Terms of Sale

Applicable to the services offered on scanrgpd.fr.

Last updated: 20 August 2026 · Version 1.3

Article 1. Purpose and acceptance

These Terms of Sale (hereinafter the “Terms”) govern all contractual relations between:

• The publisher of ScanRGPD.fr, a sole trader registered under SIRET number 103 442 430 00015, intra-Community VAT number FR52103442430, whose full details appear in the legal notices, hereinafter referred to as “the Provider” or “ScanRGPD.fr”
• And any natural or legal person who orders a service on the scanrgpd.fr website, hereinafter referred to as “the Client”

Validation of an order by the Client entails full and unreserved acceptance of these Terms, which prevail over any other document.

Article 2. Description of the service

ScanRGPD.fr provides a technical service supporting GDPR compliance, named “Operational GDPR Audit”. The service comprises:

• An automated technical scan of the website specified by the Client, covering in particular: consent banners and cookies (including dark patterns), third-party trackers, collection forms, security headers (HTTPS, HSTS, CSP), legal pages (privacy policy, legal notices under the LCEN, the French law on confidence in the digital economy), Art. 7 GDPR compliance (newsletters), and detection of transfers outside the European Union
• A contextual analysis based on the information supplied by the Client (business context form)
• A personalised audit report in PDF format (between 20 and 30 pages, the length being adapted to the complexity of your activity)
• A pre-filled privacy policy template
• A pre-filled legal notices template
• A pre-filled records of processing register in Excel format
• A prioritised action plan in 3 phases (day 7, day 30, day 90)

Article 3. Prices

3.1. Single audit

The price of a single audit is €490 incl. VAT (i.e. €408.33 excl. VAT plus €81.67 VAT at the rate of 20%). One-off payment, no subscription.

3.2. Agency Partner Pack

The Agency Pack is available in two payment options (annual and monthly) and at two levels (Agency Pack and Agency Pro Pack):

Prices are inclusive of all taxes (French VAT at 20% included). Subscription conditions (commitment, renewal, termination, upgrade) are set out in Article 4.4.

3.3. DPO Partner Pack

The DPO Partner Pack is offered at €2,990 incl. VAT / year(single annual payment), as part of a pilot programme including 3 free audits during the first 30 days. The subscription conditions of Articles 4.4.2 to 4.4.6 apply mutatis mutandis.

3.4. Common provisions

The Provider is subject to French VAT at the standard rate of 20%. Intra-Community VAT number: FR52103442430. VAT will appear on the invoice in accordance with the requirements of Article 242 nonies A of Annex II to the French General Tax Code.

Prices may be amended at any time, but the version in force at the time of the order or renewal always applies.

3.5. Mode Expert analysis

The Mode Expert analysis is the audit of a site protected by an anti-bot mechanism that the automated scan cannot get through. It is performed manually by the ScanRGPD team and offered at €990 incl. VAT (i.e. €825 excl. VAT plus €165 VAT at the rate of 20%). One-off payment. Its specific delivery and withdrawal terms are set out in Articles 5 and 7.5.

Article 4. Ordering and payment

4.1. Order

The Client places an order on the scanrgpd.fr website by completing the online form and proceeding to payment.

4.2. Payment

Payment is made exclusively by bank card through the secure Stripe platform. No banking data is stored by ScanRGPD.fr.

Payment is due immediately upon ordering. The service is performed after receipt of payment in full.

4.3. Invoicing

An invoice complying with French accounting obligations is sent to the Client by email within 24 hours of the order.

4.4. Agency Partner Pack subscription

These provisions apply specifically to Clients who have subscribed to an Agency Pack or Agency Pro Pack (hereinafter “the Subscription”).

4.4.1. Available options

The Provider offers two Agency Partner Pack subscription options:

• Annual option: single payment at the start of the period, renewable annually;
• Monthly option: monthly direct debit, renewable monthly, with a minimum commitment of twelve (12) months (see 4.4.2).

Each option exists at two levels: Agency Pack and Agency Pro Pack (white label). Prices and inclusions are detailed on the agency partners page.

4.4.2. Minimum commitment (monthly option)

The monthly option entails a minimum commitment of twelve (12) consecutive months from the subscription date. No termination is possible before the end of that commitment period.

Termination takes effect from the thirteenth (13th) month, upon simple written request sent to contact@scanrgpd.fr, with thirty (30) days' notice.

