Privacy policy
Last updated: 14 October 2026.
This policy covers two separate services: the website sept-tools.com and the Sept Tools Chantier mobile application, intended for the App Store and Google Play, where it is not yet available at the date of this update. Where a rule applies to only one of the two, this is stated.
Data controller
SEPT TOOLS
Simplified joint-stock company (SAS) with a share capital of 210,000.00 euros.
Roanne Trade and Companies Register 754 023 778, registered on 26 September 2012.
SIREN: 754 023 778. Intra-community VAT number: FR 15 754 023 778.
Registered office: 421 Route de la Bernarde, 42370 Saint-André-d'Apchon, France.
Industrial and commercial establishment: 10 bis Impasse Cotton, 42300 Roanne, France.
Represented by its president, Mr Mher Hovsepian.
Contact for any question about your data: privacy@sept-tools.com.
Sept Tools employs fewer than fifty people and its activity, the trading and assembly of professional construction equipment, relies neither on systematic profiling nor on large-scale processing of sensitive data. The company is therefore not required to appoint a data protection officer within the meaning of article 37 of the GDPR. Compliance is monitored by management, at the address above.
What we collect, and why
On the sept-tools.com website
Contact form and quote request. Name, company, email address, telephone number, and the content of your message. Legal basis: performance of pre-contractual measures taken at your request (article 6-1-b of the GDPR).
Audience measurement. Google Analytics 4 is loaded only after your explicit consent, given through the banner that appears on your first visit. As long as you have not accepted, no request is sent to Google. Legal basis: your consent (article 6-1-a), which can be withdrawn at any time.
Advertising (Google Ads). If you accept the "Advertising"
category of the banner, we measure the quote and demonstration requests that come from our
Google ads, without personalized advertising or retargeting. The cookies
_gcl_au and _gcl_aw link the request to the ad that
was clicked. Recipient: Google Ireland Limited. Retention period: according
to Google's policy. Legal basis: your consent (article 6-1-a), which can
be withdrawn at any time.
In the mobile application
Customer account. Email address, password (never stored in plain text), last name, first name, company, SIRET number where applicable, telephone number, country, delivery addresses. Legal basis: performance of the contract and pre-contractual measures (article 6-1-b).
Orders and quote requests. Lines requested, quantities, amounts where they apply, delivery address, notes you write. These items are recorded both on the website server and in our internal management system. Legal basis: performance of the contract (article 6-1-b), and accounting obligations (article 6-1-c) for invoices only.
Notifications. A technical identifier specific to your installation, provided by Apple or Google, allows us to send you notifications. It does not identify you by name. The application only asks for this permission when it needs it, and refusing it does not prevent any other function. Legal basis: your consent (article 6-1-a), revocable in your phone settings.
Camera and photo library. Used only when you choose to illustrate a quote request with a photo of your jobsite. Images are sent only if you confirm the sending, and they are never read in the background. Legal basis: pre-contractual measures at your request (article 6-1-b).
Telemetry of controlled machines. If, and only if, you use the control function of a Sept Tools machine, the application records the operating data of the session: durations, speeds, consumption of consumables, machine events. This function is preceded by an explicit consent screen, separate from account creation, which you can refuse without losing access to the rest of the application. Legal basis: your consent (article 6-1-a). You can withdraw it at any time in the application (Account, then Settings, Data and privacy section), or by writing to privacy@sept-tools.com.
Jobsite calculations. When you use the application's calculator, the calculation data is sent to our servers: the values entered and the result obtained. If you are logged in, the calculation is linked to your account. Without an account, it is recorded anonymously. Purpose: improving the calculator and measuring jobsite needs. Legal basis: our legitimate interest (article 6-1-f). These calculations are kept as long as your account exists, then detached from your account when it is deleted.
Wear feedback. The wear measurement of a consumable that you enter in the application is sent to our servers without any action on your part as long as you are logged in: as soon as it is recorded, and replayed when the application is opened if the sending did not succeed. It is linked to your account. If you are not logged in, it stays on your phone. Purpose: improving our estimates of consumable service life. Legal basis: our legitimate interest (article 6-1-f), as for jobsite calculations. This feedback is kept as long as your account exists, then kept without your name when it is deleted.
Data kept on your phone. The application keeps on your phone your favourites, the history of your control sessions, your machine fleet, your monitoring criteria, wear feedback not yet sent and pending quote requests, photo included. This data stays on the device as long as you do not send it. The execution record of a control session, however, is sent to our servers after your consent. Data kept on the phone is erased by the account deletion done in the application, or by uninstalling the application.
Deleting your account. In the application: Account tab, then My profile, then Delete my account. Without the application: the Account deletion page. From the application, the account (email address, password, name, company, SIRET, telephone number, country, consents) and the phone data are erased immediately. Through the page, the request is processed by hand within one month at most, after verification of your identity by a reply to the account address, then the same deletion is carried out; the message received is deleted once the request has been processed. Orders and quote requests recorded on the application server and linked to your account are anonymised (no more email, address or notes; what remains is the number, the lines, the payment method and the purchase order number). The following are anonymised in our management software, within one month at most: web customer account, orders and quote requests linked to your account, address linked to control sessions. Your email address stays in our register of deletion requests for the time of this processing, then the register line keeps only a proof without address (identifier, date of the request, date of processing). For accounts validated before 14 October 2026, your address may remain in the validation history of your web customer account (traceability log of our management software). Orders placed without an account are not covered: for them, write to privacy@sept-tools.com. Jobsite calculations and wear feedback are kept without your name. The execution records of control sessions are kept with the machine serial number, without your name or your address. Invoices and the customer accounting record they are attached to stay 10 years in our management software, under accounting obligations.
