Your data, in plain terms.

Last updated: 25 August 2026

1. Data controller

The controller of the personal data collected via the honevr.com site is Société Hone Vr Sarl, whose full contact details appear in the legal notice.

For any question about your data, write to contact@honevr.com.

2. Data collected

2.1 Demo request form

When you submit the form, we collect only:

• First and last name (required)
• Institution / organisation (required)
• Role or position (required)
• Work email address (required)
• Free-text message (optional)

2.2 Technical metadata

For security and abuse-prevention purposes, we also keep, for each submission:

• A technical identifier derived from your IP address (hashed with a secret salt, non-reversible), used only for rate limiting and abuse detection. Your actual IP address is not kept.
• The timestamp of the submission.

2.3 What we do not collect

The site sets no tracking cookies, loads no advertising scripts, no third-party analytics with cross-site tracking, and no embedded social networks. No behavioural profile is built.

3. Purpose and legal basis

The form data is processed to:

• Respond to your demo request (legal basis: pre-contractual steps, at your initiative).
• Targeted commercial outreach to your institution, directly related to the requested service (legal basis: legitimate interest).
• Service security and prevention of form abuse (legal basis: legitimate interest).

4. Data recipients

The form data is accessible only to the founders of Hone VR (Anouar Bouhareb and Jasser Ouni), who handle each request directly.

No data is sold, rented or shared with third parties for commercial purposes. The only technical subprocessors that may access the data strictly to operate the service are:

• Vercel Inc. (United States): site hosting.
• Zoho Corporation Pvt. Ltd. (United States / India): business mailbox contact@honevr.com.
• MongoDB Atlas (United States, if enabled): backup storage of demo requests. The mailbox remains the source of truth.

5. Transfers outside Tunisia and the EU

Our infrastructure subprocessors (Vercel, Zoho, MongoDB Atlas) are established outside Tunisia and the European Union. These transfers are governed by these providers’ standard contractual terms and their own data protection policies.

6. Retention period

• Demo requests: 24 months from the last interaction with you, then deletion.
• Hashed technical identifiers (derived from IP): 30 days for rate-limiting windows, then erased automatically.
• Server access logs: Vercel’s default retention, with none kept on our side.

7. Your rights

In accordance with Tunisian law no. 2004-63 on the protection of personal data and, where applicable, the General Data Protection Regulation (EU 2016/679) if you are located in the European Union, you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure of your data.
• Right to object to processing.
• Right to restriction of processing.
• Right to data portability.

To exercise any of these rights, write to contact@honevr.com. We respond within 30 days.

8. Supervisory authority

In case of a persistent disagreement about the processing of your data, you may refer the matter to the National Authority for the Protection of Personal Data (INPDP), the Tunisian supervisory authority, at www.inpdp.tn.

9. Security

The demo form is served exclusively over HTTPS, with strict security headers (HSTS, CSP, X-Frame-Options). Data travels encrypted end to end to our mailbox. The IP field is hashed with a secret salt on the server before any logging or storage.

10. Changes

We may update this policy to reflect changes in the service or in regulations. The last-updated date appears at the top of this page. Substantial changes are notified appropriately.