Privacy policy

Controller

The controller is Nicolas Bizet, a sole trader, acting under the name P.O.Investigation, which operates the Bizet Security Check tool. Bizet Security Check is not a separate legal person. The contact details appear in the legal notice. For any question: contact@po-investigation.fr.

What is collected

The assessment collects your answers: household situation, habits, travel, preparation, and the items that the conditional questions make useful. It also records the sex indicated, when it is used to adapt certain advice. It does not ask for a child’s name, a full date of birth, a postal address, a social-security number, a medical report or a photograph.

Some answers may reveal, depending on the context, information related to health or to a vulnerability: ability to move, ability to call the emergency services, presence of a vulnerable person. They are limited to what changes the analysis. This is not a medical file.

The report, if you order it, adds the name that appears on the document, the delivery email address, and a free-text context if you write one. The PDF is sent to that address after Stripe confirms the payment. It is not produced when the browser returns from a payment page. The contact form asks for a name, an email, an optional telephone number and a message. That form is not stored.

Why, and for what

The answers are used only for the assessment you request: calculation of the score, priorities, and, if you order it, drafting of the full personalized report. Basis: performance of that request.

They are not used for advertising, marketing, a commercial profile, resale, training a model belonging to Bizet Security Check, a database of security profiles, or statistics that would make it possible to identify you. They are not kept “just in case”.

Where they are, and when they are erased

During the assessment, the answers and the score remain in your browser’s local storage. The score is calculated on your device. These data are not written to a database until you order the file.

If you order the file, the server receives the name, the delivery email address, any context and the answers, for as long as it takes to link the order to the payment, produce the PDF and transmit it. They are not placed in the Stripe metadata, nor sent to a statistics tool, a tracking tool or a language model. Stripe receives the amount and the technical identifier of the order. The email address is not transmitted to Stripe by our server: the Stripe Checkout page asks for it itself when the Stripe receipt is used. Our server transmits neither the answers, nor the name, nor sex, nor the context.

When sending of the PDF is confirmed, the answers, the free-text context, sex, the name, the email address and the PDF are erased from Bizet Security Check storage. No copy remains that would make it possible to reconstruct the questionnaire, nor any data that would make it possible to identify the client in the application. The PDF that was sent remains yours: Bizet Security Check does not keep a copy.

As long as the payment is not confirmed, or as long as transmission has not succeeded, the local copy remains. If generation or sending fails, the server copy strictly necessary for a further attempt is kept for at most 72 hours. Several automatic processes run during the day. If one fails, the next erases data that have reached expiry, without waiting for a new payment event. This is not an archive.

No audience-measurement tool and no advertising cookie are placed by the assessment. A technical session token exists only if an authentication is open. It does not contain the answers. The public assessment does not require an account.

An online withdrawal request sends only your name, email address, order reference and submission date by email to you and the customer service mailbox. The request is not saved in the assessment database, but the messages are retained by the email services for handling the request and keeping evidence.

What may remain, and for how long

The data necessary for the assessment and the report are deleted after the service is completed, under the conditions above. That sentence does not mean that no data of any kind could ever be retained.

After delivery, Bizet Security Check does not retain the name, the email address, sex, the context, the answers or the PDF. A non-identifying technical trace may remain: order identifier, amount, currency, dates and processing status. Stripe retains, in its own system, the data required for payment, accounting and fraud prevention. The application does not delete those data at Stripe and does not modify them. Bizet Security Check does not retain the answers beyond the time needed to produce and transmit the report.

The host may retain technical connection logs. Their content and their duration depend on the host. They are not a file of the questionnaires, and this application does not constitute one.

Security

The assessment is calculated in the browser. Exchanges with the server are intended to pass through an encrypted connection when the site is served over HTTPS. Access to the drafting of the report is limited to the request you send. These measures reduce access. They do not make a system inviolable, and Bizet Security Check does not claim that they do.

Automated score

The score is an automatic calculation from your answers. It presents a level of preparation and priorities. It does not produce a decision that deprives you of a right, and it is not used for advertising profiling.

Your rights

You may request access to, rectification of and erasure of the data that Bizet Security Check would hold, as well as restriction of processing. The right to object and the right to portability apply when the law provides for them. Because the assessment answers are on your device, access, copying and erasure are done here first. For a question about a transmission already made to the server, write to contact@po-investigation.fr. The assessment processing does not rest on a separate consent: you start it because you request the analysis. There is no marketing consent to withdraw.