Privacy Policy

Data collected

We only collect data necessary for our escrow service operation:

• Identification information (name, surname, email)
• Billing information and banking details
• Transaction and project data
• Connection logs and IP addresses for security
• Technical cookies necessary for site operation

Collection methods

Data is collected directly from you during:

• Creating your Lockva account
• Using our secure payment services
• Your communications with our customer support
• Browsing our website (technical data)

Processing purposes

Your personal data is used exclusively to:

• Provide our escrow and secure payment services
• Verify your identity and prevent fraud
• Process your financial transactions
• Contact you regarding your ongoing projects
• Improve our services and security
• Comply with our legal and regulatory obligations

Legal basis

Data processing is based on:

• Performance of the Lockva service contract
• Compliance with legal obligations (AML-CFT)
• Your consent for marketing communications
• Our legitimate interest for security and service improvement

Security measures

We implement robust technical and organizational measures:

• SSL/TLS encryption for all communications
• Secure storage with sensitive data encryption
• Restricted data access on need-to-know basis
• Continuous monitoring and intrusion detection
• Regular security audits by independent third parties

Data location

Your data is hosted in Europe (France) with ISO 27001 certified and GDPR-compliant providers.

Authorized recipients

Your data may only be shared with:

• Other transaction parties (clients/contractors) as part of the service
• Our technical providers (hosting, payment) under strict contract
• Competent authorities upon legal request
• Our legal and accounting advisors bound by professional secrecy

International transfers

No data transfer outside the European Union without appropriate safeguards (standard contractual clauses, adequacy decision).

Retention periods

We retain your data for:

• Account data: during service use + 3 years
• Transaction data: 10 years (legal accounting obligation)
• Support data: 3 years after resolution
• Security logs: 1 year maximum
• Marketing data: until you unsubscribe

Automatic deletion

Data is automatically deleted upon expiry of the periods, except for contrary legal obligation.

GDPR rights

In accordance with GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate data
• Right to erasure: delete your data under conditions
• Right to portability: retrieve your data in structured format
• Right to object: oppose processing for legitimate reasons
• Right to restriction: temporarily restrict processing

Exercising your rights

To exercise your rights, contact us at privacy@lockva.com with ID proof. Response within 30 days maximum.

Types of cookies

Our site uses different types of cookies:

• Technical cookies: essential for operation (session, security)
• Performance cookies: anonymized audience measurement
• Preference cookies: saving your choices (language, theme)
• No advertising or behavioral targeting cookies

Cookie management

You can configure your cookie preferences via our consent banner or your browser settings.

Data Protection Officer

For any questions regarding your personal data:

• Email: privacy@lockva.com
• Mail: Lockva - DPO, 123 Avenue des Champs-Élysées, 75008 Paris
• Response guaranteed within 30 days

Right to complaint

In case of disagreement, you can contact the CNIL: www.cnil.fr or by mail (3 Place de Fontenoy, 75007 Paris).