Privacy Policy
1. Introduction and Types of Data Collected
VGM GROUP, a company registered in France under SIREN number 982 066 474, with registered office at 9 RUE DES COLONNES 75002 PARIS ("we", "our", or "us"), operating under the Direct Booking brand, respects your privacy and is committed to protecting your personal data.
This privacy policy explains how we collect, use, disclose, and protect your information when you use our website creation, hosting, and management services under the Direct Booking brand.
We collect the following types of data:
- Contact information (name, email address, phone number, postal address)
- Billing and payment information (credit card details, billing address)
- Content from your existing website (text, images, design, structure) to create your new site
- Domain information (for domain registration and management)
- Platform usage data (IP address, browser type, pages visited, time spent)
- Communications you exchange with us
2. Data Usage, Storage, and Protection
We use your data to:
- Provide, maintain, and improve our services
- Create your new website based on an existing site
- Process payments and manage your account
- Communicate with you about your service, including notifying you of new sites created
- Send you technical information, updates, and security alerts
- Respond to your requests and provide customer support
- Detect, prevent, and resolve technical or security issues
- Comply with our legal obligations
Your data is stored on secure servers located in the European Union. We implement appropriate technical and organizational security measures to protect your data against loss, unauthorized access, disclosure, or alteration.
We retain your personal data for as long as necessary to provide our services and fulfill our legal obligations. If you cancel your account, we may retain certain information for legitimate purposes such as fraud prevention.
3. User Rights Under GDPR
In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you
- Right to rectification: You may request correction of inaccurate or incomplete data
- Right to erasure: You may request deletion of your data in certain circumstances
- Right to restriction of processing: You may request restriction of the processing of your data
- Right to data portability: You may request transfer of your data to yourself or a third party
- Right to object: You may object to the processing of your data in certain circumstances
- Right to withdraw consent: You may withdraw your consent to processing at any time
To exercise these rights, please contact us by email at [email protected] or by mail to our postal address listed at the end of this policy. We will respond to your request within one month.
You also have the right to file a complaint with a data protection authority if you believe that the processing of your personal data violates the GDPR.
4. Third-Party Services
We may use third-party services to:
- Process payments (online payment services)
- Analyze platform usage (web analytics tools)
- Host your website (hosting services)
- Register domain names (domain registrars)
- Send email communications (messaging services)
These third parties have access to certain of your data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for other purposes. All our service providers are committed to GDPR compliance.
We do not sell your personal data to third parties.
6. International Data Transfers
Your personal data may be transferred to and processed in countries other than the one where you reside. In particular, our servers are primarily located in the European Union, but some of our service providers may be based in other countries.
For data transfers outside the European Economic Area (EEA), we implement appropriate measures to ensure that your data receives an adequate level of protection in accordance with the GDPR, such as:
- Standard contractual clauses approved by the European Commission
- Data protection certifications (where applicable)
- Binding corporate rules for transfers within our group of companies
By using our services, you consent to the transfer of your data as described in this policy.
7. Children's Data Protection
Our services are not directed at persons under 16 years of age, and we do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately.
8. Changes to This Privacy Policy
We reserve the right to modify this privacy policy at any time. Changes will take effect upon publication on our website. We will notify you of significant changes by email or by a notification on our website. We encourage you to review this page regularly to stay informed of any changes.
9. Contact Information
If you have any questions about this privacy policy or our data protection practices, please contact us at:
VGM GROUP (operating under the Direct Booking brand)
9 RUE DES COLONNES
75002 PARIS
France
SIREN: 982 066 474
Email: [email protected]
Last updated: February 2026