This site uses cookies for analytics and to improve your experience. By clicking Accept, you consent to our use of cookies. Learn more in our privacy policy.

New: try HappenBoard live in your browser.Start the demo

Get HappenBoard

Privacy Policy

Updated on 17 October 2026

Table of contents

Introduction

This privacy policy is written in accordance with French law no. 78-17 of 6 January 1978 (known as the “Loi informatique et libertés” or “LIL”) and with the General Data Protection Regulation (“GDPR”) no. 2016/679.

This policy has two separate parts:

  • Part 1 covers the processing of personal data carried out by SEOPress as data controller in running its website happenboard.com.
  • Part 2 covers the processing of personal data carried out in connection with the HappenBoard Pro solution (WordPress plugin). It distinguishes processing carried out as data controller (subscription management, customer account, etc.) from processing carried out as data processor (corrective maintenance). It also explains what data the plugin processes on your own website.

The cookies and other trackers used on happenboard.com are described in our cookie policy.

PART 1 – Data processing – Running the website

The activities of the happenboard.com website involve the processing of personal data.

1.1 Purpose of this policy

This policy informs you of the characteristics of this processing and of your rights over your personal data.

1.2 Data controller

The data controller is SEOPress, represented by its managing director (gérant), Mr. Benjamin Denis.

The data controller’s address is: 52, rue Isidore Salles, 40110 Morcenx-la-Nouvelle, France.

The contact email address is: [email protected]

1.3 Data subjects

This policy is for the users of the website. It concerns:

  • people who subscribe to the newsletter, from the website, when placing an order or from the setup wizard of the HappenBoard plugin
  • customers of our online store
  • people to whom we have entrusted technical services (hosting provider, website security)
  • people who write content for the website or are mentioned in it
  • people who join our affiliate program
  • people who contact us through the website’s contact form
  • customers who use the online chat (pre-sales)

1.4 Purposes of processing

The processing is for running the website. It makes possible:

  • managing newsletter subscriptions for customers and subscribers
  • managing customers’ subscription orders on the online store
  • the technical management of the website (hosting, website security, spam protection of forms)
  • managing the editorial content of the website
  • managing our affiliate program
  • handling information requests sent through the contact form
  • managing the online chat
  • loyalty and marketing actions (for example, emails with discounts and information about HappenBoard)

The legal bases of processing are as follows:

  • for managing newsletter subscriptions, the legal basis is the subscriber’s consent or, for existing customers, the company’s legitimate interest in informing its customers of its news and offers
  • for managing orders on the online store, the legal basis is the order placed by these customers (the contract)
  • for the technical management of the website (hosting, website security, spam protection of forms), the legal basis is the company’s legitimate interest in ensuring that its website works properly and remains secure and available
  • for managing the editorial content of the website, the legal basis is the consent of the people whose information is published
  • for managing our affiliate program, the legal basis is the consent of the affiliates
  • for handling information requests sent through the contact form, the legal basis is legitimate interest (enabling online communication) or pre-contractual measures (quotes requested by the person)
  • for managing the online chat, the legal basis is the company’s legitimate interest in answering its visitors’ requests for information
  • for loyalty and marketing actions, the legal basis is consent or, for professionals in their professional capacity or for existing customers and similar products or services, the company’s legitimate interest in promoting its offers

1.6 Data retention periods

Personal data is kept no longer than necessary for the purposes for which it is recorded (data minimization principle).

