Privacy Policy

The Data Controller responsible for your personal information is LILY ROMANE, a simplified joint-stock company (Société par Actions Simplifiée), registered in France under SIREN number 851 639 369.

Registered Office: 17 rue Marbeuf, 75008 Paris, France.

For any questions regarding your personal data, please contact us directly at: meetus@be-bold-club.com.

We apply the principle of data minimisation: we only request information that is strictly necessary for each stage of our relationship.

Data collected on the website (Immediate): Identity and Contact Details (name, surname, email address, phone number); Professional Background (company name, job title); Technical Data (IP address, device type, browsing data, and security logs via tools such as Cloudflare Turnstile); with your consent only, pages viewed and the source of your visit via HubSpot cookies (see the Cookies section).

Data collected subsequently (In case of collaboration): Travel Data appearing on your identity documents (Passport/ID card) required for transport and hotel reservations; Companion/Guest Information (identity details for your spouse and/or minor children provided by you as their legal guardian); Sensitive Data you choose to disclose (dietary requirements/allergies or physical condition) so we can adapt meals and wellness activities.

Responding to your requests: sending you information, quotes, or programmes (performance of pre-contractual measures).

Organising your stay: booking flights, hotels, and activities (performance of a contract).

Communication: sending you our newsletter or exclusive invitations, only if you have subscribed (consent, which can be withdrawn at any time).

Audience measurement and browsing analytics: understanding how the website is used and, if you fill in a form, linking your browsing journey to your contact record (consent given via the cookie banner, which can be withdrawn at any time).

Security and Legal Obligations: protecting our site against fraud (legitimate interest) and complying with our legal obligations.

Your data is confidential and is never sold.

Recipients: internal staff of LILY ROMANE / The Be Bold Club; trusted technical service providers subject to strict confidentiality (OVHcloud, Cloudflare, Make, Airtable, HubSpot, Google Workspace).

Travel logistics providers: airlines, hoteliers, and local destination management companies.

Technical providers (software): if data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

HubSpot: your contact record is hosted in the European Union under HubSpot’s regional data hosting commitment. That commitment does not cover analytics data (audience measurement, browsing), and HubSpot may transfer personal data to the United States, in particular for support; such transfers are covered by HubSpot’s certification under the EU–US Data Privacy Framework and by Standard Contractual Clauses.

Travel providers (hotels, transport): when your stay takes place outside the EEA, transferring your identity/flight data to the destination country is necessary for the performance of the travel contract (derogation under Article 49 of the GDPR).

Prospects / Leads: 3 years after your last interaction with us.

Clients (contractual documents and invoices): 10 years, in accordance with French accounting obligations (Code de Commerce).

Sensitive Data (Passports, Health): deleted once the stay is completed and the service fully delivered, unless there is a legal obligation to retain it.

Security Logs: up to 12 months.

HubSpot analytics cookies and the choice you make in the cookie banner: 6 months maximum.

You have the following rights regarding your data: access, rectification, erasure, restriction of processing, data portability, and the right to withdraw your consent.

You may exercise these rights at any time by writing to meetus@be-bold-club.com.

If you believe, after contacting us, that your rights have not been respected, you may lodge a complaint with the CNIL (cnil.fr) or the competent supervisory authority.

A cookie is a small file stored on your device when you visit a website. Our site uses two categories of trackers.

Strictly necessary trackers (exempt from consent): anti-spam protection for forms (Cloudflare Turnstile) and storage of your cookie choice (6 months).

Audience measurement and browsing analytics trackers (subject to your consent): set by our provider HubSpot only if you click “Accept”. They allow us to measure website traffic and, if you fill in a form, to link your browsing journey to your contact record. Retention: 6 months maximum.

Legal basis: your consent (Article 82 of the French Data Protection Act, implementing the ePrivacy Directive). Declining these trackers has no effect on your browsing. Your choice, whether acceptance or refusal, is stored for 6 months, after which you will be asked again.

Withdrawing your consent: at any time, via the “Cookie settings” link at the bottom of every page, which reopens the banner. You can also delete cookies from your browser settings.

We do not use advertising cookies and do not resell audience data. Browsing data collected through these cookies is processed by HubSpot, including, where applicable, in the United States (see “International Data Transfers”).