WireframeNestLab Web Engineering Studio
Home / Legal schedule
Compliance schedule · Revision 2026.09

Chronological Compliance Schedule

How WireframeNestLab collects, handles, retains, and retires data — ordered in time — followed by our full Privacy Policy, Terms of Service, Cookie Policy, and Refund Policy.

Data controller

Entity: WireframeNestLab

Registered address: 75017, 152 Rue de Saussure, Paris, France

Email: [email protected]

Activity: Web application, database and backend engineering

Effective 12 September 2026 · Supersedes all prior notices · Governed by Regulation (EU) 2016/679

Stage 01 · Day 0 Collection

Intake of contact & project data

When you email [email protected], call +33 681 954 227, or send the kickoff brief, we collect your name, email, phone, company, budget range, and the technical details you choose to share. Source: direct submission only — never purchased lists.

Stage 02 · Day 0–30 Handling lifecycle

Active project handling

During delivery, data lives in encrypted EU-hosted workspaces: project repositories, task boards, and staging environments. Access is limited to assigned engineers under confidentiality obligations. Backups are encrypted and rotated every 24 hours.

Stage 03 · Day 31–90 Retention

Prospect data window

Inquiries that do not convert to an engagement are purged at day 90. Until then they are held on the legal basis of legitimate interest (GDPR Art. 6(1)(f)) so we can follow up on a scoped request exactly once, then archive or delete it.

Stage 04 · Month 12 Contract records

Commercial & accounting archives

Signed scopes, invoices, and payment receipts are retained for the statutory accounting period required by French law (10 years for accounting records). These are stored read-only and processed solely for legal and tax obligations (GDPR Art. 6(1)(c)).

Stage 05 · Month 24 Deletion

Deletion & anonymisation

Two years after the last interaction, project correspondence and working files are deleted or irreversibly anonymised, except where a longer statutory retention applies. Deletion is verified in a quarterly purge log.

Stage 06 · Quarterly Security audits

Security audit cadence

Every quarter we run dependency vulnerability scans, access-rights reviews, and backup restore drills; once a year an external penetration test is commissioned. Findings, owners, and remediation deadlines are logged and available to clients on request.

Stage 07 · Continuous Client rights

Your rights, exercisable at any stage

Access, rectification, erasure, restriction, portability, and objection — plus withdrawal of consent and a complaint to the CNIL. Write to [email protected]; we respond within 30 days, normally much sooner.

Stage 08 · Annually Policy review

Schedule revision

This schedule and the four policies below are reviewed every September, or sooner if legislation or our tooling changes. Material changes are announced by email to active clients and stamped with a new revision number.

Article 1 GDPR (EU) 2016/679

Privacy Policy

1.1 Controller. WireframeNestLab, 75017, 152 Rue de Saussure, Paris, France, is the data controller for personal data processed through this website and our engagements. Reach our privacy desk at [email protected].

1.2 Categories of data. Contact details (name, email, phone, company), commercial details (budget, timeline, contract value), technical material you provide (repositories, logs, credentials you elect to share), and ordinary server logs (IP address, user agent, timestamp).

1.3 Purposes and legal bases. We answer inquiries and prepare quotes (pre-contract measures, Art. 6(1)(b)); deliver contracted work and invoice (contract performance, Art. 6(1)(b)); secure the site and prevent abuse (legitimate interest, Art. 6(1)(f)); and meet accounting and tax duties (legal obligation, Art. 6(1)(c)).

1.4 Processors and transfers. Data is hosted within the European Union by vetted providers (hosting, email, payment processing) bound by Art. 28 processing agreements. We do not sell or rent personal data. Where a tool operates outside the EEA, transfers rely on Standard Contractual Clauses with the provider.

1.5 Retention. Prospects: 90 days from last contact. Clients: duration of the engagement plus 10 years for accounting records, and 24 months for general correspondence as set out in the schedule above.

1.6 Your rights. You may request access, rectification, erasure, restriction, portability, or object to processing, and may withdraw consent at any time. Write to [email protected]; you may also complain to the CNIL (France) or your local supervisory authority.