The maximum retention periods are as follows:

  • for managing newsletter subscriptions: data is kept for a maximum of 3 years from its collection or from the person’s last contact (for example, a click on a link in an email)
  • for managing orders on the online store: 5 years from the end of the contract
  • for the technical management of the website (hosting, website security): 12 months for IP addresses and connection logs
  • for managing the editorial content of the website: 5 years from publication
  • for managing our affiliate program: 5 years from the end of the affiliation
  • for handling information requests sent through the contact form: 1 year from the request
  • for managing the online chat: 1 year from the request
  • for loyalty and marketing actions: 2 years from the collection of the data, the person’s last contact or last click

1.7 Data processed

The data controller processes the following categories of data:

  • Identification data (last name, first name, email address, postal address and, for business purchases, company name and intra-community VAT number, depending on the purpose)
  • Connection data (IP addresses, logs, device identifiers, login identifiers, timestamps, etc.)
  • Transaction data (order details, purchase history, payment methods)

1.8 Mandatory or optional nature of data collection

The data collected is mandatory to achieve the purposes of processing.

For online orders, the data collected is required to conclude and perform the order (contract).

1.9 Sources of data

The data is provided directly by the data subject. This is also the case when they subscribe to the newsletter from the setup wizard of the HappenBoard plugin: their website then sends us only the email address they typed, and they receive an email to confirm their subscription.

1.10 Recipients of data

Except where necessary to provide our services, we do not share your data with third parties.

However, please note that we use external service providers for certain activities:

  • our hosting provider;
  • our customer support provider (ticketing and chat on the website);
  • our email sending provider (mailing);
  • our spam protection services for the contact form (Akismet, by Automattic, and Cloudflare Turnstile);
  • our online payment service provider (Stripe).

These providers may access some of your data strictly to the extent necessary and only to carry out the task entrusted to them by SEOPress.

1.11 Security measures

The data controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

The data controller takes steps to ensure that any natural person acting under the authority of the data controller or of the processor who has access to personal data does not process it except on instructions from the data controller, unless required to do so.

1.12 Transfers outside the European Union

SEOPress may transfer personal data outside the European Union, in particular to the United States, when using certain technical service providers.

These transfers are governed by:

  • the EU-US Data Privacy Framework, for certified providers;
  • or standard contractual clauses adopted by the European Commission;
  • or any other appropriate safeguard provided for by article 46 of the GDPR.

1.13 Automated decision-making

The processing does not involve fully automated decision-making.

1.14 Data subjects’ rights

Data subjects may set guidelines for the storage, erasure and communication of their personal data after their death. These guidelines may be general or specific.

Data subjects also have the right to access, object to, rectify, restrict and erase their personal data and, under certain conditions, the right to data portability. Data subjects may withdraw their consent at any time when consent is the legal basis of the processing.

You may object at any time to the use of your data for direct marketing purposes, including profiling related to such marketing. To unsubscribe from our newsletter, click the unsubscribe link in any email or contact us directly.

The request must state the data subject’s last name, first name and email or postal address, and be signed and accompanied by a valid proof of identity.

Data subjects may exercise these rights by contacting: SEOPress – Mr. Benjamin Denis – email: [email protected]

1.15 Complaints

Data subjects have the right to lodge a complaint with the supervisory authority (in France, the CNIL).

PART 2 – Data processing – HappenBoard Pro solution

This part is for SEOPress customers.

It covers the processing of personal data carried out in connection with subscriptions to the HappenBoard Pro solution.

This processing is of two different kinds:

  • Some personal data is processed by SEOPress as data controller (for example to manage Pro subscriptions or support tickets);
  • Some personal data may also be processed by SEOPress as data processor, or sub-processor (for the corrective maintenance of the HappenBoard Pro solution), on behalf of the customer.

This part is therefore divided into two sub-parts that cover each kind of processing in turn. A third sub-part explains what data the plugin processes on your own website, to which SEOPress has no access.

2.1 SEOPress as data controller

Under the GDPR, a data controller is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

In connection with HappenBoard Pro subscriptions, SEOPress carries out some processing of data as data controller.

2.1.1 Identity of the data controller

The data controller is:

SEOPress, SARL with a share capital of 1,000 euros
Registered office: 52, rue Isidore Salles, 40110 Morcenx-la-Nouvelle, France
Registered with the Mont-de-Marsan Trade and Companies Register (RCS) under number 843 629 643
The managing director (gérant) of SEOPress is Mr. Benjamin Denis.

