Privacy
Privacy and data protection policy
This English translation is provided for information only. The French version of this document is the only legally binding version.
Data controller
NuWide — Sylvain G., Sole Proprietor (EI)
57A rue de l'Église
97425 Les Avirons — Réunion, France
SIRET: 802 904 573 00010
Contact for personal data: legal@nuwide.com
NuWide determines the purposes and means of the data processing described below when acting as the data controller.
Field of politics
This policy applies to data processing carried out in connection with the website nuwide.com and related NuWide services, including:
- site navigation;
- forms and contact requests;
- Project Builder;
- accounts and customer portals;
- projects and activities;
- messaging;
- documents and approvals;
- quotes, invoices, and payments;
- support ;
- transactional notifications;
- security, technical logs, and backups;
- Consent preferences and trackers.
It does not automatically describe the processing activities carried out by NuWide on behalf of its clients in connection with their own applications. These may be governed by separate subcontracting agreements.
Principles
NuWide seeks to process only data that is relevant for specific purposes, to restrict access, to establish appropriate retention periods, and to implement proportionate security measures.
Data that may be processed
4.1 Navigation and Technical Specifications
IP address, date and time, requested URL, browser, operating system, device, server logs, diagnostic information, security events, and, depending on preferences, audience measurement data.
4.2 Contact and Inquiries
Last name, first name, email address, phone number (if provided), organization (if applicable), subject and content of the request, and history of correspondence.
4.3 Project Builder
Identity and contact information provided, company name (if applicable), project description, requirements, features, context, budget or budget range when requested, timeline, priorities, responses to user journeys, and free-form text.
4.4 Customer Account
Identity, contact information, organization, role, account ID, activation status, settings, permissions, authentication events, and security-related information.
4.5 Projects
Project information, status, milestones, tasks or activities, decisions, comments, approvals, change requests, and history necessary for tracking.
4.6 Messaging
Participants, messages, attachments, dates, status, and metadata necessary for operation and security.
4.7 Documents
Files transmitted or produced as part of a project, versions, metadata, downloads, approvals, and history, where these features are available.
4.8 Quotes, Invoices, and Payments
Billing information, quotes, invoices, amounts, due dates, payment status, transaction references, and information required for accounting purposes.
NuWide does not store full credit card information when a payment is processed by a specialized service provider.
4.9 Support
Requests, tickets, correspondence, attachments, and technical information necessary to process them.
4.10 Notifications
Recipient address, notification type, delivery status, and data strictly necessary for transactional content.
4.11 Security
Authentication logs, security events, IP addresses, access attempts, technical information, and traces necessary for the prevention, detection, and handling of incidents.
4.12 Consent and Cookies
Accepted or rejected categories, version of the consent mechanism, date of the selection, and technical information necessary to record and verify the selection, to the extent appropriate.
Purposes and legal bases
To be confirmed
Legal Bases: NuWide is currently validating the definitive correspondence between each data processing activity and its legal basis.
| Processing | Purpose | Primary location under consideration |
|---|---|---|
| Project Builder | Review a request and prepare a response/proposal | Pre-Contractual Measures |
| Sales Contact | Respond to the request | Pre-contractual measures or legitimate interests, depending on the context |
| Client Account | Provide the client area | Performance of the Contract |
| Project Management | Execute and monitor the service | Performance of the Contract |
| Email/Documents | Collaboration and Execution | Performance of the Contract |
| Quotes/Invoices | Contract, Accounting, and Tax Management | Contract + Legal Obligations |
| Payment | Collect and track payments due | Contract Performance + Legal Obligations |
| Support | Provide support | Contract or legitimate interest, depending on the context |
| Security logs | Protecting Accounts, Services, and Systems | Legitimate Interest |
| Advocacy | Preventing/resolving disputes and preserving necessary evidence | Legitimate Interest / Legal Obligations |
| Strictly Necessary Cookies | Provide the requested service, security, consent options | Exemption from consent where applicable |
| No trackers required | Audience, external services, marketing based on actual tools | Consent when required |
Required or optional field
Required fields are marked in the relevant interfaces.
The absence of essential information may prevent NuWide from processing a request, creating an account, providing a quote, performing a service, or complying with a legal obligation.
Optional data is clearly marked as such.
Data source
Data may come from:
- directly from the person concerned;
- an authorized user from their organization;
- projects performed in the customer portal;
- technical and security systems;
- service providers necessary for the execution of a transaction or service, only when they are actually used.
