Privacy policy

Data controller

Armange Opus Stratégie (AOS), SASU with a share capital of €1,111, registered office 60 rue François 1er, 75008 Paris, France, Paris Trade and Companies Register (RCS) 100 345 362, represented by its president, Laetitia Armange.

Contact for any question about your data: bonjour@sweatworking.fr.

1. Data collected

Booking: first name, last name, email, phone, chosen changing room, rental or purchase of glove liners and size, choices about photography and sharing your card, date and time you accepted the terms and conditions.

Physical constraint or anything we should know: free and optional field, shared with the coach only.

Waiting list and next dates: first name, last name, email.

Collaboration requests: first name, last name, email, company, message.

Payment: card details are entered directly with Stripe. AOS never has access to them and does not keep them.

Impact survey: answers to the questions, including optional permission to publish the answer to “What did you expect? What did you get?” with the initials of your first and last name.

Health data you may provide (physical constraint when booking, disability status in the impact survey): optional fields, processed on the basis of your explicit consent. The physical constraint is only shared with the coach and deleted 7 days after the evening. Disability status is only published as aggregated figures, never below five answers.

2. Purposes and legal bases

Organising the evening you booked, handling payment, welcome, changing rooms and equipment: performance of the contract.

Telling you about the next dates and the other formats organised by AOS, and following up with people who have already come or signed up: legitimate interest of AOS in running its formats, with an unsubscribe link in every email.

Photographs of the evening and sharing your card from the wall: consent, collected when booking and revocable at any time.

Publishing a quote on the Sweatworking website (home page and impact report): separate consent collected in the survey. Without a ticked box, no written answer is published. Consent can be withdrawn by editing the survey within 14 days or by emailing AOS.

Meeting accounting and tax obligations: legal obligation.

3. Recipients

Personal data is used by AOS to organise and follow up on its various formats. It is not passed on to any partner or sponsor.

It is also processed by the strictly necessary technical providers: Stripe (payment), Resend (email delivery), Supabase (database hosting), Lovable (website hosting).

No data is sold.

The partner venue hosting the evening only receives the information needed to welcome you, and the coach only receives the physical constraints reported.

4. Retention periods

Booking data: 3 years from the last contact.

Waiting list and next dates emails: until you unsubscribe, and at most 3 years after the last contact.

Collaboration requests: 3 years from the last exchange.

Accounting records linked to payment: 10 years, as required by law.

Physical constraint reported when booking: deleted 7 days after the evening.

Impact survey answers: 3 years after the last edition you took part in.

5. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time for processing that depends on it.

To exercise them, write to bonjour@sweatworking.fr: requests are handled within one month.

You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

6. Transfers and security

The database is hosted in the European Union (Supabase, region [à compléter]). The website is hosted by Lovable Labs Inc. (United States). Stripe, Resend and Lovable may carry out transfers outside the EU governed by the European Commission's standard contractual clauses.

Access to bookings is restricted to the AOS organisation account, protected by a password, and the database applies row-level access rules.

7. Cookies

The website uses no advertising or audience measurement cookies. Only technical storage needed for payment and the organisation area is used.

The website measures its own traffic, with no cookie and no third-party service: pages viewed, number of visitors (one person counts once per day, through an anonymised technical fingerprint renewed daily) and visit origins. Bots, the organisation area and private pages are not counted.