Governance Matrix: Privacy, Terms, Cookies & Refunds

Data Controller

ScriptNestStudio

Cybersecurity services · France, EU

Registered Office

67205, 19 Rue du Général de Gaulle, Oberhausbergen, France

Correspondence

[email protected]

+33 650 009 388

Supervisory Authority

CNIL (France)

Right to lodge a complaint applies

01 Privacy Policy 02 Terms of Service 03 Cookie Policy 04 Refund Policy

Tile 01 · GDPR Art. 13

Privacy Policy

01

ScriptNestStudio, with registered office at 67205, 19 Rue du Général de Gaulle, Oberhausbergen, France, is the data controller for personal data collected through scriptneststudio.com, our intake form, and our direct correspondence channels including [email protected].

Data we collect. We process identification and contact details (name, email address, telephone number, organisation), the content of the brief you send us, contractual and billing records, and limited technical logs (IP address, user agent, timestamp) required to secure the website. We do not collect special-category data and we do not purchase data from brokers.

Purposes and legal bases. Enquiry handling and proposal drafting are processed on the basis of our pre-contractual measures (Art. 6(1)(b) GDPR); delivery of contracted security services and invoice retention rest on contractual and legal obligation (Art. 6(1)(c)); website security and fraud prevention rely on our legitimate interest (Art. 6(1)(f)); newsletter or briefing opt-ins rely on consent (Art. 6(1)(a)) and may be withdrawn at any time.

Retention. Enquiry records are kept for 24 months from last contact. Contracts, invoices, and audit evidence are retained for the statutory French commercial limitation period of 5 years. Incident-handling records are kept for 3 years after case closure unless a regulator requires longer.

Recipients and transfers. Data is accessed only by ScriptNestStudio responders bound by confidentiality, and by our hosting, email, and payment providers acting as processors under Art. 28 agreements. Hosting and backups remain within the European Economic Area; where a processor operates outside the EEA, transfers are protected by Standard Contractual Clauses.

Your rights. You may request access, rectification, erasure, restriction, portability, and objection, and may withdraw consent without affecting prior processing. Write to [email protected] from a verified address; we reply within 30 days. You may also complain to the CNIL, 3 place de Fontenoy, 75007 Paris, France.

Tile 02 · Contractual Framework

Terms of Service

02

These terms govern every engagement between the client and ScriptNestStudio, 67205, 19 Rue du Général de Gaulle, Oberhausbergen, France, for security monitoring, cloud access control, compliance, testing, and advisory services, and supersede prior discussions unless a signed statement of work states otherwise.

Scope and changes. The scope, deliverables, fee, and turnaround of each engagement are fixed in a written proposal or statement of work. Any addition — extra systems, additional test windows, or expedited delivery — is quoted separately and only becomes binding once confirmed in writing by both parties.

Client obligations. The client warrants that it has authorisation to test and monitor the systems placed in scope, provides timely access to environments and personnel, and discloses known constraints such as production sensitivity, change freezes, or regulated data. Delays in access extend delivery dates day for day.

Fees and payment. Fixed fees are invoiced 50% on acceptance and 50% on delivery unless otherwise agreed; retainers are invoiced monthly in advance. Invoices are payable within 14 days through our secure Stripe ledger. Late amounts accrue statutory French interest plus a fixed recovery indemnity. Work may be suspended after 10 days of non-payment.

Confidentiality and testing conduct. Each party keeps the other's confidential information secret for 5 years. Testing is performed strictly within the agreed window and rules of engagement; ScriptNestStudio will halt and immediately report any unexpected exposure of live customer data rather than exploit it.

Liability and IP. On full payment, client-specific deliverables, reports, and code are assigned to the client; pre-existing tooling, playbooks, and detection rules remain with ScriptNestStudio. Aggregate liability is limited to the fees paid for the affected engagement, excluding fraud, wilful misconduct, or breach of confidentiality. Nothing limits liability that cannot lawfully be limited under French law.

Term and governing law. Either party may terminate for material breach with 15 days' written notice; accrued fees remain due. These terms are governed by French law, and disputes are first escalated to [email protected] for good-faith resolution before any court of competent jurisdiction.

Tile 03 · ePrivacy Directive

Cookie Policy

03

ScriptNestStudio uses a deliberately small set of cookies and similar storage on scriptneststudio.com. This policy explains what is placed on your device, why, and how to control it. It should be read alongside our Privacy Policy.

Strictly necessary storage. Our cookie banner records your choice in your browser's local storage under the key scriptnest_cookie_consent so the notice does not reappear on every visit. A session cookie protects the contact form against cross-site request forgery. These cannot be switched off without breaking the site and are exempt from consent under the ePrivacy Directive.

Functional and audience measurement. If you consent, we may store an anonymised measurement identifier to understand which service pages are read most often. We do not run behavioural advertising, we do not share identifiers with third-party networks, and we do not use cross-site tracking.

Third-party content. The contact page embeds a Google Maps frame (maps.google.com) which may set its own cookies once loaded; the map is loaded lazily. Payment pages are served by Stripe under its own cookie policy when you choose to settle an invoice.

Managing cookies. You can accept or decline via the banner, delete stored values at any time through your browser settings, or block cookies entirely — in which case the banner will reappear and parts of the site may not remember your preferences. Withdrawing consent has no effect on the lawfulness of prior processing.

Contact. Questions about this Cookie Policy can be sent to [email protected], ScriptNestStudio, 67205, 19 Rue du Général de Gaulle, Oberhausbergen, France.

Tile 04 · Settlement Rules

Refund Policy

04

ScriptNestStudio sells senior security time and fixed-scope deliverables. Because that time is reserved exclusively for your engagement once scheduled, the rules below set out when fees are refundable and when they are not. They apply to all invoices settled through our Stripe ledger.

Cooling-off period. Consumers resident in the EU may withdraw from a distance contract within 14 days of acceptance without giving a reason. If work has already started at your express request, a prorated amount for services delivered up to the point of withdrawal is deducted from the refund.

Before work begins. Cancel before the kickoff date stated in your proposal and any deposit or advance payment is refunded in full within 14 calendar days to the original payment method.

After work begins. Once responders, testers, or compliance officers have been scheduled, payments are non-refundable for the portion of scope already performed. If you terminate mid-engagement, you are invoiced pro rata for completed work and reserved capacity, and any surplus prepaid amount is returned within 14 days.

Non-performance by ScriptNestStudio. If we miss a contractual deliverable date without a client-side cause and the failure remains unremedied for 15 days after written notice, you may terminate the affected engagement and receive a refund of the fees paid for the undelivered portion.

Retainers and duplicate charges. Monthly retainers may be cancelled before the next billing date and are not prorated mid-cycle. Billing errors or duplicate charges are corrected and refunded in full within 5 business days of confirmation.

How to request a refund. Email [email protected] from the address used on the contract with your invoice reference and reason. We acknowledge within 2 business hours and decide within 5 business days. Approved refunds are issued to the original payment method; statutory rights under French consumer law are unaffected.

Written enquiries

Need a clause clarified before you sign?

Send the article number and your question to our team. Governance enquiries are answered by the same responders who deliver the work — usually within two business hours, Monday to Friday.

[email protected] → Open the Intake Desk

Invoices

Settle an invoice securely

All engagements are invoiced in EUR or USD through our encrypted Stripe ledger. Refund requests reference the same invoice number.

Pay Online →