Version in force as of October 26, 2026.
This policy explains what personal data Blue Portance collects on blueportance.com, why, how long it is kept and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
Blue Portance SAS, a French simplified joint-stock company with a share capital of €61,281, registered with the Antibes Trade and Companies Register under number 898 653 514, whose registered office is at 6 Impasse des Vallières, 06800 Cagnes-sur-Mer, France.
Contact for any question about your data: contact@blueportance.com.
2. Data processed, purposes and retention periods
| Processing | Data concerned | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Orders and customer account | Identity, contact details, addresses, order history | Manage orders, delivery, the trial, returns and warranties | Performance of the contract | Duration of the business relationship; accounting records: 10 years (legal obligation); inactive accounts deleted after 3 years |
| Payment | Payment data | Collect payment for the order | Performance of the contract | Processed directly by the payment providers; Blue Portance has no access to your bank details |
| Customer service and contact | Identity, contact details, content of exchanges | Answer requests and complaints, support you during the trial | Legitimate interest | 3 years after the last contact |
| Newsletter | Email address, first name | Send news and offers | Consent | Until you unsubscribe |
| Personalized pain analysis | Questionnaire answers, including health data (pain, conditions, medical history, age, height, weight); email address and, if you provide it, phone number | Produce and send you a personalized analysis of your sitting conditions | Explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR) | 24 months from your last exchange with Blue Portance, unless you ask for earlier deletion |
| RELIANCE Club | Identity, contact details, shared contributions | Manage membership and the experience-sharing space | Consent | 24 months from your last exchange with Blue Portance, unless you ask for earlier deletion |
| Audience measurement and advertising | Browsing data, cookies | Measure traffic and ad performance | Consent (cookie banner) | See the cookie policy |
3. The personalized pain analysis
The analysis questionnaire contains information about your health. This data is processed only with your explicit consent, given before you send the questionnaire by ticking a dedicated box that is not pre-ticked. This consent is separate from signing up for the newsletter or the RELIANCE Club. The date of your consent and the version of the text you accepted are recorded.
To produce the analysis, your answers are sent to OpenAI, which acts as a processor on behalf of Blue Portance. Only the answers needed for the analysis are sent: your name, email address and phone number are not sent. OpenAI’s response storage option is disabled; OpenAI may temporarily keep the data it receives (30 days at most) for abuse detection, and data sent through its application programming interface (API) is not used to train its models.
The analysis is reviewed by Blue Portance before it is sent to you. You receive it through a secure personal link, valid for 30 days, from which you can download it as a PDF. It is not medical advice and does not replace a consultation.
Your email address is used only to send you the analysis and, if needed, to contact you to clarify your answers. Your phone number, which is optional, is used only to contact you.
You can withdraw your consent at any time by writing to contact@blueportance.com; your questionnaire and analysis will then be deleted. Withdrawal does not affect processing carried out before it.
4. Recipients
Your data is intended for Blue Portance. It is shared, only as far as necessary, with the following service providers:
| Provider | Role |
|---|---|
| Rocket.net | Website hosting |
| Stripe, PayPal, Klarna | Payment |
| Carriers | Delivery |
| OpenAI (OpenAI Ireland Ltd) | Personalized pain analysis |
| Email service providers | Sending emails related to orders, the analysis and the newsletter |
| Google (Analytics, Ads, Tag Manager) | Audience measurement and advertising, after consent |
Blue Portance does not sell or rent your data.
5. Transfers outside the European Union
Some providers may process data outside the European Union, in particular in the United States. These transfers are covered by appropriate safeguards: an adequacy decision (Data Privacy Framework) or the European Commission’s standard contractual clauses.
6. Security
Blue Portance applies appropriate technical and organizational measures to protect your data: encrypted connection (HTTPS), restricted access to data, strong passwords and backups. Access to health data is limited to the people who need it, and analyses can only be viewed online through a time-limited personal link.
7. Your rights
You have the following rights over your data:
- access, rectification and erasure;
- restriction of and objection to processing;
- data portability;
- withdrawal of your consent at any time;
- setting instructions on what happens to your data after your death.
To exercise them, write to contact@blueportance.com. You will receive a reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Cookies
The use of cookies and how your consent is managed are described in the cookie policy.
9. Changes to this policy
Blue Portance may change this policy to reflect legal or technical developments. The date of the latest update is shown at the top of the page.
This policy is a translation of the French original. In case of discrepancy, the French version prevails.
