Your data
Privacy policy
This page explains what data PrimROSE – La Sororité Active collects through this site, why, and how it is protected. This site's audience can be in a vulnerable situation: confidentiality is not a formality, it is a safety requirement.
Last updated: to be completed by the association.
Data controller
[Association's legal name], [legal form], [registered address] — to be completed by the association before going live.
Data we collect
Depending on the form used, we collect: name, email, phone (optional), city, message or motivation. For the "Need help" form: preferred contact method, a contact detail, an optional message and the urgency level — nothing more is asked.
Contact details and messages submitted via "Need help" are encrypted as soon as they are saved (AES-256) and are never readable in plain text in our database, including by us: only an explicit, logged consultation by an authorized team member can decrypt them.
Why we collect it
Solely to respond to your request (membership, contact, training registration, help request) and to follow up on it. No data is sold, rented, or used for advertising.
Retention period
Data is kept for as long as needed to process your request, then until it is closed. [Precise duration to be defined by the association depending on the type of request, e.g. 3 years for routine exchanges.]
Who can see this data
Only authorized team members (admin and super-admin roles) can view requests; help requests are restricted to admins and every consultation is logged. Our technical subprocessors: Supabase (data hosting), Resend (email delivery), Cloudflare Turnstile (anti-spam protection) — each operates under its own privacy commitments.
Cookies and analytics
A single technical cookie remembers your chosen language. If you accept it via the banner, Plausible (cookieless, no personal data analytics) may be enabled — never on the "Need help" page, which remains strictly free of any tracker, including any local storage on your device.
Your rights
You can request access to, correction of, or deletion of your data by writing to [contact email to be completed].
Security
Encrypted connection (HTTPS), database-level access rules, additional encryption for help requests, security headers (CSP, HSTS) across the whole site.