This privacy policy describes how SMASH IT collects, uses and protects the personal data of users of its website smashit.co.uk, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The data controller is:
SMASH IT – SAS
Head office: 2 Route de Saint-Germain de la Grange, 78850 Thiverval-Grignon, France
Email: tdelgado.smashit@gmail.com

2. Data collected

Personal data that may be collected via the smashit.co.uk website includes:

Browsing data: IP address, browser type, pages visited, duration of visit.

Cookies and trackers: user preferences, audience measurement, anonymised statistics.

3. Purposes of processing

The data collected is used to:

Improve the content and performance of the website.

Measure traffic and compile anonymous statistics.

Processing is based on the following legal grounds:

The user’s consent.

SMASH IT’s legitimate interest in managing its business.

4. Data recipients

The data is intended exclusively for SMASH IT and its technical service providers (hosting, web maintenance, emailing tools, etc.), who are subject to a confidentiality obligation.
No data is sold, rented or transferred to unauthorised third parties.

5. Retention period

Retention periods are limited to what is strictly necessary:

Contact details: 3 years after the last exchange.

Data related to registrations/services: 10 years (legal and accounting obligations).

Browsing data/cookies: 13 months maximum.

6. Cookies and audience measurement

The site uses cookies to improve the user experience and perform statistical measurements.
During your first visit, an information banner allows you to accept or refuse non-essential cookies.
You can change your preferences at any time via your browser.

7. Data security

SMASH IT implements all necessary technical and organisational measures to protect personal data against loss, alteration, disclosure or unauthorised access.
The data is stored on secure servers hosted by OVH SAS.

8. Your rights

In accordance with the GDPR, you have the following rights:

Right to access, rectify and delete your data;

Right to object to processing on legitimate grounds;

Right to restrict processing;

Right to data portability;

Right to withdraw your consent at any time.

To exercise these rights, please contact:
tdelgado.smashit@gmail.com

You may also lodge a complaint with the CNIL (www.cnil.fr) if you believe that your rights have not been respected.

9. Transfers outside the European Union

Data may be hosted or processed outside the European Union as part of third-party services (e.g. analysis or emailing tools).
In this case, SMASH IT ensures that the service providers offer protection guarantees in accordance with the GDPR.

10. Changes to the privacy policy

This policy may be changed at any time.
The version in force is the one published on the smashit.co.uk website on the date of your visit.
Last update: 16 October 2025