2.1.2 Data collected

Data you give us directly

When you subscribe to Pro

Last name, first name, email address, billing address, company name and intra-community VAT number if you enter them, the last 4 digits and expiry date of your bank card. Your full card details are entered with our payment provider Stripe and are not stored on our website.

You can update your data directly from your customer account.

Once you have subscribed, you receive an email with your username (your email address) and a link to set the password of your customer account.

In your customer account

You can update your personal data directly from your customer account.

Your customer account is also where:

  • you find your HappenBoard Pro license key and the list of sites where it is activated
  • you manage your subscription, its automatic renewal and your payment methods
  • you can join our affiliate program and refer customers to HappenBoard
  • you can contact us and open a support ticket, either through a standard form or through a conversational assistant (chatbot), as described below

Use of artificial intelligence in your customer account

As part of the support service, you can chat from your customer account with a conversational assistant (chatbot) powered by artificial intelligence.

When you use this chatbot, your messages are processed by a third-party AI solution to give you automated assistance. The data exchanged (the content of your messages and information about your request) is sent to a service provider so that the service can work.

Please note that you are talking to an artificial intelligence and not to a human. You can choose at any time to use the standard contact form to talk directly with our support team.

Data sent by the HappenBoard Pro plugin

When you activate your license key on a site, and then during the daily license check and update checks, the HappenBoard Pro plugin installed on that site sends our website: the license key, the product ID, an installation ID created for that site, the site’s address without its protocol (for example example.com) and the installed version of HappenBoard Pro. Updates are downloaded from our website. Without an active license key, nothing is sent.

Data we receive from third parties

As part of our affiliate program, when you subscribe to HappenBoard Pro we may learn that you came from the website of a SEOPress partner.

2.1.3 Use of data

We use your data to:

  • manage your HappenBoard Pro subscription
  • manage your customer account
  • manage the activations of your license key and provide updates
  • manage your activity as an affiliate, if applicable
  • handle your support tickets
  • manage our customer relationship

2.1.4 Data retention

SEOPress keeps personal data no longer than necessary for the purposes for which it is recorded.

We keep your data as long as your subscription is active, and then for 5 years. You can also send us a written request to delete the data of your account.

Exchanges about support tickets are kept for 1 year.

Your data as an affiliate is kept as long as you remain an affiliate, and then for 5 years.

We collect and process your personal data only when the processing has a legal basis.

This legal basis is the performance of the contract (the subscription).

For joining the affiliate program, the legal basis is consent.

2.1.6 Recipients of data

Except where necessary to provide our services, we do not share your data with third parties.

However, please note that we use external service providers to deliver some of our services:

  • our hosting provider;
  • our customer support provider (ticketing);
  • our artificial intelligence provider for the conversational assistant (chatbot);
  • our email sending provider (onboarding and communications);
  • our online payment service provider (Stripe).

These providers may access some of your data strictly to the extent necessary and only to carry out the task entrusted to them by SEOPress.

2.1.7 Security measures

SEOPress implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

SEOPress takes steps to ensure that any natural person acting under its authority or under the authority of the processor who has access to personal data does not process it except on instructions from SEOPress, unless required to do so.

We implement security measures to protect your data, such as the HTTPS protocol. We regularly monitor our systems to detect possible vulnerabilities and attacks. However, this does not allow us to guarantee the complete security of your data.

2.1.8 Transfers outside the European Union

SEOPress may transfer personal data outside the European Union, in particular to the United States, when using certain technical service providers.

These transfers are governed by:

  • the EU-US Data Privacy Framework, for certified providers;
  • or standard contractual clauses adopted by the European Commission;
  • or any other appropriate safeguard provided for by article 46 of the GDPR.

2.1.9 Automated decision-making

SEOPress does not carry out automated decision-making.

2.1.10 Data subjects’ rights

You may set guidelines for the storage, erasure and communication of your personal data after your death. These guidelines may be general or specific.

