Privacy & Cookies Policy

Information regarding the processing of personal data by Sim&Cure through its website and associated activities.

Last update: August 2026

Privacy Policy

Last update: August 2026

As data controller, Sim&Cure places great importance to data protection and undertakes to comply with the regulations relating to the protection of privacy and personal data, particularly the General Data Protection Regulation n°2016/679 (known as “GDPR”) and the French data protection law.

This policy describes our practices regarding the collection and use of personal information that you may provide on this website or otherwise. We would recommend that you read it before browsing our website.

1. What types of personal information do we collect?

When you browse our website or interact with us, we may collect information about you, including:

  • Identification data: when you submit a request through our contact form or subscribe to our newsletter, such as your name, first name, email, and the subject of your request.
  • Navigation data: We can collect navigation data that enables recognition of your device (computer, phone, or tablet). This includes: IP address, screen size, type of device, location, type of browser, operating system used, language preference, Internet service provider, domain name of the website from which you are visiting us, pages of our website that you viewed, and time spent on pages of our website. These data are used to ensure the proper functioning of the website (performance and safety). These data can also be used to measure website activity and track user behavior, under the conditions laid down in our cookie policy.
  • Email interaction data (tracking pixels): When you receive marketing emails from us, we may use tracking pixels (small invisible images) and, where applicable, link tracking, to collect information relating to the opening of these emails, in particular the date of opening, the terminal used, and your interactions with the email content and links. Depending on the purpose pursued, this collection may require your prior consent (see the purposes below).
  • Identification and business data collected within the scope of our relationship with you as a client, lead or partner: depending on the nature of your relationship with us, we may process your name, first name, phone number, email, postal address, details regarding your professional activity (business line, position, home institution, source of data, etc.) and billing information. These data are collected directly from you or obtained from available public sources, such as LinkedIn.

2. For what purposes and on what legal basis do we process your personal data?

Your personal data is processed for the following purposes:

  • Managing your requests: the information you provide is used based on our legitimate interest to process your request and maintain traceability.
  • Conducting direct marketing activities: if your request is related to our products or services, we may contact you by email and/or by phone for commercial purposes, based on our legitimate interest to promote our products and services and develop our accounts. You have the right to oppose the use of your information for direct marketing purposes at any time.
  • Managing our relationships with our clients, leads, and partners: we may process personal data concerning our clients/leads/ partners and/or their employees. These data are necessary in the course of pre-contractual negotiations, to promote our products (on the basis of our legitimate interest) or for the performance of a contract (e.g. product delivery, billing…). We can also use these data for legitimate administrative purposes (e.g. management of client files) and to meet our legal obligations (e.g. fiscal, accounting…). Depending on the context, the refusal to provide such information may make it impossible to continue our business relationship.
  • Managing your subscription to our newsletter: this processing activity is based on your consent. You can unsubscribe at any time by following the relevant link included in our emails.
  • Audience measurement and analytics: we use navigation data collected from cookies to measure and analyze the site traffic, based on your consent. You can withdraw your consent at any time by using the cookie management module placed in the footer of the website.
  • Analyzing user behavior for marketing purposes and user experience improvement: with your consent, we use cookies to track the pages you have visited and your interactions with our website to better understand your expectations and optimize your experience. You can withdraw your consent at any time by using the cookie management module placed in the footer of the website.
  • Measuring and optimizing the performance of our email campaigns and personalizing our communications: with your consent, we use tracking pixels within our marketing emails to know if and when you open them, the terminal you use, and to personalize the content or frequency of our communications accordingly. You can object to this processing, or withdraw your consent, at any time by using our communication preferences center (accessible via the link included in each marketing email) or by contacting our Data Protection Officer at dpo@sim-and-cure.com .
  • Commercial profiling and segmentation: Based on our legitimate interest in better understanding the engagement and business relevance of our contacts, we may combine identification and business data relating to your professional profile (such as your business line, position, and home institution) with engagement data resulting from your interactions with our communications and website (such as email openings and clicks recorded via tracking pixels, pages visited, and forms completed) in order to establish a commercial engagement score and segment our contacts, for the purposes of prioritizing and personalizing our commercial follow-up and marketing content. Where applicable, this profile may also take into account aggregated and banded (non-precise) information relating to your use of our software. This profiling is used as a decision-support tool for our teams and does not result in any decision producing legal effects concerning you, or significantly affecting you in a similar way, without human intervention. You can object to this profiling at any time.
  • Managing data subjects’ rights requests: when you exercise your rights concerning data collected by us, we ask for your details and keep them, based on our legal obligations.
  • Optimizing the website: we use your navigation data to secure and smooth your browsing, and to adjust the website to your browser type, your device, and your preferences. This processing activity is based on our legitimate interest to provide you with a safe and friendly browsing experience.
  • Establishing, exercising, or defending legal claims: we can process and store your personal data when it is necessary for the establishment, exercise, or defense of legal claims, based on our legitimate interest to protect ourselves in the event of a dispute.

