Your data, explained clearly
Oh Miaou is still a pilot project. The controller’s complete legal identity and postal address must be added before commercial launch.
1. Who is responsible for your data?
The Oh Miaou project lead is currently the data controller. For any question, request or withdrawal of consent, email bonjour@ohmiaou.com. No data protection officer has been appointed at this stage.
2. What data do we collect?
- Play survey: your cat’s age group, living environment, household size, play preferences, frustrations, buying habits, recent spending range, pilot interest, discovery channel and optional comments.
- Contact choices: your email only when you ask for the study summary or launch news, together with the date and scope of your consent.
- Attribution: limited campaign parameters such as source, medium and campaign, used to understand how people found the survey.
- Interest list: email, consent choices, referral code and referral count.
- Technical data: session, security and browser information needed to operate and protect the service.
No payment card details are requested by the survey or interest list.
3. Why do we use it?
- To analyse aggregated needs before launch and improve the pilot, based on Oh Miaou’s legitimate interest in testing the project.
- To send the study summary or launch information when you have explicitly consented.
- To prevent abuse, keep the site secure and respond to your requests.
Your answers do not create an order, reservation or payment. Personal data is not sold.
4. How long do we keep it?
- Survey responses: no longer than 18 months after the study closes, unless you request earlier deletion.
- Study-summary email: until the summary is sent or you withdraw consent.
- Marketing consent: until withdrawal; limited evidence of the choice may be kept where necessary to demonstrate compliance.
- Security logs, if enabled: only for a proportionate incident-analysis period, with a target maximum of 12 months.
5. Who can access it?
Access is limited to the project lead and the technical providers strictly needed for hosting, databases, authentication, analytics and transactional email. Any transfer outside the European Economic Area must rely on a recognised GDPR safeguard.
6. Analytics and local storage
The site may use configured audience measurement and advertising-conversion tools to understand visits and completed surveys. Campaign attribution may also be kept temporarily in your browser’s session storage so it is not lost between the landing page and survey. Browser controls let you clear local storage and cookies.
The functional ohmiaou_locale cookie keeps your explicit French or English choice for twelve months. It is not used for advertising or profiling.
7. Your rights
Depending on the processing, you may request access, correction, deletion, portability or restriction, object to processing based on legitimate interests, and withdraw consent at any time. Contact bonjour@ohmiaou.com. We normally reply within one month.
You may also complain to the French data protection authority, the CNIL.
8. Changes and security
Access is authenticated, passwords are not stored in plain text and data should be encrypted in transit. This notice will be completed as the pilot becomes a commercial service, and material changes will be announced before they take effect.