Experiment Protocol Code: TBN-PR-2026.041 · Rev. 4.2
ThemeBuildNet SaaS & Acquisition Laboratory
Home / Safety Protocols
Controlled Document · Read Before Experiment

Bioethics & Safety Protocol Checklist

This document governs how ThemeBuildNet handles your data, your engagement, your cookies, and your payments. Each protocol below is written as a checklist: tick your reading, keep it on file, and contact the lab officer whenever a clause needs clarification.

Document No.

TBN-LGL-2026.R4

Effective

12 Oct 2026

Jurisdiction

France · EU

PVT

Protocol 01 · Handling of Personal Data

Privacy Policy (GDPR)

Reg. (EU) 2016/679

Safety checklist — confirm each item

§ 1.1 — Data controller

ThemeBuildNet is the controller of the personal data described in this protocol. Our registered bench is 68 RUE GAMBETTA, 33000 BORDEAUX, FRANCE. All privacy correspondence is handled at [email protected], answered within 30 days.

§ 1.2 — Data we collect

(a) Identity and contact details you enter on the requisition voucher (name, company, email, telephone). (b) The content of your project brief and any files you send. (c) Billing records processed through our payment provider. (d) Technical logs: IP address, user agent, pages viewed, and consent preferences — collected only where you have accepted the relevant cookies.

§ 1.3 — Purposes and legal bases

We process your data to (i) respond to your requisition and prepare a scoped protocol — steps prior to a contract at your request (Art. 6(1)(b)); (ii) deliver the engagement and invoice it — performance of contract (Art. 6(1)(b)); (iii) secure our website and prevent abuse — legitimate interest (Art. 6(1)(f)); (iv) remember your cookie choice — consent (Art. 6(1)(a)); (v) meet French bookkeeping and tax obligations — legal obligation (Art. 6(1)(c)).

§ 1.4 — Recipients and transfers

Data is accessible only to ThemeBuildNet staff and vetted processors hosting within the European Union: our cloud infrastructure provider, our payment processor (Stripe), and our email provider. We do not sell, rent, or broker personal data. Any transfer outside the EEA relies on Standard Contractual Clauses or an adequacy decision.

§ 1.5 — Retention

Requisitions and briefs: 24 months from last contact. Contracts and invoices: 10 years (French commercial code). Technical logs: 12 months. Consent preference: stored in your browser until you clear it.

§ 1.6 — Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing, and you may withdraw consent at any time without affecting prior lawful processing. Write to [email protected] with the subject line “Data subject request”. You may also lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, paris.cnil.fr).

§ 1.7 — Security

Briefs travel over TLS 1.3. Records rest encrypted on EU-hosted infrastructure with role-based access, versioned backups, and quarterly credential rotation — controls aligned with ISO/IEC 27001. Any personal-data breach is assessed within 72 hours and notified to the CNIL where the law requires it.

TOS

Protocol 02 · Terms of Engagement

Terms of Service

French Law

Safety checklist — confirm each item

§ 2.1 — Parties and scope

These Terms govern every service provided by ThemeBuildNet, 68 RUE GAMBETTA, 33000 BORDEAUX, FRANCE ([email protected]) — including SaaS architecture, conversion-engineered portals, acquisition programs, lifecycle marketing, analytics work, and retainers. By countersigning a protocol or paying an invoice you accept these Terms; where a signed Statement of Work conflicts with this page, the Statement of Work prevails.

§ 2.2 — Quotes, acceptance, and scheduling

Protocols remain valid for 14 calendar days. Work begins on receipt of the mobilisation deposit and cleared funds. Turnaround estimates — 5 to 21 business days depending on the experiment — run from acceptance and are business-day targets rather than guarantees, except where a protocol states a fixed delivery date in writing.

§ 2.3 — Fees and payment

Fees are quoted in USD or EUR and exclude VAT where applicable. A 50% deposit mobilises the bench; the balance is due at read-out before final handover. Invoices are payable through our payment link or bank transfer within 14 days. Late payments accrue interest at three times the French statutory rate plus a €40 recovery fee. Tooling, hosting, stock media, and third-party licences are billed at cost when listed in the protocol.

§ 2.4 — Client obligations

You will provide accurate materials, timely feedback (within three business days of a review request), and lawful rights to any content you supply. Delays in feedback pause the turnaround clock proportionally. You are responsible for the claims you approve in published copy and for obtaining consents for any customer data you hand us.

§ 2.5 — Intellectual property

On full settlement, all worldwide rights in client-specific deliverables — source code, design files, copy, and campaign assets — transfer to you. ThemeBuildNet retains ownership of pre-existing frameworks, libraries, and internal tooling, licensed to you perpetually and royalty-free for use within the delivered work. We may showcase non-confidential results in our field notes unless you object in writing.

