Privacy Policy

This policy describes how GHEZALI Business Mastery (“we”) processes personal data collected through beventure.com and services associated with the BE Venture brand.

Processing that relates exclusively to other group sites or products (for example BE Scale) may be covered by separate policies on those channels.

The data controller is GHEZALI Business Mastery, SASU, 78 Avenue des Champs-Élysées, 75008 Paris, France. To exercise your rights: dpo@be-scale.com (or contact@be-scale.com if the DPO address is temporarily unavailable).

Identity and contact data: name, email address, phone number, messages and information submitted in forms (appointments, applications, reservations, language preference, etc.).

Account and usage data: account identifier, sign-in history via secure link, saved favourites on venture listings, questionnaire or matching data when you provide it.

Technical data: IP address, security logs, session identifiers, browser type, information required for service operation and security.

Payment data: where payment is offered (deposit or down payment), card data is processed by our provider Stripe; we do not store full card numbers on our own application servers.

Providing and operating the Platform, authentication, handling your requests (appointments, leads, reservations): performance of pre-contractual measures or contract when you use a service; legitimate interest for security and fraud prevention.

Targeted commercial prospecting or information about our services: consent where required by law, or legitimate interest for professionals subject to your right to object.

Audience measurement and product improvement (analytics): consent where non-essential cookies are used, or legitimate interest for aggregated statistics in line with the implementation in place.

Legal obligations: retention of accounting evidence or responses to authorities where the law requires.

Cookies or similar technologies may be used for site operation (technical cookies), user sessions or audience measurement.

Where trackers require consent under transposed ePrivacy rules, your choice may be collected through the mechanism provided on the Platform; if no dedicated banner is used, only cookies strictly necessary for the service or based on documented legitimate interest may be employed, in accordance with applicable law.

We may use PostHog to analyse Platform usage (aggregated events, journeys). Collection is configured to the European instance (eu.i.posthog.com / eu.posthog.com) when enabled in the application.

PostHog acts as a subprocessor; data is processed under its commitments and, where applicable, the European Commission’s standard contractual clauses if transfers are required.

Application data is stored and processed via Supabase (database, authentication). The project may be configured in the EU region; technical metadata may transit through the provider’s infrastructure.

The web application may be deployed on Vercel or equivalent; technical logs and request metadata may be retained by that provider for operations and security.

Card payments are processed by Stripe. We only receive information needed to track the transaction (payment identifier, status, amount). Stripe acts as a subprocessor; processing is governed by its privacy policy and, where applicable, its Data Processing Agreement.

Your data is accessible to authorised staff of GHEZALI Business Mastery and to technical subprocessors (hosting, database, analytics, payments) strictly for their tasks.

We do not sell your personal data to third parties for their marketing.

Account and business relationship data: for the duration of use, then limited archiving (for example up to three (3) years from last contact for evidence in disputes, unless a longer legal retention applies).

Prospecting data: up to three (3) years from last contact or withdrawal of consent where consent is the legal basis.

Technical and security logs: short periods compatible with incident investigation (often weeks to months, unless law requires longer).

Backups: data may persist in encrypted backups for a limited time after operational deletion, until backup rotation.

We implement appropriate technical and organisational measures (secure connections, access controls, backups) proportionate to the risks. No measure guarantees absolute security.

Under the GDPR and French Data Protection Act, you have rights of access, rectification, erasure, restriction, objection, portability (where applicable) and post-mortem instructions.

To exercise your rights: dpo@be-scale.com. Proof of identity may be requested if there is reasonable doubt.

You may lodge a complaint with the CNIL (www.cnil.fr) if you believe processing infringes applicable law.

The Platform is intended for persons able to contract in a professional or entrepreneurial context. It is not aimed at minors under sixteen (16) without parental authorisation where the law requires.

We may update this policy. The update date is shown at the top of the page. Please review it regularly.

Questions about this policy or your data: dpo@be-scale.com — contact@be-scale.com — GHEZALI Business Mastery, 78 Avenue des Champs-Élysées, 75008 Paris, France.