Legal information
Privacy policy
This English version is provided for convenience. The French version is the only legally binding text.
Backdoor collects as little data as possible: what is needed to send you the newsletter and manage your account and subscription. No data is sold, rented or used for advertising.
1. Data controller
[COMPANY NAME TO BE COMPLETED], [legal form and share capital to be completed], registered office: [TO BE COMPLETED], RCS [TO BE COMPLETED], represented by Grégory Raymond, president. Contact for any question about personal data: contact@backdoor.news.
2. Data collected
- Free members: email address, name if provided, chosen language and newsletters, sign-up date, page where you signed up.
- Subscribers: the same data, plus the plan, payment and invoice history. Card data is collected and stored by Stripe; Backdoor never has access to it and only sees the last four digits and the expiry date.
- Business subscribers: work email address, name, organisation, role (account manager or member of staff), newsletter language.
- Newsletters: opens and clicks, to measure interest in content and detect inactive addresses.
- Comments: comments posted by Subscribers, together with their name.
- Website visits: aggregated traffic statistics (page views, referrer, device type), without advertising cookies.
- Correspondence: messages you send us by email. Exchanges with sources are handled in the strictest confidence and are never stored in member management tools.
Backdoor does not collect any special category data within the meaning of Article 9 GDPR and does not carry out profiling or automated decision-making.
3. Purposes, legal bases and retention periods
- Sending newsletters: consent, given at sign-up. Kept until you unsubscribe; addresses inactive for three years are deleted.
- Managing your account and subscription (access to content, sign-in, invoices, cancellation): performance of the contract. Kept for the duration of the subscription, then three years after the relationship ends.
- Accounting and invoicing: legal obligation. Accounting records are kept for ten years.
- Managing Business access: performance of the contract with the client organisation. Kept until the member of staff is removed or the contract ends, then three years.
- Aggregated audience measurement and website improvement: legitimate interest. Aggregated data kept for no more than twenty-five months.
- Answering requests and right of reply: legitimate interest. Kept for one year after the last exchange.
- Security and fraud prevention (payments, abuse): legitimate interest. Kept as long as needed for the incident, no more than one year unless legal proceedings require otherwise.
4. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent at any time and to set instructions regarding your data after your death. You can change your newsletters and profile from the “My account” page, and unsubscribe in one click from every email.
For any other request, write to contact@backdoor.news. You will receive a reply within one month. You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr.
5. Cookies
The use of cookies is described in the cookie policy.
6. Security
The website is only available over HTTPS. Sign-in is passwordless, by single-use link. Administrative access is restricted and protected. In case of a data breach likely to put your rights at risk, the CNIL and, where required, the people concerned are notified under Articles 33 and 34 GDPR.
7. Minors
Backdoor is intended for an adult, professional readership. Registration is limited to people aged fifteen and over, and paid subscriptions to adults.
8. Changes
This policy may change. Members are informed of any significant change by email.