In the event of early termination for reasons attributable to the Client (payment default, unilateral withdrawal, etc.), the remaining monthly instalments up to the end of the twelve (12) months are due and invoiced in a single payment.

The annual option is not concerned by this commitment clause: termination takes effect at the end of the current annual period, without notice.

4.4.3. Automatic renewal

The Subscription is renewed automatically at each due date (monthly or annual depending on the option), unless terminated beforehand in accordance with Article 4.4.2 or 4.4.5.

The included audit quota is reset at each annual renewal: audits not used during a period are not carried over to the following period.

4.4.4. Upgrade and proration calculation

The Client may, at any time and independently from their personal area, upgrade their Agency Pack to the Agency Pro Pack (hereinafter “the Upgrade”).

The Upgrade is processed immediately:

• The benefits of the Agency Pro Pack (quota raised to fifty (50) annual audits, white-label mode, reduced overflow rate, priority support) are activated without delay;
• Audits already used during the period are retained and counted against the new Pro Pack quota;
• No immediate charge is made on the day of the Upgrade.

Invoicing of the Upgrade is calculated on a pro rata temporis basis:

• Stripe automatically calculates the credit corresponding to the unused portion of the previous option (Agency Pack) from the Upgrade date to the end of the current period;
• Stripe calculates the amount due corresponding to the remaining portion of the period, invoiced at the Agency Pro Pack rate;
• The difference (amount due − credit) is added to the next renewal invoice, as a separate, duly labelled proration item.

Subsequent invoicing is at the standard Agency Pro Pack rate (monthly or annual depending on the option retained).

Immediately after the Upgrade, the Client receives an official confirmation email summarising the benefits activated and the detailed invoicing mechanism. That email constitutes an acknowledgement of receipt.

The online Upgrade requires explicit confirmation by the Client via a checkbox acknowledging that they have read the proration mechanism described in this article. Failing that, the Upgrade cannot be completed.

4.4.5. Termination

The Subscription is terminated by email to contact@scanrgpd.fr, stating the email address of the account concerned.

Effects of termination:

• Annual option: termination takes effect at the end of the current annual period. No refund is due for the period already started.
• Monthly option: subject to compliance with the twelve (12) month commitment period (see 4.4.2), termination takes effect at the end of the current monthly cycle, after thirty (30) days' notice.

Upon termination, access to the partner programme (launching audits, co-branding, dashboard) is deactivated. Audits already delivered remain accessible from the client area for twelve (12) months in accordance with Article 6.

4.4.6. Amendment by the Provider

The Provider reserves the right to amend the prices and content of the Agency Pack options at any time. Any amendment is notified to the Client by email with a minimum of thirty (30) days' notice and applies only from the next renewal. The Client retains the right to terminate free of charge in the event of disagreement with the new pricing (subject to the commitment period under 4.4.2 where applicable).

Article 5. Delivery times

The Provider undertakes to deliver the standard audit (automated scan and PDF report) in less than 10 minutes from receipt of payment and of the business context form completed by the Client. As the process is fully automated, delivery is in practice near-instant.

Should a technical incident exceptionally extend this time beyond 24 hours due solely to the Provider, the Client may request a partial credit note equal to 10% of the price paid.

Business days are Monday to Friday, excluding French public holidays.

This time limit is suspended by operation of law in the event of force majeure or unavailability of a technical subcontractor within the meaning of Article 12, for the entire duration of the event. No late-delivery penalty is due in respect of such a period.

The Mode Expert analysis (Article 3.5), which requires manual handling by the ScanRGPD team, is delivered within 24 hours of receipt of payment.

Article 6. Delivery arrangements

The deliverables are sent to the Client by email to the address provided when ordering, and are also downloadable from the client area of the website for 12 months from delivery.

After that period, the deliverables are automatically deleted from the servers. It is the Client's responsibility to save them locally.

Article 7. Right of withdrawal

7.1. Principle (B2C)

In accordance with Article L.221-18 of the French Consumer Code (Code de la consommation), a consumer Client (a natural person acting for non-professional purposes) has a period of 14 days from the conclusion of the contract to exercise their right of withdrawal, without having to give reasons.

7.2. Exception: immediate performance of the service with express waiver

In accordance with Article L.221-28 1° of the French Consumer Code, the right of withdrawal cannot be exercised for contracts for the supply of services fully performed before the end of the withdrawal period, where performance began after the Client's prior express agreement and express waiver of their right of withdrawal.

