Nuvocare SASU, trading as TheRework, takes your privacy seriously. This policy explains what personal information we collect through www.therework.us, why we collect it, who we share it with, how long we keep it and what rights you can exercise. In short: we collect what you send us through the contact form, we use it to reply to you, and we do not sell or share it.
Last updated: 26 August 2026
Who we are
- Organization
- Nuvocare SASU, trading as TheRework
- Registered office
- 36 rue Boussingault, 75013 Paris, France
- Registration
- Paris Trade and Companies Register (RCS) 952 222 438
- Privacy contact
- hello@therework.us
We are responsible for the personal information in our custody, including information handled by the service providers we work with. Any privacy question or request can be sent to hello@therework.us.
Information we collect
We only collect what we need in order to assess your project and reply to you. No account is required to browse the site, and we collect nothing from you beyond what is listed here.
| Category | Information concerned | Source |
|---|---|---|
| Identifiers and professional information | Name, work email address, website URL, company name, industry, biggest bottleneck, tools and CRM in use, budget range, timeline, project notes | Provided by you through the contact form |
| Commercial correspondence | The content of emails and exchanges relating to your inquiry | Provided by you |
| Internet activity | IP address, date and time of the request, pages viewed, browser and operating system type, referring site | Collected automatically in the hosting provider's logs |
| Coarse geolocation | ISO country code derived from your IP address (for example "US"), not retained | Computed by the hosting provider, used only to point you to the right regional site |
We collect no sensitive personal information — Social Security or government ID numbers, financial account numbers, precise geolocation, health, biometric, racial, religious or sexual-orientation data. Please do not send any through the form.
The site performs no profiling and no automated decision-making that produces legal or similarly significant effects.
The form contains a hidden "honeypot" field used to detect bots. It is never visible to, or filled in by, a human visitor and collects no personal information.
How we use it, and how long we keep it
| Purpose | Basis | Retention period |
|---|---|---|
| Responding to your audit or project inquiry and corresponding with you | Steps taken at your request before entering into a contract | 3 years from your last contact |
| Business development and follow-up with prospects | Our legitimate interest in growing our business | 3 years from your last contact |
| Delivering our services and managing the client relationship | Performance of the contract | Duration of the engagement, then archived for evidential purposes |
| Site security, abuse prevention and technical diagnostics | Our legitimate interest in keeping the site working and safe | Technical logs: 30 days maximum |
| Remembering the regional site you chose | Necessary to deliver the service you asked for | 12 months (geo_stay cookie) |
| Meeting our accounting and tax obligations | Legal obligation | As required by law, up to 10 years for accounting records |
We will not use your information for a materially different purpose without telling you first. Once these periods expire, information is deleted or irreversibly anonymized.
Your privacy rights
If you are a resident of California, Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah or Virginia — or of any state with a comprehensive privacy law — you have the rights below. We extend them to every visitor, wherever you live, because it is simpler and fairer.
- Know and access — find out what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to, and receive a copy in a portable format.
- Delete — ask us to delete the personal information we hold about you, within the limits of our legal retention obligations.
- Correct — have inaccurate personal information corrected.
- Opt out of sale, sharing and targeted advertising — we do none of these, so there is nothing to opt out of.
- Limit the use of sensitive personal information — we collect none.
- Non-discrimination — we will never deny you service, charge you a different price or give you a lesser experience for exercising a privacy right.
To exercise any of these rights, write to hello@therework.us stating what you are asking for. We confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days where the request is complex — we will tell you if we need the extension. We may ask you to verify your identity before acting.
An authorized agent may submit a request on your behalf with written permission signed by you. If we deny a request, you may appeal by replying to our decision; we will respond to the appeal within 45 days and tell you how to contact your state attorney general if you disagree.
If you are in the EEA or the United Kingdom
Nuvocare SASU is established in France, so the GDPR applies to our processing. The legal bases are those shown in the table above: steps taken before entering into a contract, our legitimate interest in business development and site security, and our legal obligations.
In addition to the rights listed above, the GDPR gives you the right to restrict processing, to object at any time to processing based on our legitimate interest — including any business development contact — and to set instructions on what happens to your data after your death.
Transfers to the United States are covered either by the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, where the provider is certified under it, or by the European Commission's standard contractual clauses. You can request a copy of the safeguards in place.
You may lodge a complaint with your national supervisory authority or, for our company, with the French CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
Security
The site is served exclusively over HTTPS: anything you type into the contact form is encrypted in transit.
We apply organizational and technical safeguards proportionate to the sensitivity of the information: access limited to authorized people only, strong authentication on our tools, minimization of what we collect, and no payment data stored on the site.
No system is infallible. Should a breach affect your personal information, we will notify you and the relevant authorities as required by applicable law.
Children's privacy
This site is a business-to-business site and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, write to hello@therework.us and we will delete it.
Changes to this policy
This policy may be updated to reflect legal, technical or organizational changes. The version that applies is the one published on this page, and its last-updated date appears at the top of the document.
Where a change is significant, we will inform the individuals concerned by any appropriate means.