1. Data controller
Ziyad TAIA-ALAOUI, individual entrepreneur (entrepreneur individuel / EI), operating under the trade name BlessfullyAI and offering the BioCred service. SIREN: 941 391 021. Registered business address: 44 Rue Général Ferrié, 38100 Grenoble, France. Email: contact@getbiocred.com. Telephone: +33 7 61 64 59 45.
Privacy contact: contact@getbiocred.com.
2. Personal data processed
BioCred processes professional contact information, including business email addresses and business websites; research topics and messages submitted through its forms; selected service plans; subscription, billing and transaction information; and customer-service and CRM correspondence. BioCred does not request clients to submit personal research datasets. Full payment-card details are entered into the payment provider’s interface rather than BioCred forms.
3. Why data is processed
BioCred uses these data to respond to enquiries and Evidence Scan requests, prepare and perform subscriptions, manage customer relationships and customer support, administer billing and accounting, and protect the website and CRM. The applicable legal bases include steps before entering a contract and performance of a contract where the data subject is a contracting individual (GDPR Article 6(1)(b)); legitimate interests in managing B2B contacts and security (Article 6(1)(f)); and legal obligations for accounting and statutory records (Article 6(1)(c)). B2B commercial outreach, where carried out, is subject to applicable direct-marketing rules and the right to object.
4. Recipients and providers
Personal data may be accessed by authorised BioCred team members and providers necessary for website hosting, delivery, CRM administration and billing. The website is provided through Lovable Labs Incorporated, One Lincoln Street, Suite 2500, Boston, MA 02111, USA; EU representative: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden; contact: dpo@lovable.dev. Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, provides content delivery. Payment information is processed by the payment provider identified at checkout when a subscription is placed.
5. Retention
Unconverted prospect information used for B2B commercial follow-up is kept for up to three years after collection or the last meaningful contact initiated by the prospect, unless earlier deletion is appropriate. Information needed to manage an active customer relationship is retained while the relationship continues. Contractual records may be archived for the applicable limitation period, generally five years. Invoices and accounting supporting records are retained for ten years from the close of the relevant financial year. Data are deleted or anonymised when no longer required, except where a legal obligation or legitimate legal claim justifies restricted retention.
6. Rights and complaints
Subject to applicable conditions, individuals may request access, correction, deletion, restriction or portability of their data and may object to processing based on legitimate interests, including direct marketing. Contact contact@getbiocred.com to exercise these rights. Individuals may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
7. International processing and security
BioCred uses providers established in or operating from countries including the United States. International transfers are governed by applicable data-protection requirements and provider arrangements. BioCred limits CRM access to authorised users and uses access controls appropriate to the service.
8. Cookies and changes
The current position on cookies is described in the Cookie Notice. This Privacy Policy may be updated when the service or processing activities change.