Privacy Policy

Last updated: July 8, 2026

This policy describes the personal-data processing carried out in connection with the Studhome service. The data controller is SAS COLONIES (Paris TCR 824 567 721, 21 rue de Bruxelles, 75009 Paris). SAS COZAC CONSEIL acts as processor for the technical operation of the service.

1. Data we collect

Identity: surname, first name, date and place of birth, nationality;
Contact details: e-mail address, phone number (including WhatsApp if you consent);
Study project: study city, field of study, length of stay, estimated arrival date;
Account: password (hashed), order history;
Payment: processed directly by our provider Stripe — we do not store your card number;
Browsing data: see the Cookie Policy.

2. Purposes and legal bases

Issuing and managing the Certificate (performance of the contract);
Creating and managing the client account (performance of the contract);
Payment collection and fraud prevention (performance of the contract, legitimate interest);
Customer support, including via WhatsApp where you ticked the corresponding box (consent);
Commercial communications (consent, withdrawable at any time);
Certificate authenticity verification via QR code (legitimate interest);
Accounting and tax obligations (legal obligation).

3. Recipients

Data is accessible to authorised teams of Colonies and its processor Cozac Conseil, and to our providers: Stripe (payment), the site host, e-mailing tools and, where applicable, the agency in charge of acquisition campaigns. No data is sold to third parties.

4. Transfers outside the European Union

Some providers may process data outside the EU. In that case, transfers are governed by appropriate safeguards (European Commission standard contractual clauses or an adequacy decision).

5. Retention periods

Account and order data: duration of the contractual relationship, then archived for 5 years (limitation period);
Accounting records: 10 years;
Prospecting data: 3 years after last contact;
Cookies: see the Cookie Policy.

6. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time. To exercise them, contact us via the WhatsApp hotline or at the address given in the legal notice. You may also lodge a complaint with the CNIL (cnil.fr).

7. Security

Data is hosted in the European Union and protected by appropriate technical and organisational measures (encryption in transit, access control, logging).