Last updated: 4 November 2026
1. Who we are
This policy explains how EGG Science collects and uses your personal data when you visit eggscience.com, contact us or use our services, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable data protection laws.
Data controller for individuals located in the European Economic Area (EEA):
EGG SCIENCE INTERNATIONAL SAS – 61, rue de Lyon, 75012 Paris, France – SIRET 950 784 868 R.C.S. Paris.
For individuals located in Brazil, the data controller is EGG SCIENCE BRASIL LTDA (Rua Huet Bacelar, 480 – Ipiranga – São Paulo – SP, CNPJ 41.681.302/0001-50), in accordance with the Brazilian LGPD.
Contact for any question about your data (data protection officer): legal@eggscience.com
2. Definitions
| Personal data | Any information relating to an identified or identifiable natural person, directly or indirectly (name, email address including business email, phone number, IP address, online identifier, etc.). |
| Processing | Any operation performed on personal data (collection, recording, consultation, use, disclosure, erasure, etc.). |
| Data subject | Any natural person whose data is processed: website visitors, prospects, customers, users of our assessments, partners. |
| Consent | A freely given, specific, informed and unambiguous indication of your wishes by which you agree to a processing operation. Simply browsing the website does not constitute consent. |
3. Our principles
We process your data lawfully, fairly and transparently; only for specified purposes; limited to what is necessary; keeping it accurate; for a limited period; and with an appropriate level of security.
4. Data we collect
Data you provide to us: first and last name, email address, phone number, company, country, message, billing details, and the information needed to create your account and provide our services.
Data collected automatically: IP address, browser and device type, pages visited, and information stored by cookies or similar technologies, as described in section 9.
Data received from our partners: when you work with a certified Advisor or partner, they may share data about you with us, provided they have a legal basis to do so.
5. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
| Creating and managing your account, providing our services and assessments, managing subscriptions, billing and support | Performance of a contract or pre-contractual steps |
| Answering requests sent via form, email or WhatsApp | Pre-contractual steps or legitimate interest in answering requests |
| Complying with our accounting, tax and legal obligations | Legal obligation |
| Securing the website, preventing fraud, improving our services | Legitimate interest |
| Sending customers information about services similar to those they already use (you can object at any time) | Legitimate interest |
| Sending the newsletter and commercial offers to prospects, or offers from our partners | Consent |
| Placing non-essential cookies (analytics, marketing, Meta Pixel) | Consent |
Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
We do not make any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.
6. Recipients of your data
Your data is accessed by authorised EGG Science staff and is never sold. It may be shared, to the extent necessary, with:
✓ our technical processors, bound by contract and subject to GDPR obligations: website hosting (Hostinger), payments (Stripe, Asaas), email and customer relationship tools;
✓ Meta Platforms (Meta Pixel), only if you have accepted marketing cookies;
✓ the certified Advisor supporting you, when you use our assessments through them;
✓ administrative or judicial authorities, where required by law.
7. Transfers outside the European Union
Some of our providers (for example Meta or Stripe) and our Brazilian subsidiary may process data outside the EEA. These transfers are covered by an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies) or by the standard contractual clauses adopted by the European Commission. You can obtain a copy of these safeguards by writing to legal@eggscience.com.
8. Retention periods
| Data | Period |
| Customers and users | For the duration of the contract, then archived for the applicable legal limitation period |
| Prospects (contact forms, free tests, newsletter) | 12 months from the last contact, or until consent is withdrawn |
| Accounting records and invoices | 10 years (legal obligation) |
| Cookie choices | 12 months |
| Analytics and marketing cookies | 13 months maximum |
At the end of these periods, data is deleted or anonymised.
9. Cookies
On your first visit, a banner lets you accept, refuse or customise non-essential cookies. No analytics or marketing cookies (including the Meta Pixel) are placed without your consent. You can change your choice at any time using the “Manage consent” button on the website. For more details, see our Cookie Policy.
10. Security
We implement appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS), access control, pseudonymisation where relevant and monitoring of our systems. In the event of a data breach likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and, where the risk is high, we will inform you. If you have an account, please keep your username and password confidential.
11. Your rights
You have the following rights over your data:
| Access | Know whether we process your data and obtain a copy. |
| Rectification | Have inaccurate or incomplete data corrected. |
| Erasure | Request deletion of your data in the cases provided for by the GDPR. |
| Restriction | Request the temporary suspension of a processing operation. |
| Objection | Object to processing based on our legitimate interest, and at any time to direct marketing. |
| Portability | Receive your data in a structured, machine-readable format, or have it transmitted to another organisation. |
| Withdrawal of consent | Withdraw any consent given, at any time. |
To exercise your rights, write to legal@eggscience.com. We will respond within one month, which may be extended by two months for complex requests. We may ask for proof of identity if we have reasonable doubts.
If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – www.cnil.fr, or with the supervisory authority of your country of residence.
12. Changes to this policy
We may update this policy. The date of the last update is shown at the top of the page. In the event of significant changes, we will inform you by appropriate means.