During the ordering process, the Client must tick a box by which they:

• request immediate performance of the service (the Provider begins the scan and the generation of the report as soon as payment is confirmed),
• and expressly waive their 14-day right of withdrawal, in full knowledge that this waiver causes them to lose that right as from delivery of the service.

If this box is not ticked, the order cannot be validated. A Client wishing to retain their right of withdrawal must contact the Provider at contact@scanrgpd.fr to arrange a deferred order.

7.3. B2B

For orders placed by professionals (companies, sole traders, associations acting for professional purposes), the right of withdrawal does not apply, in accordance with the provisions of the French Consumer Code (Art. L.221-3).

7.4. Procedure

To exercise their right of withdrawal before performance begins, the Client must notify their decision by email to contact@scanrgpd.fr. The refund is made within 14 days of notification.

7.5. Special case: Mode Expert analysis

The Mode Expert analysis (Article 3.5) is performed manually by the ScanRGPD team as soon as the order is received. At the time of payment, the Client expressly requests immediate performance of this service and waives their 14-day right of withdrawal within the meaning of Article L.221-28 1° of the French Consumer Code, in full knowledge that this waiver causes them to lose that right as from delivery of the report.

This service is aimed at professionals acting in the course of their activity, for whom the right of withdrawal does not apply (Article 7.3). Subject to the statutory warranties in Article 8, no refund is due once the report has been delivered.

Article 8. Statutory warranties

The Client benefits from the statutory warranty of conformity provided for in Articles L.217-3 et seq. of the French Consumer Code, and from the warranty against hidden defects under Articles 1641 et seq. of the French Civil Code (Code civil).

If the deliverables do not correspond to the description of the service (report of fewer than 20 pages, absence of one of the 4 announced deliverables, corrupted file that cannot be replaced), the Client may request a full refund within 30 days of delivery.

Article 9. Client's obligations

The Client undertakes to:

• Provide accurate and complete information when ordering and in the context form
• Not use the service for fraudulent or unlawful purposes
• Submit only websites that they own or for which they hold written authorisation
• Have the deliverables validated by a qualified adviser before any publication or official use
• Adapt the templates provided to their actual situation before any publication

Article 10. Intellectual property

The deliverables provided (report, document templates) become the full and entire property of the Client after payment in full. The Client may use, amend and publish them freely in the course of their activity.

Conversely, the audit methodology, the scanning engine, the AI prompts and the structure of the templates remain the exclusive property of the Provider. Any reproduction of these elements for commercial purposes is prohibited.

Article 11. Limitation of liability

11.1. Nature of the service

The ScanRGPD.fr service is an automated technical service supporting compliance. The analyses, reports and documents produced constitute a first-level operational analysis intended to help the Client structure their approach to compliance with the GDPR and with the French Data Protection Act (loi Informatique et Libertés).

11.2. What the deliverables do not constitute

The deliverables provided by ScanRGPD.fr in no case constitute:

• Personalised legal advice within the meaning of French law no. 71-1130 of 31 December 1971
• A guarantee of full compliance with the GDPR or with the French Data Protection Act
• A guarantee that no penalty will be imposed by the CNIL, the French data protection authority, or by any other supervisory authority
• A certificate of expertise issued by a lawyer or by a certified Data Protection Officer
• Legal representation in the event of an inspection or litigation
• A data protection impact assessment (DPIA) within the meaning of Article 35 of the GDPR

11.3. The Client's exclusive obligations

The Client is solely responsible:

• For having the documents provided validated by a competent adviser (lawyer specialising in data protection law, certified DPO, chartered accountant) before any publication on their website or official use
• For adapting the documents to their actual situation, their actual processors and their concrete processing operations
• For the effective implementation of the recommendations
• For continued compliance with their legal obligations regarding data protection
• For the truthfulness and completeness of the information provided in the context form

11.4. Limitation of the Provider's liability

The Provider may not be held liable:

• For any direct or indirect loss resulting from use of the deliverables without prior validation by a qualified adviser
• For any penalty imposed by a supervisory authority (the CNIL or any other)
• For any loss of business, loss of turnover, loss of clientele or loss of reputation
• For any error of interpretation or application of the recommendations by the Client
• For any regulatory change occurring after delivery of the audit
• For inaccuracies in the deliverables resulting from incomplete or erroneous information provided by the Client

11.5. Liability cap

Should the Provider's liability be engaged on any ground whatsoever, and save in cases of gross or wilful misconduct, its amount shall be capped at the amount paid by the Client for the order or the subscription period concerned (€490 for a single audit; the amount of the current annual or monthly period for Pack subscriptions).