You also have the right to access, object to, rectify, restrict and erase your personal data and, under certain conditions, the right to data portability. You may withdraw your consent at any time when consent is the legal basis of the processing.

The request must state your last name, first name and email or postal address, and be signed and accompanied by a valid proof of identity.

You may exercise these rights by contacting: SEOPress – Mr. Benjamin Denis – email: [email protected]

2.1.11 Complaints

You have the right to lodge a complaint with the supervisory authority (in France, the CNIL).

2.2 SEOPress as data processor

2.2.1 Definition of a data processor

Under the GDPR, a data processor is the person who processes personal data on behalf of a data controller.

In some cases, the processor in turn subcontracts all or part of the processing to a sub-processor.

2.2.2 Role of SEOPress

SEOPress processes data in connection with the corrective maintenance of the HappenBoard Pro solution.

When SEOPress carries out this processing, it acts:

  • either as a processor, directly on your behalf. The website SEOPress works on is yours, and you are then the data controller;
  • or as a sub-processor. The website SEOPress works on belongs to your own client. In this case, your client is usually the data controller for the website’s activities, and you act as their processor.

In both cases, you are the data controller with respect to SEOPress (SEOPress has no direct relationship with your own client).

As a result, SEOPress may only act on the personal data stored on the website where the HappenBoard Pro solution under corrective maintenance is installed on your instructions alone.

2.2.3 Processing instructions

Subject matter and purpose of the processing

The subject matter and purpose of the processing is the corrective maintenance of the HappenBoard Pro solution, that is, fixing any bugs on a site that follow the configuration of the solution.

The intervention may also consist of help with setting up a feature.

Please note that during this maintenance, SEOPress does not act on the personal data stored on the website. At most, data may be viewed if necessary.

Your processing instructions are as follows:

  • Create a temporary administrator account on the Customer’s website, with an email address dedicated to the intervention
  • Log in to the website’s back office or to the server
  • Make the necessary fixes to the HappenBoard plugin
  • Help with setting up the plugin
  • Inform the Customer when the intervention is finished

Important: when the temporary administrator account is created, its password is shared through an internal note in SEOPress’s ticketing tool. At the end of the intervention, the Customer undertakes to delete the administrator account created for the maintenance. For its part, SEOPress deletes the access data from its systems as soon as the ticket is closed.

Nature of the operations: occasional viewing of data, without modification or extraction.

Categories of data potentially concerned: depending on the configuration of the Customer’s website, SEOPress may view identification data (names, emails), connection data or content data stored in the website’s database, including the data HappenBoard stores there (attendees, registrations, bookings, ticket orders).

Categories of data subjects: users and administrators of the Customer’s website, as well as the attendees and buyers recorded by HappenBoard on that website.

2.2.4 Data retention

Exchanges about support tickets are kept for 1 year.

Personal data used to access the website (or the server) is kept only for as long as the maintenance requires.

At the end of the intervention, SEOPress deletes all access data (usernames, passwords, access URLs) from its systems. It makes no copy of the personal data on the Customer’s website.

2.2.5 Customer’s obligations

The Customer, as data controller with respect to SEOPress, undertakes to comply with all its obligations under the personal data protection regulations, including, when acting as a processor, the instructions given by its end client, and to pass them on to SEOPress without delay.

In particular, the Customer undertakes to delete the temporary administrator account created by SEOPress on its website (or its client’s website) as soon as the maintenance ticket is closed. This deletion is the sole responsibility of the Customer.

The Customer undertakes to indemnify SEOPress against any judgment and any financial consequence it may face as a result of the Customer’s failure to meet its obligations.

2.2.6 SEOPress’s obligations

SEOPress undertakes to comply with all its obligations under the personal data protection regulations.

These obligations are described below:

Following processing instructions

SEOPress, as processor, undertakes to strictly follow your written instructions regarding the use of personal data. In particular, SEOPress refrains from any processing of personal data that is not expressly requested in a written instruction.

