Privacy &
cookies.
What this website processes, why, for how long, and how to exercise your rights.
Scope
This policy explains how personal data is processed through this website. It is designed to meet the EU General Data Protection Regulation (GDPR), which sets the highest common standard, and the equivalent laws that may apply depending on where you are, such as the UK GDPR, Lebanese Law No. 81/2018, the UAE Personal Data Protection Law and applicable US state privacy laws. Where a local law grants you additional rights, those rights apply.
Controller
The controller is [Full name or company name], [Postal address]. Contact for any privacy matter: thecorpreneur@gmail.com. No data protection officer has been appointed, as none is required for this processing.
Data processed, purposes and legal bases
Enquiries (Book a call, network requests, expert applications, reports from Roast my startup and the Legal Readiness Level): the details you enter, such as your name, email, company and context. Purpose: answering your request and assessing whether we can act. Legal basis: steps taken at your request prior to a possible engagement (GDPR art. 6(1)(b)) and our legitimate interest in answering enquiries (art. 6(1)(f)). Providing these details is optional, but without them we cannot respond.
How enquiries are sent: these forms do not store your data on our servers. On submission, your own email application opens with the message pre-filled; nothing is transmitted until you press send in that application. The message is then received in our mailbox.
AI tools (coLex, Roast my startup, Legal Readiness Level memo): the text and answers you enter are transmitted to an AI service solely to generate the response displayed on screen. We do not store these inputs. Do not enter confidential, sensitive or third-party personal data. Outputs are automated, general in nature and produce no legal or similarly significant effect on you (no automated decision-making within the meaning of GDPR art. 22). Legal basis: your request to use the tool (art. 6(1)(b)) and our legitimate interest in providing it (art. 6(1)(f)).
Technical data: our hosting provider processes connection data (such as IP address, browser type and request logs) to deliver the pages and secure the service. Legal basis: legitimate interest in operating a secure website (art. 6(1)(f)).
News content: headlines and videos shown on the homepage are retrieved by our server from public news feeds. No personal data about you is sent to those publishers for this purpose.
Recipients and processors
Data is accessible only to the persons handling your request at Corpreneur and to the following service providers, acting as processors or independent controllers for their own services: our hosting and AI platform (Lovable (lovable.dev) [confirm the hosting company's legal name, address and telephone]), which routes AI requests to the underlying model provider (Google); your email provider when you choose to send a request; Google (Gmail, Calendar, Meet) for our correspondence and meetings; and YouTube (Google) for the embedded news videos.
We do not sell personal data and do not use it for advertising or profiling.
International transfers
Some providers process data in other countries, in particular the United States. Cross-border transfers rely on the safeguards required by applicable law, such as adequacy decisions (including the EU-US Data Privacy Framework for certified providers) or standard contractual clauses.
Retention
Enquiries: up to 3 years after our last contact if no engagement follows. Where an engagement follows, data is kept for the period required by professional record-keeping and limitation rules.
AI tool inputs: not stored by us. Technical logs: retained by the host for a limited period for security purposes.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and and, where local law provides for it, to give instructions regarding your data after your death. To exercise them, write to thecorpreneur@gmail.com. We respond within one month; we may ask for proof of identity where there is reasonable doubt.
If you consider that your rights have not been respected, you may lodge a complaint with the data protection authority of your country of residence or work (for example the CNIL in France or the ICO in the United Kingdom).
Security
Access to enquiries is restricted to the persons handling them, and accounts are protected by strong authentication. No transmission over the internet is entirely secure; please use the channels above for initial contact only.
Minors
This website is intended for founders and professionals. It is not directed at minors under the age of digital consent in their country (16 in most of the EU), and we do not knowingly process their data.
Confidentiality before engagement
Please do not send confidential or privileged information before a written engagement is in place. Information received before then may not benefit from professional secrecy.
Changes
This policy may be updated to reflect changes to the website or the law. The date of the latest version appears below.
Last updated 13 November 2026. Questions: thecorpreneur@gmail.com