11.6. Complex cases, express recommendation

For the following situations, the Provider expressly recommends engaging a lawyer specialising in data protection law or a certified DPO, in addition to or in place of the service:

• Processing of health data (medical and paramedical practices, health platforms)
• Processing of sensitive financial data
• Complex international transfers outside the Data Privacy Framework
• Ongoing litigation with the CNIL or with a client
• Organisations with more than 50 employees (the ScanRGPD audit remains usable as an entry-level audit, technical scan plus 4 basic templates, but does not on its own constitute full GDPR compliance: support from a DPO or lawyer is required in addition)
• Large-scale processing (within the meaning of Article 35 of the GDPR)
• Automated profiling with automated individual decision-making
• Systematic monitoring of employees
• Activities involving large volumes of minors' data

Article 12. Force majeure and service continuity

12.1. Force majeure

The Provider's liability may not be engaged in the event of force majeure within the meaning of Article 1218 of the French Civil Code, including in particular: infrastructure failure of technical subcontractors (Vercel, Supabase, Anthropic, Stripe, Resend), cyberattack, exceptional climatic event, government decision, armed conflict, regulatory suspension or restriction of access to a third-party service, in particular under export controls on dual-use goods and technologies or on grounds of national security.

12.2. Dependence on an artificial intelligence subcontractor

The Client is expressly informed that the generation of audit reports relies on an artificial intelligence model operated by a third-party subcontractor (Anthropic), accessed remotely via an application programming interface (API). The ability to produce the deliverables therefore depends on the availability of that third-party service, which the Provider does not control.

In the event of suspension, restriction or withdrawal of access to that model, in particular on regulatory, export control or national security grounds, the Provider may, at its option and without its liability being engaged:

• (i) use an equivalent substitute model (reversibility clause), in order to ensure continuity of service;
• (ii) temporarily suspend delivery, the time limit under Article 5 then being suspended for the entire duration of the event;
• (iii) in the event of lasting impossibility, refund orders paid for and not yet fulfilled.

Such an event is treated as a case of force majeure and gives rise to no compensation beyond the refund of sums paid in respect of deliverables not supplied.

Article 13. Personal data

The processing of the Client's personal data is governed by the Privacy Policy, which forms an integral part of these Terms.

Article 14. Mediation and dispute resolution

14.1. Prior complaint

In the event of a dispute, the Client is invited to contact the Provider by email at contact@scanrgpd.fr in order to seek an amicable solution. The Provider undertakes to reply within 7 business days.

14.2. Consumer mediation (B2C)

In accordance with Article L.612-1 of the French Consumer Code, a consumer Client may, if amicable resolution fails, use the following mediation service free of charge:

• Mediator: CNPM - Médiation de la consommation
• Address: 27 avenue de la Libération, 42400 Saint-Chamond, France
• Website: cnpm-mediation-consommation.eu

A consumer Client may also use the European online dispute resolution platform.

14.3. Competent jurisdiction

Failing amicable resolution or resolution through mediation, any dispute shall be submitted to the competent French courts in accordance with ordinary rules of law.

Article 15. Governing law

These Terms are governed by French law.

Article 16. Amendments to the Terms

The Provider reserves the right to amend these Terms at any time. The applicable Terms are those in force at the time of the order. The date of the last update is shown at the top of the document.

Article 17. Acceptance

By ticking the box “I have read and accept the Terms of Sale” during the ordering process, the Client acknowledges having read, understood and accepted these Terms of Sale in their entirety, and in particular Article 11 concerning the limitation of liability.

Article 18. Language and prevailing version

These Terms are published in French and in English. The English version is a translation provided for the convenience of English-speaking Clients.

The contract is governed by French law and subject to the French courts. Accordingly, in the event of any discrepancy, ambiguity or difference of interpretation between the two versions, the French version, available at scanrgpd.fr/cgv, alone prevails.

References to French legislation (Code de la consommation, Code civil, Code général des impôts) are given in their original wording, since no official English translation of those texts is authoritative.