WallNetSec Field Journal — The Perimeter Report
Sector: Paris 15e
WallNetSec Cyber Guard

Statutory Booklet — Vol. VII

The Fine Print,
set in plain type.

Four chapters covering how WallNetSec handles your data, what an engagement obligates both sides to do, which cookies sit on this site, and when money comes back. Written to be read, not skipped.

WallNetSec

99 RUE DE LOURMEL

75015 PARIS, FRANCE

[email protected]

Last revised — 01 October 2026

Chapter I

Privacy Policy

WallNetSec (“we,” “us”) collects only what is needed to answer you, deliver contracted security work, and keep our books straight. Under the General Data Protection Regulation (EU) 2016/679, the data controller is WallNetSec, 99 RUE DE LOURMEL, 75015 PARIS, FRANCE. Privacy questions go to [email protected].

What we collect. When you write to the desk, we receive your name, email address, organisation, telephone number, and whatever details you place in the questionnaire. On engagement, we additionally process billing records, signed statements of work, and technical logs required to perform the security services you purchased.

Why we keep it. We process on the legal bases of contract performance (Article 6(1)(b)), legitimate interest in defending our systems and answering business enquiries (Article 6(1)(f)), legal obligation for tax and accounting records (Article 6(1)(c)), and consent where you tick a box (Article 6(1)(a)). We never sell, rent, or broker personal data.

Retention. Enquiry correspondence is held for 24 months, then purged. Contract and invoice records are retained for the ten years required by French commercial law. Incident-response forensic artefacts are deleted 90 days after the after-action report unless you ask us to archive them in writing.

Your rights. You may request access, rectification, erasure, restriction, portability, or object to processing by writing to [email protected]. You may also lodge a complaint with the CNIL (3 Place de Fontenoy, 75007 Paris). We answer verified requests within 30 days.

Transfers. Hosting and monitoring tooling are operated within the European Union. If a subprocessor outside the EEA is ever engaged, transfers rely on Standard Contractual Clauses and are listed in the engagement appendix before work begins.

Chapter II

Terms of Service

These terms govern every engagement between WallNetSec, 99 RUE DE LOURMEL, 75015 PARIS, FRANCE, and the client named in the applicable statement of work (SOW). By signing an SOW, paying an invoice, or instructing us to begin work, you accept them in full.

Scope and change control. Work begins on receipt of a countersigned SOW and a 50% mobilisation deposit. Anything outside the written scope — additional systems, extra test windows, expedited turnaround — is quoted separately and only proceeds after written approval.

Client duties. You will nominate a decision-maker, provide accurate system documentation, and secure lawful authorisation for us to test the agreed targets. Penetration tests without written authorisation from the asset owner are refused, no exceptions.

Confidentiality. Findings, vulnerabilities, and internal documents exchanged during an engagement are confidential and may not be published without mutual written consent, save for disclosure to your auditors, insurers, or regulators under equivalent secrecy.

Intellectual property. On full payment, all worldwide rights in client-specific deliverables — reports, playbooks, hardened configurations, custom tooling — transfer to you. WallNetSec retains ownership of its pre-existing frameworks, scanners, and methods, which are licensed to you perpetually for internal use.

Warranty and liability. Services are performed with professional care. Reports reflect the systems tested at the time of testing; we do not warrant that a passing result guarantees against future attack. To the extent permitted by law, either party’s aggregate liability is capped at the fees paid under the SOW in the preceding twelve months, excluding fraud, wilful misconduct, and death or personal injury.

Termination and governing law. Either party may terminate for material breach not cured within 15 days’ written notice; deposits for work already performed are non-refundable. These terms are governed by French law, with exclusive jurisdiction in the courts of Paris.

Chapter III

Cookie Policy

Cookies are small files this site stores in your browser. WallNetSec uses a deliberately short list — enough to keep the pages standing and remember your preference, never enough to follow you around the web.

Strictly necessary. Session and security cookies that protect form submissions and maintain encrypted connections. These cannot be switched off without breaking the site; they carry no personal identifiers.

Preference storage. A single local entry named cookie_accepted records that you dismissed the consent notice, so it does not reappear on every visit. It lives only in your own browser and is removed when you clear site data.

Embedded content. The contact page embeds a Google Map. Google may set its own cookies when the frame loads; the map is loaded lazily and only after the page renders. Review Google’s policies for details on their handling.

Analytics and advertising. None. We run no advertising pixels, no cross-site trackers, and no third-party analytics on this site. Server logs are retained for 30 days for security purposes and then discarded.

Managing cookies. You can block or delete cookies through your browser settings at any time. Blocking strictly necessary cookies may prevent the inquiry form from working. Questions about this policy belong at [email protected].

Chapter IV

Refund Policy

Security work is time-bound and opinionated, so refunds follow a clear ledger rather than a mood. This policy applies to every engagement invoiced by WallNetSec, 99 RUE DE LOURMEL, 75015 PARIS, FRANCE.

Fourteen-day cooling off (fixed-price work). For audits, dossiers, and training booked more than 14 days before the start date, you may cancel for a full refund of any deposit. Inside 14 days, the mobilisation deposit of 50% is retained to cover analyst scheduling already committed.

Retainers. Monthly retainers — patch routines, exposure watch, incident response — may be cancelled at any time before the next billing date; the current month is non-refundable and service runs to its end. Unused incident engagements do not roll over past 12 months.

Work not started. If WallNetSec cannot begin an engagement for reasons within our control — analyst unavailability, scheduling failure — we refund all amounts paid within 10 business days, including the deposit, in the original payment method.

Defective deliverables. If a delivered report or dossier materially departs from the agreed scope, tell us within 15 days and we will remediate at no charge. If we fail to cure within a further 15 days, you may terminate that SOW and receive a pro-rata refund for the undelivered portion.

How to request one. Write to [email protected] with your invoice number and a one-line reason. Approved refunds are issued within 10 business days to the original payment card or bank account. Statutory withdrawal rights for EU consumers remain unaffected by anything written here.

Colophon

WallNetSec · 99 RUE DE LOURMEL, 75015 PARIS, FRANCE · [email protected] · +33 6 16 54 00 49. This booklet is reviewed each quarter; the revision date on the title plate is authoritative. Superseded versions are available on request.

Settle an Invoice → ← Return to the front page