Privacy Policy

Last updated: 4 July 2026. This policy explains how we handle your personal data under the EU General Data Protection Regulation (GDPR / RGPD) and French law.

1. Data controller

The data controller is Rivière Advisory (SIRET 10271587700019), 21 Rue de la Faisanderie, 75016 Paris, France — contact@riviereadvisory.com.

2. What we collect, why, and our lawful basis

DataPurposeLawful basis (Art. 6 GDPR)
Email address (and name, if given)Send the free guide, our newsletter and product updates you asked forConsent (double opt-in) — withdrawable any time
Name, country, billing details, purchase historyFulfil and support your order, give access to what you boughtPerformance of a contract
Basic usage / device dataKeep the site secure and working, understand aggregate useLegitimate interest

We do not sell your personal data, and we do not use it for third-party advertising.

3. Who processes your data (sub-processors)

4. International transfers

Some providers (e.g. Vercel, Paddle) may process data outside the EU/EEA. Where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

5. How long we keep it

Newsletter data: until you unsubscribe or ask us to delete it. Purchase records: for the period required by French tax and accounting law. We do not keep data longer than necessary.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent at any time (without affecting prior processing). To exercise any of these, email contact@riviereadvisory.com. You also have the right to lodge a complaint with the French data-protection authority, the CNIL (cnil.fr).

7. Cookies

We use only the strictly-necessary cookies required for the site and checkout to function. If we later add analytics or non-essential cookies, we will request your consent first and update this policy.

8. Contact

Any privacy question or request: contact@riviereadvisory.com.

⚠ Draft for launch — have a French lawyer / DPO review before relying on this policy, especially if you add analytics. This is not legal advice.