Privacy policy
This policy explains how Phuc Labs, operated by Morgan Phuc EI, collects, uses and protects personal data through its website and its services.
1. Data controller
The controller for the personal data processing is:
Morgan Phuc EI
French sole proprietor trading under the business name Phuc Labs
SIREN: 827 445 396
SIRET: 827 445 396 00027
Registered with the Toulouse Trade and Companies Register, France
Address: 120 ul. sv.sv. Kiril i Metodiy — 1202 Sofia, Bulgaria
E-mail: contact@phuclabs.app
2. Data collected
Depending on website use and exchanges with Phuc Labs, the following categories of data may be processed:
- identification data: first name, last name, company, job title;
- contact data: e-mail address, phone number, professional profile or social network where applicable;
- project-related data: website, expressed need, indicative budget, objectives, constraints, messages sent;
- appointment data: booked slots, calendar information, preparatory notes;
- invoicing and client follow-up data: quotes, invoices, payments, business history;
- technical data: IP address, server logs, browser, device, pages viewed, cookie preferences.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Reply to contact, audit or quote requests. | Pre-contractual measures or legitimate interest. |
| Organise appointments, business exchanges or diagnostic calls. | Pre-contractual measures or contract performance. |
| Carry out commissioned services: strategy, copywriting, design, landing pages, maintenance, support. | Contract performance. |
| Issue quotes, invoices, accounting records and meet administrative obligations. | Legal obligation. |
| Improve the website, measure audience and secure services. | Legitimate interest or consent where required for trackers. |
| Send business information to professional prospects or clients. | Legitimate interest, subject to the right to object. |
4. Data recipients
Personal data is intended for Phuc Labs and, where necessary, for technical, administrative or commercial service providers acting on behalf of Phuc Labs — in particular hosting services, appointment scheduling tools, email, invoicing, analytics or CRM platforms.
These providers only have access to data within the limits strictly necessary to perform their mission.
5. Transfers outside the European Union
Some technical providers used by the website or in the course of services may be located outside the European Union, in particular in the United States. Where such transfers occur, Phuc Labs ensures that they are framed by appropriate safeguards, such as standard contractual clauses, certification mechanisms or any other instrument recognised by the applicable regulation.
6. Retention periods
| Category | Indicative duration |
|---|---|
| Prospect data | Up to 3 years after the last active contact. |
| Client data and service tracking | For the duration of the contractual relationship, then archived for the period necessary to evidence and to handle disputes. |
| Accounting documents and invoices | 10 years from the close of the relevant accounting year. |
| Cookies and tracker data | As stated in the Cookie policy; consent choices are kept for a limited period. |
| Technical security logs | Strictly the duration necessary for security, technical diagnosis and evidence. |
7. Your rights
In accordance with the applicable regulation, you have the following rights: access, rectification, erasure, restriction, objection, portability where applicable, and withdrawal of consent where the processing is based on your consent.
To exercise your rights, you may contact Phuc Labs at: contact@phuclabs.app.
You may also lodge a complaint with the French data protection authority (CNIL): cnil.fr, or with the supervisory authority of your country of residence.
8. Security
Phuc Labs implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
9. Automated decision-making
No decision producing legal effects or significantly affecting a person is taken on a fully automated basis using the data collected through the website.
10. Updates
This policy may be amended to reflect legal, technical or operational changes. The date of last update is shown at the top of the page.