Who is responsible for processing

“Thrax Legal” is the trading name under which [First name LAST NAME], a self-employed individual resident in Belgium (business number BCE: [to be added]), provides the services described on this site. It is not a separate legal entity. For any question about this policy or your data, contact us at hey@thrax-legal.ch.

What data we process

Depending on how you use the site, we process the following data:

  • Technical connection data generated by your browsing (IP address, browser type, pages visited, timestamp), collected automatically by our hosting provider Cloudflare for security and the proper functioning of the site.
  • Your answers in the free self-assessment: these answers stay in your browser, are never sent to a server and disappear when you leave or reload the page.
  • If you create a client account: your name, email address, company and phone number (optional), the plan you chose, the date you accepted the terms and conditions, the date of your last sign-in, and your password, which we only store in an irreversibly encrypted form (we cannot read it).
  • If you send us a request from your account: the text of your request, your exchanges with us and the documents you attach (contracts, letters, etc.). These documents may contain third parties’ personal data: only attach what is necessary.
  • The payment information we record to manage your subscription: amount, date, period covered, payment method and reference. We do not process any bank card data: the online payment module is not yet live, and payment is currently made by bank transfer or another means agreed with you. This policy will be updated when a payment provider is activated.
  • Internal notes we take on your matter for follow-up, and a technical log of actions performed on accounts (payment recorded, reply sent, etc.).
  • Sign-in attempts (email address entered, IP address, date), kept for seven days to block intrusion attempts.
  • The content of any email you send us if you contact us directly.

Cookies and trackers

This site does not use any audience-measurement, advertising or social media cookies. It does not install any third-party trackers. If this changes (for example by adding an analytics tool), this policy will be updated accordingly before activation.

When you sign in to your client account, we set a single cookie that is strictly necessary for the service to work (the “thrax_session” session cookie): it keeps you signed in, can only be read by our server, is never used for tracking or advertising, and expires after 30 days or when you sign out.

The only other exception: the home page features a presentation video hosted on YouTube. As long as you don’t click the player, nothing is sent to YouTube: the image shown is hosted on our site. If you start the video, it is loaded in privacy-enhanced mode (youtube-nocookie.com); YouTube then receives your IP address and technical information about your browser, and may use cookies or similar technologies under its own privacy policy.

Recipients of the data

We do not sell or rent your data. It is processed by the following technical providers:

  • Cloudflare, Inc. (site hosting, accounts database and storage of attached documents), under recognised standard contractual clauses for transfers outside Switzerland.
  • Resend, Inc. (sending the service’s emails: confirmations, password links, reply notifications), which receives your email address and the content of these messages, under standard contractual clauses.
  • If you start the presentation video, Google Ireland Limited, which operates YouTube for users in Switzerland and the European Economic Area, receives the data described above, which may be transferred to the United States.

Access to your account and documents is reserved to you and to Thrax Legal. No other client can ever view them.

Retention period

  • Technical connection data is kept for the standard period applied by our hosting provider for security logs, then deleted automatically.
  • Sign-in attempts are kept for seven days; password reset links expire after one hour; a sign-in session expires after 30 days.
  • Your account data, requests and documents are kept for the duration of your subscription, then for as long as needed for our legal obligations and the defence of our rights. You may ask for their erasure, subject to those obligations.
  • Payment records are kept for the legal period applicable to accounting records.
  • Emails you send us are kept for as long as needed to handle your request.

Your rights

Under the Swiss FADP, you have the right to access, rectify, erase and object regarding your data. To exercise these rights, contact us at hey@thrax-legal.ch. You may also file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Changes

This policy may be updated, in particular when the payment module is activated or new tools are added to the site. The date of the last update appears at the top of this page.