1. Scope
This Privacy Policy describes how Sigreturn Labs handles personal data in the context of the website sigreturn.com (the “Site”), the corporate website of Sigreturn Labs.
This policy covers the corporate site only. Any product operated by Sigreturn Labs has its own privacy policy, which applies to the data processed within that product.
2. Data controller
The data controller for the Site is:
- Sigreturn Labs, a SASU registered at the RCS Paris under the number 104 567 854 (SIRET 10456785400013, APE 6201Z, intra-Community VAT FR45104567854).
- Registered office: […]
- Contact: [email protected]
3. Data we collect on this Site
The Site is a static, content-only website. We do not run analytics, advertising, or tracking on it, and we do not set first-party cookies for our own purposes.
The following limited data may nevertheless be processed:
- Server logs. Our hosting provider (Cloudflare Pages) may automatically log technical information such as IP addresses, user-agent strings, requested URLs, and timestamps for the purpose of operating, securing, and troubleshooting the service.
- Email correspondence. If you contact us at [email protected], we process the content of your message and your email address in order to reply.
- Mailing list. If you subscribe to our blog updates, we process your email address, the page you subscribed from, and the IP address and timestamp recorded when you confirmed your subscription. The confirmation step is required: we never add an address to the list without it, and the IP address and timestamp are kept solely as proof that consent was given.
4. Legal basis
We process the data above on the basis of our legitimate interest in operating, securing, and improving the Site, and in responding to enquiries (Article 6(1)(f) GDPR). When you contact us, processing is also necessary for steps taken at your request prior to entering into any relationship (Article 6(1)(b) GDPR).
Where you subscribe to our mailing list, processing is based on your consent (Article 6(1)(a) GDPR). You may withdraw that consent at any time, either through the unsubscribe link included in every email we send or by writing to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before it.
5. Retention
Server logs are retained by our hosting provider for the duration set out in their own policies. Emails sent to [email protected] are retained only for as long as necessary to handle your request and to keep a reasonable record of correspondence.
Mailing list data is retained until you unsubscribe. After that, we keep the record of your consent and its withdrawal for three years, as evidence that the subscription was lawful, and nothing else.
6. Recipients and transfers
Personal data is processed by Sigreturn Labs and by carefully selected service providers acting as processors:
- Cloudflare, Inc.: hosting (Cloudflare Pages), DNS, bot mitigation (Turnstile), and storage of the mailing list (D1). Data may be transferred to the United States under appropriate safeguards (e.g. Standard Contractual Clauses or equivalent mechanisms).
- Email provider: for the receipt and storage of emails sent to [email protected].
- Resend, Inc.: delivery of mailing list emails. Resend is established in the United States; the sending infrastructure used for our domain is located in Ireland. Data may be transferred to the United States under appropriate safeguards (e.g. Standard Contractual Clauses or equivalent mechanisms).
We do not sell personal data and we do not share it with third parties for advertising purposes.
7. Cookies
The Site does not set any first-party tracking cookies. Strictly necessary technical cookies may be set by the hosting infrastructure to deliver the Site.
8. Your rights
Under the GDPR and applicable French data protection law, you have the right to access, rectify, erase, or port your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. You may exercise these rights by contacting [email protected].
You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).
9. Product privacy policies
If you use a product operated by Sigreturn Labs, the privacy policy of that product governs how your data is processed within it. Please refer to the product’s own policy.
10. Changes
This Privacy Policy may be updated from time to time. The version in force is the one published on the Site at the time of access. Material changes will be reflected by updating the “Last updated” date above.
11. Contact
For any question regarding this Privacy Policy or the processing of your personal data, please write to [email protected].