Privacy Policy
Last updated: October 12, 2026
1. Data controller
The controller for data collected on nexahouse.fr is AEH Connect (NexaHouse), reachable at contact@nexahouse.fr.
2. Data collected
Depending on how you use the site, NexaHouse may collect: identification and contact data (name, email, phone — contact form, quote request form, order tunnel); order data (billing address, order history, payment methods processed directly by Stripe — NexaHouse stores no banking data); project onboarding data (logo, brand assets, text content submitted for the ordered website); application data (name, email, phone, CV, LinkedIn/portfolio link, cover letter — recruitment form); and browsing data via cookies.
3. Purposes of processing
This data is used to respond to contact and quote requests, process and fulfil orders (billing, service delivery), manage the client relationship and support, improve the site (traffic statistics, where applicable), and comply with NexaHouse's legal and accounting obligations.
4. Legal basis
Processing is based, depending on the case, on the performance of a contract (order placed), consent (non-essential cookies, newsletter), legitimate interest (service improvement), or a legal obligation (retention of accounting records).
6. Retention period
Data is retained as follows: client/order data, for the duration of the contractual relationship + 5 years (accounting and legal obligations); prospecting data with no follow-up, 3 years from the last contact; unsuccessful applications (CV and related information), 2 years from receipt, in line with CNIL recommendations, then automatically deleted; cookies, 13 months maximum.
7. Data recipients
Data is intended for NexaHouse and, where applicable, its strictly necessary technical subcontractors: Railway (hosting), Stripe (payment processing). No data is sold to third parties.
8. Transfers outside the EU
As hosting is provided by Railway Corp. (United States), some data may be transferred outside the European Union. This transfer is governed by the European Commission's standard contractual clauses or any other equivalent compliance mechanism put in place by the provider.
9. Your rights
In accordance with the GDPR and French data protection law, everyone has the right to access, rectify, erase, restrict and object to the processing of their personal data, as well as a right to data portability. These rights can be exercised by emailing contact@nexahouse.fr. If the response is unsatisfactory, a complaint can be filed with the CNIL (www.cnil.fr).
10. Security
NexaHouse implements reasonable technical and organizational measures to protect data against unauthorized access, loss, or disclosure.