Home › Policies › Confidentiality of your documents
Confidentiality of your documents
Version in force as of 4 septembre 2026.
The services sold on this site lead the Provider to see, handle or receive documents that belong to you. This page says what is done with them, for how long, and what is never done with them. It supplements the privacy policy, which deals with personal data within the meaning of the GDPR.
What is covered
- the files you send or open during a session;
- the contents of your screen during screen sharing or remote control;
- documents handed over in person, on a memory stick or by e-mail;
- anything about your internal organisation observed on that occasion (procedures, prices, client lists, management data).
Confidentiality undertaking
MUCHA JACEK undertakes not to disclose to any third party, in any form whatsoever, the content of the documents and information accessed in the course of a service. This undertaking is contractual, has the force of a clause of the terms and conditions of sale, and survives for five years after the end of the service.
- no client document is published, quoted or shown to another client, even anonymised, without prior written agreement;
- no client content is used as teaching material, as a sales example or as an illustration on this site;
- no document is uploaded to a third-party analysis, machine translation or artificial intelligence service;
- no client data is sold, rented or exchanged.
Where the files are kept
- files received are stored on an encrypted machine and in the Provider's professional mailbox;
- no public shared space is used;
- remote sessions are run by screen sharing: unless you expressly ask, no file is copied onto the Provider's machine;
- no session is recorded, in video or audio, unless you ask in writing.
Retention periods
| Item | Period | Then |
|---|---|---|
| Working files sent for the service | 90 days after the last session | Permanent deletion, including from the recycle bin |
| Deliverables produced for you (templates, cheat sheets) | 12 months | Deletion, unless you ask for them to be kept |
| Exchanged e-mails | 3 years | Deletion — commercial limitation period |
| Accounting records (invoices) | 10 years | Legal obligation, art. L. 123-22 of the French commercial code |
You can ask for any working file to be deleted early at any time: it is done within 7 working days and confirmed in writing. Only accounting records, which the law requires to be kept, cannot be deleted.
Sensitive data and anonymisation
If your files contain confidential data — client names, salaries, health data, trade secrets — say so before the session. The work is then done on an anonymised copy that you prepare, or on a test set provided by the Provider. There is no extra charge for this.
Subcontracting
No service is subcontracted. The Provider works alone, with no employee and no third-party contractor having access to your documents. Were that to change, your prior written agreement would be sought and this page updated before any work was done.
Incident
In the event of loss, theft or unauthorised access affecting your documents, you are informed in writing within 72 hours of the incident being discovered, with the nature of the material concerned and the steps taken. Notification to the CNIL is made where article 33 of the GDPR requires it.
Reciprocity
The Provider undertakes symmetrically not to pass you any document belonging to another client. Teaching material handed over in a session is either produced from your own files or written by the Provider.
Governing law
This undertaking is governed by French law. Responsible: MUCHA JACEK, a French sole trader (entrepreneur individuel) — SIREN 109 189 845, SIRET 109 189 845 00018, registered office 12 rue des Lilas, 60126 Longueil-Sainte-Marie, France.
This document is governed by French law. For any question: contact@jacekmucha.fr.