Target Audience
The data is accessible to authorized personnel at NuWide and to service providers who need access to it in order to provide the relevant service.
| Service Provider | Role | Relevant data | Known location |
|---|---|---|---|
| LWS — Ligne Web Services SAS | Hosting for the nuwide.com website, its databases, and uploaded files | All data processed by the website and the customer portal | France (public information from LWS) |
| Cloudflare, Inc. | Technical intermediary deployed in front of the site (reverse proxy and content delivery network): HTTPS routing and encryption of connections, caching of static files, automatic protection against denial-of-service attacks, and reception of network error reports sent by the browser (Network Error Logging). | IP address, HTTP requests and responses processed in transit (URLs, headers including browser and referring page, data entered in forms and the client portal), connection metadata; in the event of a network failure, error reports (URL, error type, protocol, country, and access network). | Global network: Each connection is routed through the Cloudflare data center closest to the visitor, which may be located outside the EEA (as observed: Johannesburg for a visitor in Réunion); the company is based in the United States. |
| Mailgun | Delivery of transactional emails (account activation, project acknowledgments, notifications, invoices) | Recipient's email address, name, subject line, and message content | api.eu.mailgun.net (european API access point) |
Hosting
The NuWide website is hosted by LWS — Ligne Web Services SAS, in France. Public information from LWS indicates that its servers are hosted in France.
This does not mean that all of NuWide’s potential future service providers necessarily process their data exclusively in France.
Transfers outside the European Economic Area
LWS — Ligne Web Services SAS
No known data transfers outside the european economic area: hosting in France.
Cloudflare, Inc.
Transfers to the United States and other countries outside the EEA are governed by Cloudflare’s Data Processing Agreement (DPA), which is incorporated into its subscription terms and provides for:
- Cloudflare, Inc.’s certification under the EU–U.S. Data Privacy Framework;
- the European Commission’s standard contractual clauses (Module 2: Data Controller to Data Processor);
- global CBPR and Global PRP certifications.
Sources: Cloudflare — Data Processing Addendum (v6.4, April 3, 2026) (new tab), Cloudflare — GDPR FAQs (new tab), Cloudflare — subprocessors (new tab)
MailgunTo be confirmed
Analysis of applicable safeguards currently in place (contracting entity, data processing agreement, subsequent processors, region of processing).
Retention periods
To be confirmed
Retention periods: The retention periods applicable to each data processing activity are currently being validated.
The principle is:
- retained for as long as necessary to fulfill the purpose;
- interim archiving when justified by a legal obligation or a need for evidence;
- deletion or anonymization when retention is no longer necessary.
Accounting data, contractual data, security data, prospect data, accounts, and documents should not be subject to an arbitrary uniform retention period.
Security
NuWide implements technical and organizational measures proportionate to the data processing activities in question, which may include, depending on the service: access control, authentication, permissions, encryption of communications, updates, backups, logging, segmentation, and infrastructure protection.
No technical measure can guarantee zero risk. NuWide tailors its measures to the identified risks and the specific context.
Outsourcing on behalf of clients
For certain services, NuWide may process personal data on behalf of a client, who remains the data controller.
When required by the GDPR, the relationship is governed by provisions in accordance with Article 28 of the GDPR, specifying, in particular, the subject matter, duration, nature, purpose, categories of data and data subjects, as well as the respective instructions and obligations.
Individual rights
In accordance with the terms of the regulations, an individual may exercise their rights of access, rectification, erasure, restriction, objection, and data portability when the latter right is applicable.
When processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.
Inquiries can be sent to:
legal@nuwide.com
NuWide may request the information reasonably necessary to verify the identity of the requester when there is legitimate doubt.
Complaint to the CNIL
An individual may file a complaint with the National Commission on Information Technology and Civil Liberties (CNIL) if they believe their rights have not been respected.
Minors
NuWide’s services are primarily intended for project owners and clients. NuWide does not intentionally collect data from minors unless necessary.
If a feature were to specifically involve minors, its implementation would need to undergo an appropriate review prior to deployment.
Automated decisions
The Project Builder is not designed to be a system that automatically makes legal or business decisions that have significant consequences for an individual.
Project requests are reviewed before a business decision is made.
If this situation changes, this policy must be updated before deployment.
Policy updates
The policy is versioned.
Significant changes may be communicated to affected users through appropriate means.
The effective date and the date of the last update must be displayed on the page.
Contact
For any questions regarding data protection or to exercise a right:
legal@nuwide.com