What the application does not collect. No geolocation, no access to your contacts, your calendar, your files, your microphone, or your browsing history. No data is sold, rented or passed to data brokers, and no targeted advertising is displayed.
Retention periods
| Data | Period |
|---|---|
| Commercial enquiries and unconverted contacts | 3 years from the last interaction |
| Quotes issued and not converted | 3 years from the last interaction |
| Customer account | As long as the account exists; you can delete it at any time |
| Invoices and the customer accounting record they are attached to | 10 years in our management software, under accounting and tax obligations |
| Orders and quote requests placed, after account deletion | Anonymised immediately on the application server if you delete from the application; anonymised in our management software, within one month at most. Only orders linked to your account are covered: for an order placed without an account, write to privacy@sept-tools.com |
| Jobsite calculations | Linked to your account as long as it exists, then kept without your name |
| Wear feedback | Linked to your account as long as it exists, then kept without your name |
| Records of control sessions | Period being defined; we will update this page. Kept with the machine serial number, without your name or your address, after account deletion |
| Register of deletion requests | Email address: for the time of processing, one month at most. Afterwards, the register line keeps only the account identifier, the date of the request and the date of processing, as proof |
| Validation history of the web customer account (traceability log of our management software) | For accounts validated before 14 October 2026, the email address may remain there: this log is kept 10 years |
| Browsing data and audience measurement | 13 months maximum |
| Telemetry of controlled machines | Period being defined; we will update this page |
Telemetry is subject to a particular rule, and we state it clearly rather than burying it in a table. These measurements make up the wear and performance history of your machines: their value lies precisely in their depth, a comparison between two sessions several years apart remaining useful to estimate the real service life of a consumable and to process a warranty claim. They are therefore kept without your name after your account is deleted. Their retention period is not yet set: it is being defined and we will update this page. Withdrawal of consent remains possible at any time and without justification.
Who has access to your data
Your data is accessible only to the Sept Tools sales, administrative and technical teams who need it, and to our technical service providers, strictly within the scope of their assignment:
- OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (Lille Métropole Trade and Companies Register 424 761 419): hosting of the website, the application and the management system. The servers are located in France.
- Apple and Google: distribution of the application and delivery of notifications, according to their own policies.
- Expo (650 Industries, Inc.), United States: delivery of application updates and allocation of technical notification identifiers. At each launch, the application queries this service to find out whether an update is available; this request transmits the installed version and technical characteristics of the device, never your identity or the content of your account. If you accept notifications, a technical identifier specific to your installation is also issued by this service.
- Google Ireland Limited: audience measurement of the website, and only if you have consented to it.
Transfers outside the European Union. The hosting of the website, the application and the management system is provided in France, and your account, order and machine usage data do not leave the Union. Three services may however give rise to a transfer: Apple and Google for the distribution of the application and the delivery of notifications, and Expo for updates, within the limits described above. These transfers are governed by the European Commission's standard contractual clauses.
Security
Exchanges between your browser or your phone and our servers are encrypted (HTTPS). Passwords are stored as cryptographic hashes and are never readable, including by our teams. The application's authentication tokens are kept in the secure vault of your phone's operating system. Internal access uses individual named accounts and is limited to those who need to know.
Your rights
You have the right of access (article 15), rectification (article 16), erasure (article 17), restriction of processing (article 18), objection (article 21), portability of your data (article 20), the right not to be subject to an automated individual decision (article 22), and the right to withdraw your consent at any time where the processing is based on it.
To exercise them, write to privacy@sept-tools.com stating your request. We reply within one month, extendable by two months for complex requests, in which case we will inform you. A copy of an identity document may be requested if there is reasonable doubt about your identity, and only in that case.
Deleting your account. You can do so in the application or from the Account deletion page, or request the deletion of your account and associated data at this same address. Invoices and the customer accounting record they are attached to are kept 10 years, as the law requires, which no request can shorten. Orders and quote requests placed are anonymised.
Cookies
The website uses only two categories of cookies. Strictly necessary cookies ensure its operation and the storing of your choice on consent; they do not require your agreement. Audience measurement cookies are set only after your explicit acceptance, and you can go back on this choice at any time from the banner available in the footer. The mobile application, for its part, uses no cookie and no advertising tracker: it keeps locally only what makes it work (see "Data kept on your phone").
Complaint
If you consider that the processing of your data constitutes a breach of the GDPR, you can lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07: cnil.fr.
Changes to this policy
This policy may change with our services. The date of last update appears at the top of the page. Any substantial change to the purposes or retention periods will be notified to you in the application or by email before it takes effect.