Privacy Policy

BM GROUP SAS, operating the Honax brand
SIRET: 101 430 825 00014
Registered office: 126 Rue Perronet, 92200 Neuilly-sur-Seine
Contact: contact@honax.fr

As part of using the Honax platform, we collect the following data:

• User account: first name, last name, email address, phone number, postal address.
• Client data: name, email, phone and address of clients managed via the platform.
• Appointment data: dates, times, notes and status of interventions.
• Lead data: received requests, type of request, source.
• Prospecting data (website): when you fill out a form on our website (calculators, contact form and demo request), we collect your email, your name, your phone number and the information you provide (for example a revenue estimate).
• Technical data: authentication token, push notification token, IP address and browsing data.

Your data is used to:

• Provide the Honax service (appointment, lead, and client management).
• Send notifications (email, SMS, push).
• Improve the service and user experience (audience measurement).
• Handle your contact requests and send you commercial information.
• Measure the effectiveness of our advertising campaigns and, where applicable, send you targeted advertising (retargeting).

• Contract performance (Article 6.1.b of GDPR): the processing is necessary to provide the service you have subscribed to.
• Legitimate interest (Article 6.1.f): audience measurement carried out without cookies, without a persistent identifier and in an anonymized manner on our website.
• Consent (Article 6.1.a): for advertising trackers (Meta), collected via the dedicated banner displayed on the relevant pages, as well as for sending push notifications.
• Consent (App Tracking Transparency on iOS): for the collection of anonymized analytics data on the mobile application.

• Account data: retained for the duration of the subscription, then 3 years after account deletion.
• Billing data: retained for 10 years in accordance with legal obligations.

To operate the service, we use subcontractors acting on our behalf and on our instructions, grouped into the following categories:

• Transactional email provider.
• SMS provider.
• Audience measurement and error reporting provider.
• Advertising network and conversion measurement (Meta): when you have consented to it on our campaign pages, your email address and phone number (transmitted in hashed form), as well as your IP address, may be shared with Meta to measure our campaigns.
• Provider for storage and internal notification of requests received via our forms (leads).
• Hosting provider.

Some of these subcontractors are located outside the European Union, in particular in the United States. These transfers are governed by appropriate safeguards within the meaning of the GDPR: certification under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. The identity of the subcontractors and a copy of the applicable safeguards can be obtained on request at contact@honax.fr.

• Website - audience measurement: an audience measurement tool is used for statistical analysis. It is configured without cookies or a persistent identifier and in an anonymized manner; it therefore stores nothing on your device and does not require your consent.
• Website - advertising (Meta): on our campaign pages only, the Meta Pixel and the Conversions API are used to measure our ads. They may transmit to Meta your email and phone (in hashed form) as well as your IP address. These trackers are only activated with your prior consent, collected via the dedicated banner; you can change your mind at any time via the "Manage cookies" link. Without consent, no advertising tracker is loaded.
• Mobile app: an audience measurement and error reporting tool is used. On iOS, permission is requested through App Tracking Transparency (ATT) before any collection. If consent is denied, no analytics data is collected. On the mobile app, no data is shared with third parties for advertising purposes. Secure local storage is used for authentication.

In accordance with GDPR, you have the following rights over your personal data:

• Right of access
• Right of rectification
• Right of erasure
• Right to data portability
• Right to object

To exercise your rights, contact us at contact@honax.fr.

We implement the following security measures to protect your data:

• Encryption of communications via HTTPS.
• Secure authentication tokens (Biscuit technology).
• Secure mobile storage (SecureStore) for sensitive data.

The date of the last update is shown at the top of this page. In the event of a major change, we will notify you by email.