Privacy policy

Convenience translation. The French version (Politique de confidentialité) is the legally binding reference. In case of any discrepancy, the French text prevails. ⚠️ TO REVIEW: section 3.2 still lists “Wix” (hosting) and “Google” (analytics) from the legacy site — to align with the current stack (AWS, Cloudflare, Mistral, Kinde) in both languages.

Sicoya (with registered office at 8 rue Victor Hugo, 69002 Lyon, France), as data controller, places great importance on protecting and respecting your privacy. This policy is intended to inform you, in accordance with Regulation No. 2016-679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “Regulation”), of our practices regarding the collection, use, and sharing of the information you may provide to us through our website www.showy.so (hereinafter the “Site”).

This policy aims to inform you about the categories of personal data we may collect or hold about you, how we use them, who the recipients are and with whom we share them, how long we retain them and how we protect them, and finally the rights you have over your personal data.

1. The data we collect

By using the Site, you may provide us with information, some of which can identify you and therefore constitutes personal data (hereinafter the “Data”). This information includes, in particular, the following data:

• Identification data: last name, first name
• Professional data: company, industry
• Contact data: work email address and work phone number
• Connection data: IP address, browsing cookies

2. How do we use the data we collect?

We use the Data we collect in order to:

• Respond to requests for a demo of the Showy solution: providing a demo request form, collecting and managing information to respond to the request
• Respond to contact requests for specific inquiries: providing a contact form, collecting and managing information to respond to the request
• Improve the experience of using the services: integrating browsing cookies
• Communicate about our products and services: sending a monthly newsletter (opt-in), sending occasional communications (with consent)
• Maintain and operate our site: hosting the site and its databases, application monitoring and security operations

When Data is collected, you will be informed whether certain Data is mandatory or optional. Data marked with an asterisk in the collection form is mandatory. Otherwise, the fulfillment of your request may be restricted.

3. Who are the recipients of the data we collect, and why do we share this data with them?

3.1. Data transferred to authorities and/or public bodies

In accordance with applicable regulations, the Data may be transmitted to the competent authorities upon request, in particular to public bodies, legal officers, ministerial officers, and debt-collection bodies, solely to meet legal obligations, as well as in the investigation of offenses committed online.

3.2. Data transferred to third parties

We work closely with third-party companies that may have access to your Data, in particular:

• Wix: website hosting
• Google: statistics / analytics

4. How long do we keep your data?

Your Data will not be retained beyond the period strictly necessary for the purposes set out in this Policy, in accordance with the Regulation and applicable laws.

When the retention periods expire, your Data is deleted or anonymized so that it can be used without infringing your rights. Nevertheless, your Data may be archived beyond the stated periods for the purpose of investigating, recording, and prosecuting criminal offenses, solely to allow, where necessary, your Data to be made available to the judicial authority. Archiving means your Data will no longer be accessible online but will be extracted and kept on a separate, secure medium.

5. Are your data transferred, how, and where?

We prioritize the use of services operating within the European Union and compliant with the GDPR. However, your Data may be transferred from a country within the European Union to a country outside the European Union. When we transfer your Data outside the European Union, we always do so securely and in accordance with applicable regulations, particularly regarding the protection of personal data:

• either by transferring the Data to a recipient located in a country covered by an adequacy decision of the European Commission certifying that it provides an adequate level of protection;
• or by entering into, or having entered into, the European Standard Contractual Clauses approved by the European Commission as ensuring an adequate level of protection of your Data;
• or by relying on Binding Corporate Rules validated by the competent data protection authorities;
• or by relying on any appropriate safeguards referred to in Article 46 of the Regulation.

You may access all of these documents by contacting us at the address mentioned in Article 7 hereof.

6. How is your data protected?

We take appropriate technical and organizational measures to prevent unauthorized access to, or the modification, disclosure, loss, or destruction of, your Data.

7. What are your rights over your data?

In accordance with applicable laws and regulations on the protection of personal data, you have a number of rights relating to your Data, namely:

• A right of access and information: you have the right to be informed, in a concise, transparent, intelligible, and easily accessible manner, of how your Data is processed. You also have the right to obtain (i) confirmation that Data concerning you is being processed and, where applicable, (ii) access to that Data and a copy of it.
• A right to rectification: you have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete incomplete Data concerning you by providing a supplementary statement. If you exercise this right, we undertake to communicate any rectification to all recipients of your Data.
• A right to erasure: in certain cases, you have the right to obtain the erasure of your Data. However, this is not an absolute right, and we may, for legal or legitimate reasons, retain this Data.
• A right to restriction of processing: in certain cases, you have the right to obtain the restriction of the processing of your Data.
• A right to data portability: you have the right to receive the Data you have provided to us in a structured, commonly used, machine-readable format, for your personal use or to transmit to a third party of your choice. This right applies only where the processing of your Data is based on your consent or on a contract, and where the processing is carried out by automated means.
• A right to object to processing: you have the right to object at any time to the processing of your Data where the processing is based on our legitimate interest, a task carried out in the public interest, or direct marketing purposes. This is not an absolute right, and we may, for legal or legitimate reasons, refuse your objection request.
• The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data where the processing is based on your consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
• The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices.
• The right to give instructions concerning the fate of your data after your death: you have the right to give us instructions regarding the use of your Data after your death.

To exercise these rights, you may contact us at the following address: dpo@showy.so. Note that we may require proof of your identity in order to exercise these rights.

8. Changes to our privacy policy

We may occasionally amend this policy, in particular to comply with any regulatory, case-law, editorial, or technical developments. Where applicable, we will change the “last updated” date and indicate the date on which the changes were made. Where necessary — in particular, but not exclusively, in the event of a substantial change or a specific event requiring amendment of this policy — we will inform you and/or seek your agreement. We advise you to consult this page regularly to stay informed of any changes or updates to our policy.

Last updated: May 26, 2026.