Privacy policy

The processing of personal data is governed by the European Union General Data Protection Regulation (GDPR).

Personal data is any data by which you can be personally identified.

We collect personal data either automatically by means of cookies or through your voluntary submission, in particular when you fill in forms or send an email. The data collected therefore relates to:

• contact details (email, telephone number),
• identity (surname, first name, date of birth, company, SIREN or SIRET number, IP address used, connection, usage and location data)
• billing (address, VAT number, bank details).

This information is necessary to contact you, in particular via the Newsletter or the chat, to process your order, to open a customer account and to display relevant advertising.

Only authorised persons may have access to personal data: staff of the various departments of 3 Goats (sales, technical, customer service, marketing), the company’s subcontractors and payment services.

The retention period for personal data is determined by the applicable statutory retention period (for example, commercial and tax retention periods). Once these periods have expired, the corresponding data will be systematically and regularly erased, provided that it is no longer necessary for the performance or initiation of the contract and/or there is no longer a legitimate interest in retaining it.

Personal data may be shared with third-party companies in the following cases:

• when you use payment services. To provide these services, we work with third-party banking and financial companies;
• when you publish reviews or publicly accessible information;
• when we use service providers to provide user support, advertising and payment services, or to carry out the technical development and maintenance of the website. These providers have limited access to your data, within the scope of performing these services, and are contractually obliged to use it in accordance with the provisions of the applicable personal data protection regulations.

The applicable data protection regulations grant you rights (rights to information and to intervene) with respect to the data controller, which we set out below:

• Right of access to information (art. 15 GDPR)
• Right to rectification (art. 16 GDPR)
• Right to erasure or “right to be forgotten” (art. 15 GDPR)
• Right to restriction of processing (art. 18 GDPR)
• Right to information (art. 19 GDPR)
• Right to data portability (art. 20 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)
• Right to lodge a complaint

You can exercise these rights by sending an email to the following address:

contact@3-goats.com

You also have the right to lodge a complaint with the CNIL (the French data protection authority, Commission Nationale de l’Informatique et des Libertés):

https://www.cnil.fr/fr/plaintes

Our 3 Goats application, accessible via this page, accesses data from Google Ads services via Google’s APIs. Access to this data is essential to provide the core features of our service.

Data collected via the Google Ads API:

• Advertising campaign performance data (clicks, impressions, costs, conversions).
• Information on the configuration of campaigns, ad groups and keywords.
• Audience and performance statistics.

The use of information received from Google APIs will comply with the Google API Services User Data Policy, including the “Limited Use” requirements. This data is used exclusively to provide and improve our application’s reporting and analysis features for the user and is not transferred or sold to third parties.

Our 3 Goats application, accessible via this page, also connects to data from Meta (Facebook) services via the Meta APIs. Access to this data is essential to provide you with the analysis features for your Facebook Ads advertising accounts.

Data collected via the Meta APIs: By connecting your Meta account, you authorise us to access the following data, through the requested permissions (ads_management, ads_read, business_management, pages_show_list, pages_read_engagement):

• Advertising performance data (ads_read): Clicks, impressions, costs, conversions and other metrics for your campaigns, ad sets and ads.
• Account and ad configuration (business_management, ads_management): The list of your ad accounts and the configuration details of your campaigns (e.g. targeting, budgets) to enable detailed reporting.
• List of your Facebook Pages (pages_show_list): We use this permission to allow you to select the Facebook Page associated with your ad account, a step required to configure the report.
• Basic Page information (pages_read_engagement): We retrieve the name and profile picture of the Page you select in order to display them in the header of your report. This allows you to confirm visually which account is being analysed.

The use of information received from Meta APIs will comply with the Meta Platform Policy. This data is used exclusively to provide and improve our application’s reporting and analysis features for the user. It is neither sold nor transferred to third parties for purposes other than providing the service.

We are committed to protecting the security of our users’ data, in particular sensitive data from Google and Meta (Facebook) services. We implement the following technical and organisational security measures to prevent unauthorised access to, alteration, disclosure or destruction of your information:

• Encryption: All data transferred between our application and Google’s servers, as well as between our application and your browser, is encrypted using TLS (Transport Layer Security) technology. Sensitive data stored on our servers is also encrypted at rest.
• Access control: Access to user data is strictly limited to authorised 3 Goats personnel who need it to operate, develop or improve our services. These employees are subject to strict confidentiality obligations.
• Secure infrastructure: Our services are hosted on secure cloud infrastructure that benefits from our providers’ state-of-the-art protections (for example, firewalls, security patch management and network monitoring).
• Data minimisation: We only request access to the data strictly necessary for our application to function, in accordance with the permissions requested on Google’s OAuth consent screen.
• Security reviews: We regularly review our data collection, storage and processing practices to guard against any unauthorised access to our systems.

Retention period: We retain your personal data, as well as data imported via the Google and Meta APIs, only for as long as is strictly necessary to provide our services. Data is retained for as long as your 3 Goats account remains active.

If your account is deleted, or after a prolonged period of inactivity of 24 months, we undertake to securely delete or anonymise all of your personal data and associated data from our systems within a maximum of 60 days.

Data deletion process: You retain full control over your data and may request its deletion at any time. To delete your account and all associated data (including your Google and Meta data), please send us a request by email to contact@3-goats.com.

Once your request has been verified, we will irreversibly delete all of your information from our production servers within 30 days, subject to our legal obligations (for example, the retention of billing data).

Cookies are small text files stored on your computer or smartphone when you visit a website. On your first visit, a banner lets you accept everything, refuse everything or choose by category. Refusing is as easy as accepting, and no measurement or advertising cookie is set without your consent.

Your choice is kept for 6 months, after which you are asked again. If your browser sends the Global Privacy Control signal, we treat it as a refusal.

We use the following categories:

• Necessary cookies: the 3g_consent cookie remembers your choice (6 months). It is essential and used for nothing else.
• Audience measurement: Google Analytics 4, provided by Google Ireland Limited as our processor. The _ga and _ga_* cookies (13 months at most) count visits, page views and conversions (audit requests, newsletter signups, meeting bookings). Google Analytics 4 does not log IP addresses and we keep this data for 2 months. Google’s policy: https://policies.google.com/privacy
• Advertising: no advertising cookie is set at present. If we add any (for example the Meta Pixel, _fbp cookie for 3 months), they will only be set with your consent and will be listed here.

Google consent mode: without your consent, Google Analytics sets no cookie and only receives anonymous signals (type of page, time, consent or refusal), with no persistent identifier. Google uses them to estimate overall traffic. The same applies to events sent by our servers, such as the end of an audit: without your consent, they are not linked to any identifier.

Changing your mind: you can change your choice at any time with the “Cookie settings” link at the bottom of every page, or at https://www.3-goats.com/en#cookies. If you withdraw your consent, the measurement cookies are deleted.

You can also block cookies in your browser:

• Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09