Last updated: 3 November 2026. This is a translation; the French version prevails.
C.H.R Consulting takes the protection of your personal data seriously. This policy explains what data is collected, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
The data controller is C.H.R Consulting, SAS, 1-3 rue d'Enghien, 75010 Paris, France, represented by Florian Poirson. Contact: contact@chrconsulting.fr.
No account is required. Personal data is collected only if you contact us voluntarily or order a Food Safety Plan (PMS):
The data you send us is used exclusively to respond to your request and, where applicable, to follow up a business relationship. The legal basis is your consent and/or pre-contractual steps taken at your request.
Answers to the Food Safety Plan questionnaire are used only to produce your document, let you download it again and issue the invoice. The legal basis is the performance of the sales contract.
Contact data is kept for as long as needed to handle your request, then archived or deleted in line with the applicable legal periods (generally 3 years from the last contact for business prospecting).
Food Safety Plan generator: your questionnaire answers are kept for 12 months at most after payment, then deleted automatically; an unpaid order is deleted after 30 days. The draft saved in your browser is erased after 12 months or as soon as you click “Clear my answers”. Invoices are kept for the legal period of 10 years.
Your data is intended for C.H.R Consulting only. It is never sold, transferred or rented to third parties.
For the Food Safety Plan generator, it is processed on our behalf by technical providers: Supabase (database hosting), Stripe (payment and invoicing) and Brevo (email delivery).
For the magazine subscription, your email address is hosted and emails are sent on our behalf by Brevo, a provider established in France. It is kept until you unsubscribe.
This website uses Google Analytics 4 (Google Ireland Limited) to measure its audience: pages viewed, visit duration, origin, device and browser type. These cookies are set only after your consent, given in the banner shown on your first visit; if you refuse, no measurement cookie is set. The IP address is anonymised. Measurement cookies are kept for 13 months at most and your choice is asked again after 13 months. Data may be transferred to Google LLC in the United States under the EU–US Data Privacy Framework.
The website also uses technical storage in your browser, strictly necessary for it to work and not requiring consent: remembering your cookie choice, and the draft of the Food Safety Plan questionnaire (erased after 12 months or on request).
You can withdraw or change your consent at any time:
Under the GDPR, you have the following rights over your data: access, rectification, erasure, restriction, objection and portability. To exercise them, write to contact@chrconsulting.fr. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
The website is served over a secure connection (HTTPS). C.H.R Consulting takes reasonable measures to protect the data entrusted to it against unauthorised access.
