LiftForward Privacy Notice
Apple Music Subscription Program (AMP) — France
Effective Date: August 2026 · Version 1.0
This Privacy Notice explains how LiftForward OÜ (“LiftForward,” “we,” “us,” “our”) processes your personal data in connection with your Apple Music subscription purchased through Boulanger and administered by LiftForward (the “Subscription”). It applies to customers and users of the Subscription and visitors to the Self-Service Portal.
1. What personal data do we process?
We process the following categories of personal data about you:
• Identification and contact data — name, postal address, email address, telephone number.
• Account and Subscription data — Subscription status, Subscription Start Date, commitment period, Apple ID linking status (a system-generated unique identifier only — we do not receive or store your Apple ID credentials).
• Billing and payment data — Subscriber Price, billing history, and payment status. Card and payment details are processed directly by Stripe Payments Europe Ltd.; LiftForward does not store full payment card numbers.
• Consent and communication records — timestamped records of the consents given at signup (e.g. request for immediate provision of the Service, acknowledgment of loss of withdrawal right), and records of support or withdrawal/cancellation requests.
• Self-Service Portal usage data — login and activity logs needed to operate and secure the portal.
2. Why do we process your data, and on what legal basis?
• To administer your Subscription (account, billing, payments, communications) — performance of the contract.
• To provision and maintain your Subscription with Apple (including providing a unique identifier to Apple) — performance of the contract.
• To operate fraud-prevention and security controls (including via Stripe) — legitimate interest.
• To comply with legal obligations (accounting, tax, and consumer-protection record-keeping) — legal obligation.
• To send marketing communications, only where you have given your consent — consent.
3. How long do we keep your data?
We keep your data for the duration of your Subscription, plus:
• Billing and payment records: 13 months from the relevant transaction, consistent with card-network evidentiary requirements.
• Consent records (immediate-provision request, withdrawal-right acknowledgment) and support/withdrawal correspondence: the duration of the Subscription plus five (5) years, to allow us to demonstrate compliance with applicable consumer-protection law.
• Accounting and tax records: ten (10) years, as required under French commercial law.
Where data is retained only to establish, exercise, or defend legal claims, it is retained for the applicable limitation period only.
4. Who is concerned by this notice?
Customers and users of the Subscription, and their duly authorised representatives.
5. Who do we share your data with?
• Apple, to the extent necessary to provision and manage your Subscription (typically limited to a unique identifier and Subscription type).
• Stripe Payments Europe Ltd., for payment processing.
• Boulanger, to facilitate customer support.
• Tax, accounting, and regulatory authorities, where required by law.
6. Is your data transferred outside the EU?
Apple may transfer personal data to the United States or other jurisdictions outside the European Economic Area. Apple is responsible for ensuring that such transfers comply with applicable law and provide an adequate level of protection.
7. How is your data secured?
We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. Access is limited to staff, subcontractors, and processors (including Stripe and Boulanger) who need it to perform their functions, and who are bound by confidentiality and data-protection obligations.
8. What are your rights?
You have the right to access, rectify, erase, and port your personal data, to restrict or object to its processing, and to withdraw your consent at any time (without affecting the lawfulness of processing carried out before the withdrawal). You may also issue instructions on the storage, deletion, or communication of your personal data after your death.
9. How do you exercise your rights?
To exercise your rights in respect of LiftForward's processing, contact us at [email protected]. To exercise your rights in respect of Boulanger's or Apple's processing, please refer to their respective privacy notices. We may request proof of identity where reasonably necessary. We will respond within one month of receiving your request. You also have the right to lodge a complaint with the CNIL (the French Data Protection Authority) at https://www.cnil.fr.
10. Cookies and similar technologies
The Self-Service Portal uses cookies and similar technologies. Non-essential cookies are only placed with your prior consent, collected through a consent banner presented on your first visit. You can accept, refuse, or customise your choices by purpose, and withdraw your consent at any time through the “Manage Cookies” link in the portal footer.
11. Changes to this notice
This Privacy Notice may be updated from time to time. The “Effective Date” above reflects the date of the current version.