Use of sub-processors

SEOPress uses no sub-processor without your express authorization.

When SEOPress uses another processor to carry out specific processing activities on behalf of the professional, the same data protection obligations as those set out here are imposed on that other processor by contract, in particular to provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures, so that the processing meets the requirements of the regulations and of this policy.

If that other processor fails to meet its data protection obligations, SEOPress remains fully liable to you for the performance of that processor’s obligations.

Duty to help and assist

Taking into account the nature of the processing, SEOPress helps you, through appropriate technical and organizational measures, to meet your obligation to respond to requests from data subjects exercising their rights under chapter III of the GDPR.

SEOPress helps you ensure compliance with the obligations set out in articles 32 to 36 of the GDPR, taking into account the nature of the processing and the information available to it.

SEOPress makes available to you all the information needed to demonstrate compliance with the obligations set out here.

Audit

At your own expense, you may carry out, or have carried out by any provider of your choice bound by professional secrecy, audits of SEOPress’s compliance with its personal data processing obligations while this agreement is in force. This audit right is limited to one audit per year.

You undertake to notify us in writing of any audit at least ten (10) calendar days in advance, stating the purpose of the audit, the name of the expert and the planned duration of the audit, which may not exceed 4 days.

The auditor must cause as little disruption as possible to SEOPress’s activities.

A copy of the audit report written by the auditor will be given to each party and discussed jointly.

If the audit confirms that SEOPress has failed to meet its obligations, SEOPress will bear the cost of the audit and implement, at its own expense, the necessary corrective measures within thirty (30) working days of receiving the audit report. Apart from this case, you bear all costs incurred for audits. If the failure is not corrected within that period, you may terminate your subscription for breach.

Duty to inform

SEOPress informs you as soon as possible, once it becomes aware of it, if in its opinion an instruction infringes the personal data protection regulations.

Confidentiality

SEOPress is bound by a duty of confidentiality and refrains from disclosing personal data to any third party, for free or for a fee, except as needed for the services.

SEOPress ensures that the people authorized to process the data have committed to confidentiality or are under an appropriate statutory obligation of confidentiality.

Notification of personal data breaches

SEOPress undertakes to notify you as soon as possible, once it becomes aware of it, of any breach or security flaw affecting personal data, and to give you the information you need to inform the supervisory authority and, where necessary, the data subjects.

Transfers of personal data outside the European Union

SEOPress may transfer personal data outside the European Union, in particular to the United States, when using certain technical service providers. These transfers are governed by:

  • the EU-US Data Privacy Framework, for certified providers;
  • or standard contractual clauses adopted by the European Commission;
  • or any other appropriate safeguard provided for by article 46 of the GDPR.

Security measures

SEOPress implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

SEOPress takes steps to ensure that any natural person acting under its authority or under the authority of the processor who has access to personal data does not process it except on instructions from SEOPress, unless required to do so.

Record of processing activities

SEOPress keeps the record of processing activities carried out as processor available to you and sends it on request.

2.2.7 Contact details

SEOPress – Mr. Benjamin Denis – email: [email protected]

2.3 Data processed by the plugin on your website

The HappenBoard and HappenBoard Pro plugins store in your website’s database the data that you and your visitors enter: for example attendees and their registrations, bookings, ticket orders and the answers to the custom fields of your forms. This data stays on your website. SEOPress has no access to it, except during a maintenance intervention carried out on your instructions (see 2.2). You are the data controller for this data.

The third-party services you choose to turn on in the plugin (for example Stripe, Google Calendar, Microsoft Outlook, Twilio for WhatsApp, Slack, Anthropic for the AI assistant, Open-Meteo, OpenStreetMap, Google Maps, Esri, Cloudflare Turnstile, Akismet or your own webhooks) receive their data directly from your website, with your own accounts and access keys when the service requires them. None of these services is contacted until you turn it on. The list of these services and of the data sent to each of them is in the “External services” section of each plugin’s readme.txt file.