Privacy Policy

Last updated: 24 November 2025

This Privacy Policy explains how Kinoux (“Kinoux”, “we”, “us”) collects and processes your personal data when you use the Website https://kinoux.com and our related services.

Kinoux acts as the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

Contact email for privacy matters: shop@kinoux.com

1. Scope of this Policy

This Policy applies to:

  • visitors browsing the Website,
  • individuals who contact us via forms or email,
  • customers purchasing digital products (datasets, AI models, agents),
  • individuals creating or accessing a customer account (if applicable).

2. Categories of Data We Collect

We may collect the following categories of personal data:

a) Identification and contact data

  • First name, last name (if provided),
  • Company name (if provided),
  • Email address,
  • Billing address and country,
  • Any other information voluntarily provided in forms or communications.

b) Account and order information

  • Login credentials (hashed password),
  • Order history (products purchased, dates, amounts),
  • Invoicing data required under applicable tax laws.

c) Technical and usage data

  • IP address,
  • Browser type and version,
  • Operating system,
  • Device information,
  • Pages visited, date and time of visits,
  • Referrer URL.

These data may be collected through server logs and analytics tools such as Google Analytics.

d) Cookies and trackers

We use cookies and similar technologies to:

  • ensure technical functioning and security of the Website (strictly necessary cookies),
  • measure audience and performance (analytics cookies),
  • improve the user experience.

3. Purposes and Legal Bases

We process your personal data for the following purposes and legal bases:

1. Managing inquiries and communications

  • Purpose: respond to your contact requests, questions, or support needs.
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR).

2. Processing orders and providing digital products

  • Purpose: manage orders, payments, provisioning of access/download links, billing, and customer relations.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (accounting, tax) (Art. 6(1)(c) GDPR).

3. Operating and securing the Website

  • Purpose: ensure the technical availability, security, and integrity of the Website, prevent abuse and fraud.
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Analytics and performance measurement (Google Analytics)

  • Purpose: understand how the Website is used, improve content and user experience.
  • Legal basis: consent (Art. 6(1)(a) GDPR) when required by applicable law.
    Where applicable, your consent is obtained via a cookie banner or similar mechanism.

5. Compliance with legal obligations

  • Purpose: meet our legal, accounting, and tax obligations, respond to lawful requests from public authorities.
  • Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Data Retention

We retain personal data for the periods necessary to achieve the purposes described above, subject to applicable legal retention requirements:

  • Contact and communication data: usually up to 3 years after the last interaction.
  • Customer and billing data: up to 10 years after the end of the fiscal year concerned, in accordance with French accounting and tax rules.
  • Technical logs: generally a few months, unless a longer period is necessary for security or legal reasons.
  • Analytics data (Google Analytics): retained according to the configurations set within the tool (e.g., 14–26 months), subject to Google’s own policies.

5. Recipients of Personal Data

Your data may be shared with:

  • Kinoux’s internal team (on a strict need-to-know basis),
  • technical service providers (hosting, maintenance, email delivery, analytics),
  • payment service providers (e.g. card processors) when you make a purchase,
  • accountants, lawyers, or auditors when required,
  • public authorities, courts, or regulators, where required by law or to protect our rights.

We do not sell your personal data.

6. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we implement appropriate safeguards as required by GDPR, such as:

  • adequacy decisions by the European Commission, and/or
  • Standard Contractual Clauses (SCCs), or
  • other appropriate legal mechanisms.

You may contact us for more information about applicable safeguards.

7. Your Rights

In accordance with GDPR and applicable data protection laws, you have the following rights:

  • Right of access: obtain confirmation whether we process your data and, where applicable, access to such data.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): request deletion of your data, under certain conditions.
  • Right to restriction of processing: request limitation of processing in specific situations.
  • Right to data portability: receive data you provided to us in a structured, commonly used, machine-readable format, and transmit them to another controller where technically feasible.
  • Right to object: object at any time, on grounds relating to your particular situation, to processing based on legitimate interest; and object to direct marketing.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, you can contact us at: shop@kinoux.com

You also have the right to lodge a complaint with a supervisory authority, in particular the CNIL in France (www.cnil.fr), or the authority of your usual place of residence.

8. Cookies and Similar Technologies

We use cookies and similar technologies for the purposes described in section 3.

When required by law, we will ask for your consent before placing non-essential cookies (such as analytics cookies) on your device. You may:

  • configure your browser to accept or refuse cookies,
  • delete cookies already placed on your device,
  • withdraw your consent via the tools provided on the Website (where available).

Please note that blocking certain cookies may impact the proper functioning or performance of the Website.

9. Data Security

We implement technical and organizational measures appropriate to the risks to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but strive to maintain a level of security consistent with industry standards.

10. Children’s Privacy

Our Website and services are not directed to children under 16. We do not knowingly collect personal data from children under this age. If we become aware that such data has been collected, we will take steps to delete it as soon as reasonably possible.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example due to legal, technical, or business changes.

When we make material changes, we will inform you by an appropriate means (e.g. notice on the Website). The “Last updated” date at the top of the Policy will indicate when it was last revised.