Privacy policy
Familiar takes the security of your data and our infrastructure very seriously. We are committed to providing an environment that is safe, secure, and available to all of our customers all the time.
1. Introduction
This Privacy Policy explains how Familiar (“we”, “us”, “our”) collects, uses, and protects personal data when you interact with us.
It applies to:
- Visitors to www.familiarhq.com (the “Website”)
- Users of app.familiarhq.com who access the Application as employees or authorized representatives of a Familiar customer
- Individuals who contact us or interact with us outside of a contractual relationship
This Privacy Policy should be read together with our Cookie Policy.
2. Important scope clarification
When Familiar provides its SaaS platform to business customers, it processes personal data on behalf of its Clients.
In this context:
- The Client acts as data controller
- Familiar acts as data processor
The processing of personal data performed on behalf of Clients is governed exclusively by the applicable Data Processing Agreement (DPA) and not by this Privacy Policy.
This Privacy Policy applies only to personal data for which Familiar acts as a data controller.
3. Identity of the data controller
The data controller is:
Familiar
Société par actions simplifiée (SAS)
Registered office: 1663, rue de Majornas, 01440 Viriat, France
RCS Bourg-en-Bresse: 925 238 495
VAT number: FR66925238495
Email: hello@familiarhq.com
4. Data Protection Officer (DPO)
Familiar has appointed a contact point for personal data protection matters.
For any questions relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer at privacy@familiarhq.com.
5. Categories of personal data collected
Depending on how you interact with us, we may collect the following categories of personal data:
- Identification data (name, surname)
- Contact data (email address, phone number)
- Professional data (company name, role, organization)
- Account data (user identifiers, authentication information)
- Technical data (IP address, browser type, device information, logs)
- Usage data (interactions with the Website or Application)
- Communication data (messages sent via contact forms, chat, or email)
We do not intentionally collect sensitive personal data within the meaning of the GDPR.
6. Purposes and legal bases of processing
We process personal data for the following purposes:
- To operate, secure, and administer the Website and Application
(legal basis: legitimate interest) - To manage user accounts and access to the Application
(legal basis: performance of a contract) - To respond to inquiries and communications
(legal basis: legitimate interest or pre-contractual measures) - To manage sales, partnerships, and customer relationships
(legal basis: performance of a contract or legitimate interest) - To improve our Website, Application, and Services
(legal basis: legitimate interest) - To send marketing communications where permitted
(legal basis: consent or legitimate interest, depending on the context) - To comply with legal and regulatory obligations
(legal basis: legal obligation)
7. Cookies and tracking technologies
We use cookies and similar technologies on our Website and Application.
Details regarding the categories of cookies used and how to manage your preferences are described in our Cookie Policy.
8. Recipients of personal data
Personal data may be accessed by:
- Authorized employees of Familiar
- Technical, hosting, analytics, communication, and customer support service providers acting on our behalf
We only share personal data where necessary and subject to appropriate contractual and security safeguards.
A list of our sub-processors is available upon request or in the applicable Data Processing Agreement.
9. International data transfers
Some service providers may process personal data outside the European Union.
In such cases, Familiar ensures that appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission, or
- Any other lawful transfer mechanism under the GDPR
10. Data retention
Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal obligations.
In particular:
- Prospect and marketing contact data: retained for up to 3 years from the last interaction
- Customer contact and account data: retained for the duration of the contractual relationship, then archived for up to 5 years
- Accounting and invoicing data: retained for 10 years in accordance with legal requirements
- Technical logs and security data: retained for a limited duration, generally between 6 and 12 months, unless required for security or legal purposes
Data processed on behalf of Clients is retained in accordance with the Data Processing Agreement.
11. Data security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.
These measures include access controls, encryption, monitoring, and secure hosting environments.
12. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access
- Right of rectification
- Right of erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw consent at any time, where processing is based on consent
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
13. Post-mortem data rights (France)
In accordance with Article 85 of French Law No. 78-17 of 6 January 1978, you may define instructions regarding the storage, deletion, and communication of your personal data after your death.
You may exercise this right by contacting us at privacy@familiarhq.com.
14. How to exercise your rights
To exercise your rights, you may contact us at privacy@familiarhq.com.
We may request proof of identity where necessary to process your request.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
The updated version will be published on our website and will apply upon publication.
16. Contact
If you have any questions regarding this Privacy Policy or the processing of personal data, you may contact us at privacy@familiarhq.com.