§ 2.6 — Warranties and liability

Deliverables are warranted against material defects for 30 days after acceptance; we will correct verified defects at no cost. Beyond that, services are provided “as is” without implied warranties of uninterrupted revenue or search ranking. To the fullest extent permitted by law, our aggregate liability is limited to the fees you paid for the engagement giving rise to the claim; we exclude liability for indirect or consequential losses, including lost profits. Nothing here limits liability for fraud or death/personal injury caused by negligence.

§ 2.7 — Confidentiality and termination

Each party keeps the other’s non-public information confidential for five years after disclosure. You may cancel a protocol in writing; completed work and reserved bench time remain payable as set out in the Refund Policy. We may suspend work after 14 days of unpaid invoices or for material breach, with written notice. Either party may terminate for material breach that remains uncured 15 days after notice.

§ 2.8 — Governing law

These Terms are governed by French law. Disputes are first addressed in good-faith negotiation for 30 days, then submitted to the competent courts of Bordeaux, without prejudice to mandatory consumer protections in your country of residence.

CKI

Protocol 03 · Browser Storage Handling

Cookie Policy

ePrivacy · Art. 5(3)

Safety checklist — confirm each item

§ 3.1 — What we store

Cookies and local storage are small records kept in your browser. ThemeBuildNet uses a minimal set: nothing advertising-related, no cross-site profiling, and no data sold to third parties.

Record Purpose Type Duration
cookie_accepted Remembers that you answered the consent banner. Necessary · local storage Until cleared
session Secures your session while browsing the site. Necessary · cookie 24 hours
_ga Aggregated, anonymised page-view counting to fix broken sheets. Analytics · first-party 13 months

§ 3.2 — Managing your preference

Necessary records run by default because the site cannot function without them. Analytics records load only after you accept. You can revoke at any time by clearing site data for themebuildnet.com in your browser — the banner reappears on your next visit and you may answer “Essential Only”. Major browsers also let you block or delete cookies globally under privacy settings.

§ 3.3 — Third parties

Embedded services — our location map and payment provider — may set their own records when you interact with them. Google’s map embed and Stripe’s checkout operate under their respective policies. We do not allow advertising networks to drop pixels on this site.

§ 3.4 — Updates and contact

We revise this policy whenever our tooling changes and re-date the document above. Questions about cookies go to [email protected], ThemeBuildNet, 68 RUE GAMBETTA, 33000 BORDEAUX, FRANCE.

RFD

Protocol 04 · Budget Recovery

Refund Policy

Milestones · Reversal rules

Safety checklist — confirm each item

§ 4.1 — How refunds are calculated

Protocols are milestone-based. Before bench work begins, your mobilisation deposit is returned in full less any third-party costs already committed on your behalf. After start, we refund the unused share of fees on a pro-rata basis: delivered milestones are charged at their protocol value, and reserved but unused bench time is released back to you.

§ 4.2 — Defective work

If a deliverable materially deviates from the countersigned protocol and we cannot correct it within a reasonable period, you may terminate that milestone and receive a refund of fees paid for it. This is your exclusive remedy for non-conforming work, without prejudice to mandatory statutory rights.

§ 4.3 — Cancellation by you

You may cancel at any time in writing to [email protected]. Work already completed is invoiced at protocol rates; unused prepaid amounts are returned. Retainers (such as the ARR Operations Retainer) may be stopped before the next 30-day cycle and are not charged for cycles not yet started.

§ 4.4 — Consumers and cooling-off

If you are a consumer contracting at distance under French law, you have a 14-day right of withdrawal. Where you ask us to begin work inside that window, you remain liable for services actually provided up to the moment of withdrawal, calculated proportionally to completion.

§ 4.5 — Payment failures and duplicate charges

If a payment fails, double-charges, or is captured in error through our payment link, we reverse it to the original method within 14 business days of verification. Keep your receipt or quote your sample ID so intake can trace the transaction.

§ 4.6 — How to request a refund

Email [email protected] with the subject “Refund request”, your sample or invoice reference, and the reason. Acknowledgement follows within two business hours; decisions are issued within five business days; approved amounts are returned to the original payment method within 14 days. ThemeBuildNet, 68 RUE GAMBETTA, 33000 BORDEAUX, FRANCE.

Certification Block · Countersignatures

GDPR Art. 13 Verified ISO/IEC 27001 Aligned EU 2016/679

Prepared by · Lab Officer

C. Okonkwo

Data Protection Desk

Countersigned · Managing Director

A. Rivière

ThemeBuildNet · Bordeaux

Audited · Quality Assurance

M. Lefèvre

Protocol Compliance · 12 Oct 2026
ThemeBuildNet · 68 RUE GAMBETTA, 33000 BORDEAUX, FRANCE [email protected] · 33608270004 Page 1 of 1 · TBN-LGL-2026.R4