• Fraud prevention and detection.
• Compliance with legal, accounting and tax obligations.

5. Legal basis

Depending on the purpose, the processing is based on:

• the performance of the contract or pre-contractual measures (mission opening, appointment, payment);
• the Customer's consent (personal-data-processing box of the E.R.I.C. journey);
• Cabinet LAWRENCE's legitimate interest (fraud prevention, security, management of trusted persons);
• compliance with legal obligations (accounting, tax).

6. Recipients

The data is intended for the authorised internal team of Cabinet LAWRENCE, its technical processors (article 7) acting on instructions, and, where applicable, legally authorised authorities. The data is neither sold, nor rented, nor transferred for commercial purposes.

7. Processors

Cabinet LAWRENCE uses processors governed by agreements compliant with article 28 of the GDPR:

• Stripe – online payment processing (secure payment page to which the Customer is redirected).
• Firebase / Google Cloud (Google) – hosting of the application and database.
• Google Workspace / Gmail (Google) – sending of service emails (summaries and notifications).
• cal.com – online appointment booking and management (the Customer accesses it, after payment, via a link sent by email).
• Webflow – hosting of the showcase website.

8. Retention period

• Non-finalised files (form completed but Order not paid): 3 years from the last contact.
• Mission files: duration necessary for the mission + 5 years.
• Contractual and accounting documents: 10 years (legal obligation).
• Appointment data: duration necessary for managing the appointment, then archived with the file.
• Inactive accounts: 3 years.

9. User rights

In accordance with the GDPR, any person has a right of access, rectification, erasure, objection, restriction, portability, as well as the right to withdraw their consent at any time and to give directives regarding the fate of their data after their death.

These rights are exercised with: contact@cabinet-lawrence.com. A response will be provided within a maximum of 31 calendar days from the date the request is received by email. In case of difficulty, the data subject may lodge a complaint with the CNIL (www.cnil.fr).

9 bis. Proof of consent

When validating the E.R.I.C. journey, the acceptance of this Policy, of the T&Cs and of the request for immediate performance is recorded with the version of the document and a time-stamp, as evidence.

10. Security

Cabinet LAWRENCE implements appropriate technical and organisational measures (reinforced obligation of means) to protect the data against any unauthorised access, alteration, disclosure or destruction.

11. Data hosting & transfers outside the EU

The data is hosted within the European Union. As certain processors (article 7) may operate outside the EU, any transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission or equivalent mechanisms).

12. Cookies

The site uses only cookies strictly necessary for its operation and security. Payment is made on a secure Stripe page and appointment booking on cal.com (accessible by redirection or by link): these pages, operated by their respective publishers, may deposit their own trackers, necessary for their operation.

13. Amendments

This Policy may be amended at any time. The applicable version is the one in force at the time of collection; any substantial change is brought to the attention of Users. This version is Version 2.0.

End of document. — Cabinet LAWRENCE, Privacy Policy v2.0.