Legal

Privacy Policy

Last updated: 26 March 2026 GDPR compliant
Article 01

Introduction

This privacy statement applies to citizens and legal permanent residents of the European Economic Area (EEA) and Switzerland. It describes how LOFTI, publisher of LatePoint Whitelabel, collects, uses, and protects personal data obtained through latepoint-extend.com.

We recommend reading this statement carefully. In our data processing, we comply with the requirements of applicable privacy legislation — including the General Data Protection Regulation (GDPR) — which means, among other things, that:

  • We clearly state the purposes for which we process personal data, as described in this document.
  • We limit our collection of personal data to only what is required for legitimate purposes.
  • We request your explicit consent to process your personal data in cases where consent is required.
  • We take appropriate technical and organizational security measures to protect your personal data, and we require the same from any processors acting on our behalf.
  • We respect your right to access, correct, or delete your personal data upon request.

If you have any questions or want to know exactly what data we hold about you, please contact us using the details in Article 12.

Article 02

Data Controller

The data controller responsible for processing your personal data is:

LOFTI
Reg. N°: 830657151
France
Article 03

Data We Collect & Why

We collect and process personal data for the following purposes. In each case, the legal basis for processing and the data retention period are indicated.

Purpose Data collected Legal basis Retention
Contact (phone, email, webform) Full name, email address, postal address Contractual necessity 12 months after end of service
Payment processing Full name, email address, postal address Contractual necessity 12 months after end of service
Account registration Full name, email address, postal address Contractual necessity 12 months after end of service
Customer support Full name, email address, postal address Contractual necessity 12 months after end of service
Personalized products & services Full name, email address, postal address Contractual necessity 12 months after end of service
Legal basis — contractual necessity: Processing is necessary for the performance of a contract to which you are a party, or to take pre-contractual steps at your request (Article 6(1)(b) GDPR).

We do not collect personal data beyond what is listed above, and we do not use your data for automated decision-making or profiling.

Article 04

Sharing with Third Parties

We only share or disclose personal data to third-party processors where strictly necessary to deliver our services — for example, our payment provider to process transactions, or our hosting provider to operate the website.

All third-party processors we engage are contractually bound to process your data solely on our instructions and in compliance with applicable data protection law. We do not sell your personal data to any third party.

We do not sell your data. Personal data is never sold, rented, or traded to third parties for their own commercial purposes.
Article 05

Cookies

Our website uses cookies and similar tracking technologies to ensure it functions correctly and to improve your experience. Cookies may also be used for statistical or preference-based purposes.

For full details on what cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy.

You can withdraw or modify your cookie consent at any time using the consent management tool available on our website.

Article 06

Disclosure Practices

We may disclose personal information when required to do so by law, by a court order, or in response to a lawful request from a public authority or law enforcement agency, to the extent permitted under applicable law.

In the event that our website or business is subject to a merger, acquisition, or sale of assets, your personal data may be disclosed to our advisers and any prospective acquirers, and may be transferred to the new controller as part of that transaction. You will be informed of any such change and of any new applicable privacy terms in advance.

Article 07

Security

We are committed to protecting your personal data. We implement appropriate technical and organizational security measures to prevent unauthorized access, loss, alteration, or disclosure of your data.

  • Access to personal data is restricted to personnel with a legitimate need.
  • Data transmissions are protected using industry-standard encryption (HTTPS/TLS).
  • Our security measures are reviewed and updated regularly.
  • Third-party processors are required to meet equivalent security standards.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Article 08

Third-Party Websites

Our website may contain links to third-party websites. This privacy statement applies solely to latepoint-extend.com and does not extend to any external sites.

We cannot guarantee that third parties handle your personal data in a reliable or secure manner. We recommend reading the privacy statements of any external websites before using them or sharing personal information with them.

Article 09

Your Rights

As a data subject under the GDPR, you have the following rights with respect to your personal data. You can exercise any of these rights by contacting us using the details in Article 12. Please always clearly identify yourself so we can process your request accurately.

Right to be informed

You have the right to know why your personal data is collected, what it will be used for, and how long it will be retained.

Right of access

You have the right to access the personal data we hold about you and to receive a copy of it.

Right to rectification

You have the right to have inaccurate or incomplete personal data corrected or completed at any time.

Right to erasure

You have the right to request deletion of your personal data, subject to applicable legal obligations.

Right to data portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.

Right to object

You have the right to object to the processing of your personal data. We will comply unless there are compelling legitimate grounds for the processing.

Right to withdraw consent

Where processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us via latepoint-extend.com/contact. We will respond within the timeframe required by applicable law (generally 30 days).

Article 10

Amendments to This Privacy Statement

We reserve the right to amend this privacy statement at any time. The most current version will always be available at latepoint-extend.com/privacy-policy, with the "last updated" date revised accordingly.

We recommend checking this page periodically to stay informed of any changes. Where reasonably practicable, we will actively notify you of significant changes — for example, by email if we hold your contact details.

Article 11

Contact

For any questions about this privacy statement, to exercise your rights, or to request information about the personal data we hold, please contact us:

Cart ( 0)

  • Your cart is empty.