Booloopay

Privacy policy

Last updated: June 30, 2026

1. Data controller

The data controller is MHR CONSULT (SAS, SIREN 949 729 347), 14 Rue de Thionville, 75019 Paris – contact@booloopay.com. MHR CONSULT is committed to processing your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and French Law 78-17 of 6 January 1978 (Informatique et Libertés).

2. Data collected

Category Data Purpose Legal basis
Identity First name, last name, email, phone Account creation and management Contract performance
Billing Bank details (Stripe), invoicing address, VAT Payment processing Contract performance
Usage Logs, IP address, browser, actions Security and audit trail Legitimate interest
Business Customers, payment requests, guarantees, documents Service provision Contract performance

3. Data retention

  • Account data: retained for the duration of the contract, then 3 years for legal obligations
  • Accounting documents: 10 years (French Commercial Code)
  • Connection logs: 12 months
  • Data after account deletion: 30 days, then permanent erasure

4. Data sharing

Your data may be shared with:

  • Stripe, Inc. – payment processing (USA, standard contractual clauses)
  • OVH SAS – hosting (France / EU)
  • Telnyx LLC – SMS / WhatsApp notifications (USA, standard contractual clauses)
  • Google LLC – authentication via Google OAuth (USA, standard contractual clauses)

MHR CONSULT does not sell your personal data to third parties.

5. Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ('right to be forgotten')
  • Restrict processing
  • Data portability
  • Object to processing based on legitimate interest
  • Withdraw consent at any time

To exercise your rights, contact us at: contact@booloopay.com. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

6. Cookies

Booloopay uses only strictly necessary cookies (session, CSRF protection, language preference). No advertising or tracking cookies are used. No consent banner is required as no non-essential cookies are deployed.

7. Security

MHR CONSULT implements appropriate technical and organisational measures to protect your data: HTTPS encryption, access control, activity audit logs, data segmentation per organisation. Payment data is never stored on our servers and is handled exclusively by Stripe (PCI DSS certified).

8. International transfers

Some of our service providers (Stripe, Telnyx, Google) are established in the United States. Transfers are governed by Standard Contractual Clauses approved by the European Commission, ensuring adequate protection of your data.

9. Contact

For any question relating to the processing of your personal data:
MHR CONSULT – 14 Rue de Thionville, 75019 Paris
contact@booloopay.com

Legal notice Terms of use Back to homepage