Article 2 Commercial terms

Terms of Service

2.1 Scope. These terms govern every engagement between WireframeNestLab and its clients, alongside the signed statement of work (SOW). Where the SOW and these terms conflict, the SOW prevails for that engagement.

2.2 Quotes and payment. Prices quoted are fixed for the scope described. A 50% kickoff deposit reserves the delivery slot and is payable through our Stripe payment link; the balance falls due at handover. Invoices are payable within 14 days in EUR unless otherwise agreed. Late amounts accrue interest at three times the ECB reference rate plus the statutory penalty fee.

2.3 Schedule changes. Either party may request a scope change. Material changes are written into a signed addendum with adjusted price and dates; work on changed scope does not begin before that addendum is countersigned.

2.4 Intellectual property. Upon receipt of final payment, WireframeNestLab assigns all worldwide rights in the client-specific deliverables — code, design assets, and documentation — to the client. We retain ownership of pre-existing libraries, tools, and generic know-how, licensed to the client perpetually and royalty-free for their business use.

2.5 Warranty. Deliverables are warranted to conform to the agreed specification for 30 days after handover. Confirmed defects within that window are corrected at no charge. We do not warrant outcomes dependent on third-party platforms, traffic volumes beyond the agreed envelope, or modifications made by others.

2.6 Liability. To the extent permitted by law, either party's aggregate liability is limited to the fees paid under the affected SOW. Neither party is liable for indirect or consequential loss. Nothing here limits liability for fraud, wilful misconduct, or anything that cannot lawfully be limited.

2.7 Termination. Either party may terminate for material breach not cured within 14 days of written notice. On termination, fees for completed milestones remain due, and we hand over work in progress completed to date.

2.8 Governing law. These terms are governed by French law; disputes fall to the competent courts of Paris, France, after a good-faith attempt at amicable resolution.

Article 3 ePrivacy Directive

Cookie Policy

3.1 What we store. This site runs with a deliberately small footprint:

  • ✓ cookie_accepted — a browser-storage flag remembering your consent choice. Essential, retained up to 12 months.
  • ✓ Session cookie — issued only if you log into a client area, strictly to keep you signed in. Expires when you close the browser.
  • ✓ Stripe checkout — payment cookies set during a transaction, governed by Stripe's own policy and required to complete payment.

3.2 What we do not run. No advertising, retargeting, or cross-site profiling cookies are set on this site. No third-party advertising networks operate here.

3.3 Analytics. If privacy-respecting analytics are enabled, they run only after consent and are aggregated, cookieless where possible, and never used to build individual profiles.

3.4 Managing your choice. The banner at the bottom of every page records your preference in browser storage. You can clear it at any time through your browser settings — the banner will simply ask again on your next visit. Questions: [email protected].

Article 4 Payments & cancellations

Refund Policy

4.1 Cooling-off on deposits. A kickoff deposit is fully refundable if you cancel in writing within 14 days and before any work has begun. After work has started, or after day 14, the deposit is applied to work performed and is not refundable.

4.2 Card-processing fees. Where a refund is issued, third-party card-processing fees (typically 1.5% + €0.25 for EU cards) are deducted, since they are not returned to us by the processor.

4.3 Milestone billing. Fixed-price engagements are billed by milestone. If we fail to deliver a contracted milestone and cannot remedy it within 14 days of written notice, that milestone — and only that milestone — is refunded or credited at your election.

4.4 Retainers. The Scale & Maintenance Retainer bills monthly in advance and can be cancelled any time with 30 days' written notice. The current month is non-refundable; unused prepaid days beyond the notice period are refunded pro rata.

4.5 Non-refundable items. Completed milestones, work already delivered, third-party licences purchased on your behalf, and customised or expedited work outside standard scope are not refundable.

4.6 How to request one. Email [email protected] with your invoice number and reason. Approved refunds are issued to the original payment method within 14 business days; you will receive confirmation when the transfer is made.

Questions on this schedule?

Ask the compliance desk directly.

WireframeNestLab, 75017, 152 Rue de Saussure, Paris, France. We answer data and contract questions within two business hours.