Privacy policy
Last updated: November 2, 2026
[TO COMPLETE] ("we") is the controller of the personal data collected on Urban Marmite. This page explains what we collect, why, and your rights.
Data we collect
Account: name, email address, password (stored as an irreversible hash), language, sign-up and login dates, acceptance of the terms.
Business profile: business name, city, postal code, description, phone, website, SIRET, photos, logo and business details.
Exchanges: partnership requests and messages between users.
Waitlist: email, city and type of business.
Technical data: IP address (abuse prevention and security), server logs.
Purposes and legal bases
Providing the service (account, profile, search, introductions, messages): performance of the contract (the terms of use).
Service emails (address confirmation, password, new requests and messages): performance of the contract; activity notifications can be turned off in your settings.
Weekly digest and launch email to waitlist sign-ups: legitimate interest, with unsubscribe at any time.
Security, abuse prevention, moderation and business verification: legitimate interest.
Anonymous, cookie-free audience measurement: legitimate interest.
Who receives your data
Other users see your public profile. Your name, email, phone and website are only shared with partners whose request you accepted (or whom we introduced to you).
Our processors, only as needed to run the service: the host OVH SAS (France) and our email provider, based in the EU or covered by appropriate safeguards.
We never sell or rent your data.
How long we keep it
Account and profile: until the account is deleted. Accounts inactive for 3 years are deleted after a warning email.
Requests and messages: deleted along with either partner's account.
Waitlist: 2 years after sign-up, or until you unsubscribe.
Technical logs: 12 months maximum. Backups: 30 days.
Cookies
We only use strictly necessary cookies, which need no consent: "um_session" (keeps you logged in, 30 days) and "um_locale" (chosen language, 1 year).
No advertising or tracking cookies are used. If audience measurement is enabled, it works without cookies or personal data.
Security
Encrypted connections (HTTPS), passwords hashed with bcrypt, single-use email links, rate limiting, encrypted backups and hosting in France.
Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability. You can edit your information, export your data and delete your account directly from your account settings.
For any other request, write to contact@belboudou.com. If you believe your rights are not respected, you can complain to the CNIL (www.cnil.fr), the French data protection authority.