Privacy policy — Pro area
In case of discrepancy, the French version prevails. See the original French version
Last updated: 9 October 2026
This policy explains how we process the personal data of the users of The Signage Company's pro area (the "pro area"), available at thesignage-company.com/espace. It supplements the site's privacy policy.
The pro area is reserved for professionals:
- our customers who are sign companies and resellers;
- their employees;
- our manufacturing partners;
- the members of our team.
The data processed there relates to individuals acting in a professional capacity. It nevertheless remains personal data within the meaning of the General Data Protection Regulation (GDPR).
1. Who is the data controller?
The Signage Company is a brand of SAS Stratton Media:
- 34 avenue de Maremne, 40140 Magescq, France;
- registered with the Trade and Companies Register of Dax (RCS Dax) under number 901 807 560;
- intra-Community VAT number FR57901807560.
For any question about your data: contact@thesignage-company.com.
2. What data do we process?
| Category | Examples |
|---|---|
| Identification and contact | last name, first name, professional email address, telephone number, job title |
| Company data | company name, billing address, company number (SIREN, BCE, IDE), VAT number, payment terms |
| Account and sign-in | activation date, sign-in dates, sessions, language, sign-in tokens (stored in an irreversibly encrypted form), IP address used to limit sign-in attempts |
| Projects | characteristics of the signs, uploaded files (logos, façade photos, plans), delivery address, name and telephone number of the delivery recipient, internal references |
| Communications | messages exchanged in the pro area, attachments, revision requests, reports |
| Orders and payments | quotes, acceptances (date and author), payments received, invoices, shipment tracking |
| Activity log | history of the actions on projects (who did what and when), downloads of quotes and invoices |
We do not collect any sensitive data within the meaning of Article 9 of the GDPR.
3. Why do we process it, and on what legal basis?
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, enabling you to sign in | performance of a contract (Article 6(1)(b) GDPR) |
| Pricing your projects, preparing quotes, manufacturing and delivering your orders | performance of a contract |
| Communicating with you about your projects, sending you the notifications related to your projects | performance of a contract |
| Invoicing, collecting payments, keeping our accounts | legal obligation (Article 6(1)(c)) |
| Securing the pro area: limiting sign-in attempts, logging access and actions | legitimate interest (Article 6(1)(f)): protecting your data and our systems |
| Monitoring our commercial activity and improving our services (internal statistics) | legitimate interest |
| Handling the partnership requests received through the site | pre-contractual measures (Article 6(1)(b)) |
4. Who has access to your data?
- Our team: each member accesses only the information needed for their role, according to individually assigned rights.
- Our manufacturing partners receive only:
- the technical characteristics of your project and the files needed for manufacturing, renamed by reference;
- the delivery address;
- at the time of shipment only, the recipient's name and telephone number.
They receive neither your company name (unless it appears in the delivery address), nor your email address, nor our selling prices.
- Carriers receive the delivery address, together with the recipient's name and telephone number.
- Our technical service providers, who act on our instructions:
Provider Role Location of the data Vercel Inc. hosting of the application and storage of files application: Frankfurt (Germany, European Union); files of the pro area: Dublin (Ireland, European Union) Neon Inc. database Frankfurt (Germany, European Union) Resend sending of emails United States Google receipt of the requests sent through the site's form [REGION TO BE VERIFIED] Ship24 parcel tracking (if the API key is configured) [TO BE VERIFIED] - Public authorities, upon lawful request.
We neither sell nor rent your data.
5. Transfers outside the European Union
Some service providers and manufacturing partners are located outside the European Union, in particular in the United States and in Asia. These transfers are governed by:
- an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified providers);
- or, failing that, the standard contractual clauses adopted by the European Commission.
You may obtain a copy of these safeguards by writing to us.
6. How long do we keep your data?
| Data | Retention period |
|---|---|
| User account | for the duration of the business relationship, then 3 years after the last contact or the last order |
| Projects, files, messages | 5 years after the end of the project (commercial limitation period) |
| Quotes, orders, invoices, accounting records | 10 years from the end of the financial year (Article L123-22 of the French Commercial Code) |
| Sign-in and security logs | 12 months |
| Partnership requests not followed by an account | 3 years after the request |
At the end of these periods, the data is deleted or anonymised.
7. Cookies
The pro area uses only one session cookie, which is essential to keep you signed in. It is secure and cannot be read by scripts, and it is valid for 90 days at most. As this cookie is strictly necessary for the service, it does not require your consent. The pro area does not set any advertising or audience-measurement cookies.
8. Security
We implement appropriate measures to protect your data:
- passwordless sign-in by a one-time link or code;
- tokens stored in an irreversibly encrypted form;
- limitation of sign-in attempts;
- files never exposed through a public link;
- rights checked at every access;
- strict separation between customers and manufacturing partners;
- encryption of exchanges (HTTPS);
- logging of actions.
9. Your rights
You have the following rights over your data:
- access;
- rectification;
- erasure;
- restriction of processing;
- portability;
- objection to processing based on our legitimate interest.
You may also set directives on what happens to your data after your death.
To exercise these rights, write to contact@thesignage-company.com. We reply within one month.
Some data cannot be erased for as long as we are required to keep it, for example invoices.
If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr), or with the data protection authority of your country.
10. Changes
We may update this policy. In the event of a significant change, we will inform you in the pro area or by email. The date of the last update appears at the top of this page.