Privacy Policy

Last updated: May 10, 2026

1. Introduction

TWENTY M SAS ("TWENTY M", "we", "us", "our"), operating under the brand name EasyFranceNow, is committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit https://www.easyfrancenow.com (the "Website") or use our Services.

We process personal data in accordance with Regulation (EU) 2016/679 ("GDPR"), the French Data Protection Act (Loi n° 78-17 du 6 janvier 1978 modifiée), and any other applicable data protection legislation.

2. Data Controller

TWENTY M SAS (EasyFranceNow)
229 Rue Saint-Honoré, 75001 Paris, France
SIREN: 990 370 603
Email: contact@easyfrancenow.com

No Data Protection Officer has been formally designated. All data protection enquiries and rights requests should be addressed to: contact@easyfrancenow.com.

3. Scope

This Privacy Policy applies to all visitors to the Website, all customers who purchase Services or Digital Products, and all individuals who contact us through the Website or by email.

4. Personal Data We Collect

(a) Identity data: first name, last name;
(b) Contact data: email address;
(c) Technical data: IP address, browser type and version, device type and operating system, pages visited, time spent on pages, referring URL, and other browsing data collected via analytics tools;
(d) Transaction data: order details, purchase history, payment reference;
(e) Payment data: payment card information — processed exclusively by Stripe, Inc.; TWENTY M does not store or access full card numbers;
(f) Communication data: content of email enquiries, messages, and correspondence;
(g) Marketing data: newsletter subscription status, email marketing preferences, and consent records.

5. How We Collect Your Data

We collect personal data directly from you when you submit an enquiry, place an Order, or subscribe to our newsletter; automatically via cookies and tracking technologies when you browse the Website (see our Cookie Policy); and from third-party services including Google Analytics and Stripe in the course of operating the Website and providing the Services.

6. Purposes, Legal Bases, and Retention

Responding to enquiries and pre-sales communication

Data: identity, contact, communication data.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention: 3 years from last interaction.
Recipients: TWENTY M; email provider.

Performing the contract (Services and Digital Products)

Data: identity, contact, transaction, communication data.
Legal basis: contract performance (Article 6(1)(b) GDPR).
Retention: 5 years from the end of the contractual relationship.
Recipients: TWENTY M; Stripe.

Processing payments

Data: transaction, payment data.
Legal basis: contract performance (Article 6(1)(b) GDPR).
Retention: per Stripe's retention obligations (up to 7 years for regulatory compliance).
Recipients: Stripe, Inc. (USA).

Sending newsletters and marketing emails

Data: identity, contact, marketing data.
Legal basis: consent (Article 6(1)(a) GDPR).
Retention: until consent is withdrawn; maximum 3 years from last interaction.
Recipients: Mailchimp / Intuit Inc. (USA).

Website analytics — understanding usage patterns

Data: technical data.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention: 13 months (CNIL recommendation).
Recipients: Google Ireland Ltd; Google LLC (USA).

Legal and regulatory compliance

Data: identity, contact, transaction data.
Legal basis: legal obligation (Article 6(1)(c) GDPR).
Retention: as required by law (up to 10 years for accounting records).
Recipients: TWENTY M; competent authorities if required.

Fraud prevention and Website security

Data: technical, transaction data.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention: duration of investigation plus applicable limitation period.
Recipients: TWENTY M; Stripe.

7. Recipients of Your Personal Data

We may share your personal data with the following categories of recipients:

(a) Stripe, Inc. (USA) — payment processing;
(b) Google LLC (USA) — website analytics (Google Analytics 4), operating under Google Ireland Ltd for EEA services;
(c) Intuit Inc. / Mailchimp (USA) — email marketing;
(d) Framer B.V. (Netherlands) — website hosting and infrastructure;
(e) Competent public authorities, courts, regulators, or law enforcement, where required or authorised by applicable law.

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

8. International Data Transfers

Our processors Stripe, Google (Google Analytics 4), and Mailchimp (Intuit Inc.) are established in the United States. Personal data transferred from the EEA to these processors is safeguarded as follows:

(a) Stripe, Inc.: Standard Contractual Clauses (SCCs) adopted by the European Commission;
(b) Google LLC (Google Analytics 4): Standard Contractual Clauses and participation in the EU–US Data Privacy Framework where applicable;
(c) Intuit Inc. / Mailchimp: Standard Contractual Clauses.

You may request further information on the applicable transfer safeguards by contacting: contact@easyfrancenow.com.

9. Data Security

TWENTY M implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encrypted data transmission (HTTPS/TLS), restricted access controls and authentication, and the use of security-certified data processors.

No method of electronic transmission or storage is fully secure. While we apply commercially reasonable security measures, we cannot guarantee absolute security.

10. Your Rights Under the GDPR

If you are in the European Economic Area, you have the following rights:

(a) Right of access (Article 15 GDPR): you may request a copy of the personal data we hold about you.

(b) Right to rectification (Article 16 GDPR): you may request correction of inaccurate or incomplete data.

(c) Right to erasure (Article 17 GDPR): you may request deletion of your personal data, subject to certain exceptions such as where we have a legal obligation to retain it.

(d) Right to restriction (Article 18 GDPR): you may request restriction of processing in certain circumstances.

(e) Right to object (Article 21 GDPR): you may object to processing based on legitimate interest, including for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately and without exception.

(f) Right to data portability (Article 20 GDPR): you may request a copy of your data in a structured, commonly used, machine-readable format.

(g) Right to withdraw consent (Article 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal. You may unsubscribe from marketing emails at any time via the unsubscribe link in any email.

(h) Right to lodge a complaint: you have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715 — 75334 Paris Cedex 07, France
https://www.cnil.fr
Tel: +33 (0)1 53 73 22 22

If you reside in another EU member state, you may also lodge a complaint with your local supervisory authority.

11. Exercising Your Rights

To exercise any right listed above, please contact us at contact@easyfrancenow.com with a clear description of your request. We will respond within one (1) month. We may ask you to verify your identity before processing your request. For complex or numerous requests, we may extend this period by a further two months, in which case we will inform you.

12. Cookies

We use cookies and similar technologies on the Website. For full details on the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be published on this page with an updated "Last updated" date. We encourage you to review this Policy regularly. For material changes, we will provide a more prominent notice where appropriate.

14. Contact

TWENTY M SAS (EasyFranceNow)
229 Rue Saint-Honoré, 75001 Paris, France
Email: contact@easyfrancenow.com