3. For how long do we store your data?

Personal data are kept only for such time required to achieve the purposes for which they were collected. The table below summarizes our practices:

Purposes Retention period Archiving period
Managing your requests 3 years from the last contact with the data subject —
Conducting direct marketing activities 3 years from the last contact with the data subject 3 years
Managing data subjects’ rights requests Until the processing of the request is complete.

Your credentials are kept for the time required to run checks.
Current calendar year + 5 years (for purposes of proof)
Managing your subscription to our newsletter 3 years from the last contact with the data subject The proof of consent is kept during the term of limitation for purposes of proof
Managing our relationships with our clients, leads and partners Duration of the business relationship 5 years from the end of the business relationship

10 years for accounting documents
Measuring and optimizing the performance of our email campaigns and personalizing our communications 3 years from your last interaction with our marketing emails, or until you object to this processing or withdraw your consent —
Establishing your commercial engagement / fit score Data used to establish your commercial engagement / fit score is not kept beyond the retention period applicable to the purpose for which it was originally collected. The resulting fit score and segment are regularly updated on this basis and are not kept for more than 3 years after your last contact with us. —
Audience measurement and analytics 25 months 25 months
Managing your preferences (cookie consent) 6 months —
Analyzing user behavior for marketing purposes and user experience improvement 25 months —

For more information on data collected through cookies, read our Cookie Policy .

4. Who has access to your information, and to whom is it disclosed?

The personal information that we collect is meant to be used by our services on a need-to-know basis. The main services involved are:

  • Marketing and communication department
  • Commercial department
  • Customer service department
  • IT department
  • Regulatory Affairs and Quality Assurance department

Your personal data may be processed by third-party processors under contract with us and bound by an obligation of confidentiality. These processors belong to the following categories:

  • Hosting company
  • Email and marketing automation platform
  • Provider(s) of the email tracking technology integrated within our marketing emails and our marketing automation platform
  • Service providers in charge of audience measurement and analytics
  • Customer Relationship Management software company

When accepting cookies, your personal data may also be shared with third-party providers located outside the European Union or the European Economic Area. Those who are based in the EU/EEA are the following:

Purposes Company name Head office
Email and marketing automation platform Brevo France
Analytics for marketing purposes and user experience improvement Hotjar Ltd Malte
Consent management and storage Axeptio France

When personal data is exported to countries outside the EU/EEA not covered by a decision of adequacy, Sim&Cure commits itself to put in place appropriate safeguards such as standard contractual clauses. The processors located in countries outside the EU/EEA are the following:

Purposes Company name Head office Safeguards
Data hosting, email Google USA Adequacy decision (Data privacy Framework)
Audience measurement Innocraft (Matomo) New-Zealand Adequacy decision
CRM and marketing automation platform SalesForce USA Adequacy decision (Data privacy Framework)
Data hosting AWS USA Adequacy decision (Data privacy Framework)

5. What security and safeguards are in place to protect personal information?

Sim&Cure is committed to ensuring the security of the data you entrust to us. Appropriate technical and organizational measures are in place to prevent unauthorized access, use, modification, destruction, loss, damage, or disclosure, and to protect the data collected. The personal data collected is stored in a secure environment. Data encryption measures are implemented.

Our employees are subject to contractual confidentiality obligations and must comply with an internal charter on the proper use of the information system. We also choose processors that provide sufficient guarantees regarding security and confidentiality.

6. What are your rights regarding personal data?

In accordance with the GDPR and the French data protection law, and subject to the conditions laid down by these regulations, you have the following rights:

  • Right to access your personal data,
  • Right to ask for the correction of inaccurate, outdated, and/or incomplete data,
  • Right to request the deletion of your personal data,
  • Right to request data portability if technically possible,
  • Right to request the restriction of the processing of your personal data,
  • Right to object the processing of your personal data for a legitimate reason,
  • Right to withdraw your consent to the processing of your data for a specific purpose, where such processing was based on that consent,
  • Right to define advance directives for the processing of your data after your death.

To enable you to exercise these rights, we may ask you to provide proof of identity if there is a reasonable doubt about your identity. In this case, the copy of the proof of identity will not be kept for longer than is necessary for verification purposes.

To exercise your rights or if you have any questions about the processing of your data by Sim&Cure:

Please contact our Data Protection Officer at dpo@sim-and-cure.com .

If you are not satisfied with the outcome of your request, you can lodge a complaint with the French data protection authority (CNIL) on its website or by post.

7. What happens in case of changes to this privacy policy?

This website and our activities may evolve, for example in the case of changes in commercial policy or new technological choices. Therefore, we may make changes to this Privacy Policy at any time and without need for justification.

We encourage you to revisit this Privacy Policy regularly, particularly before providing us with your personal details. The date of the latest privacy policy update will appear at the top of this page.

Your continued use of the website after the effective date of any changes will constitute your acceptance of all the changes.