Privacy policy

When you browse the website, data is collected and processed by our services.
The purpose of this data protection policy is to inform you about how we collect and process your personal data.

1. Who is the data controller?

The data controller is the person who determines the purposes and means of a processing operation, i.e. the objective and the way it is carried out.
The company SmilyWay SAS is the publisher of the website and the application, and is responsible for the processing of the collected data.

2. Nature of the data collected via the site – cookies

Through their navigation on the site, users provide data inherent to the means used: IP address, time of connection, browser used, operating system, … These data are not exploited beyond what is strictly necessary to ensure a readable service.
If users agree, cookies may be placed on their computer to determine, statistically, the most viewed pages and the path from page to page. If users decline, this data is not collected.

Users of the site also provide personal data when using the service: name, first name, e-mail, address, job, photo, date of birth, etc. These data are provided on a voluntary basis by users, with full knowledge of the facts. These data will not be used for any purpose other than those explicitly provided by the user.

3. Why do we process your data and on what legal basis?

We only collect data when we have a legal basis to do so.
The data collections, and their processing, are made because they are necessary to provide our services.

4. Security

Data that passes through our networks is encrypted.
The codes allowing to identify a user are encrypted, to avoid that a person can find the coordinates of a user without his approval.
Data storage is carried out in France, on servers on which we apply the usual precautions and follow the recommended practices to avoid any loss, destruction, alteration or unauthorized use/access of them.
During the banking information season, this information is transmitted in an encrypted manner via the use of the Secure Socket Layer (SSL) protocol. Although no method of transmitting or storing data via the Internet can be declared 100% reliable, we follow all the requirements of the PCI-DSS standard to ensure maximum security when processing this information.

5. Right of access and deletion

Users can delete their data by deleting the profiles they have created.
After deletion of all profiles, only the login data remains in the database: First name, Last name, e-mail, password, time of connection, connection IP. This data can be deleted upon request to .

6. Changes to this privacy policy

We reserve the right to change this privacy policy at any time, so we recommend that you review it regularly. Changes/updates will be effective immediately upon posting to the site. Any changes will be posted on this page so that you can be aware of any changes in the way your personal information is handled.

7. Questions and Contact Information

If you wish to: access, correct or delete any personal information we hold, make a complaint or simply make a general inquiry, please contact by email at

Last updated: May 3, 2022.