Privacy Policy

Last updated: 1 July 2026

The protection of your personal data is a priority.

When you use the website https://topcho.io/ (the “Site”), request information, request a quote, take out a pet health insurance policy, manage your contract, access your customer account, submit a reimbursement claim or communicate with our customer service team, we may collect and process personal data concerning you.

This Privacy and Cookies Policy explains how we process your personal data and use cookies and other trackers, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and applicable French data protection law.

1. Who are the parties responsible for processing your data?

1.1 The data controllers

For processing activities related to the pet health insurance product, including quote requests, taking out an insurance policy, contract management, claims, complaints, fraud prevention and compliance with insurance-sector obligations, the joint data controllers are:

TAWL Solutions France (acting under the commercial brand Topcho), SAS with share capital of EUR 100, whose registered office is located at 60 rue François 1er, 75008 Paris, registered with the Paris Trade and Companies Register under number 993 777 218 and with ORIAS under number 26 001 054 as an insurance broker.

Seyna, SA with share capital of EUR 1,202,382.14, whose registered office is located at 20 bis rue Louis Philippe, 92200 Neuilly-sur-Seine, registered with the Nanterre Trade and Companies Register under number 843 974 635, a company governed by the French Insurance Code.

In accordance with Article 26 of the GDPR, Topcho and Seyna have entered into a joint controllership agreement defining their respective obligations. The main points of this agreement may be made available upon request.

1.2 Processors and service providers

The provision and maintenance of certain functionalities may be subcontracted to Seyna Technologies, SA registered with the Nanterre Trade and Companies Register under number 979 562 394, whose registered office is located at 20 bis rue Louis Philippe, 92200 Neuilly-sur-Seine.

For the administrative management of claims and reimbursement requests, Topcho and/or Seyna may use Tessi as claims manager. Tessi may process claim-related data, including care forms, veterinary invoices, prescriptions, supporting documents and reimbursement information, for the purpose of assessing, administering and processing claims under the applicable insurance contract.

The hosting, retention and storage of certain data may be provided by Amazon Web Services Inc. (AWS). Where AWS servers are used for the Site, they are located in the European Union.

2. What data do we collect?

Personal data means data that can identify an individual directly or by cross-referencing it with other data. We may collect the following categories of data:

• Identification data: surname, first name, date and place of birth.

• Contact details: email address, postal address and telephone number.

• Economic and financial information: bank details, invoices and payment information.

• Connection and browsing data: connection logs and IP address.

• Communication and customer relationship data: emails, support requests and complaints.

• Data relating to your animal: microchip number, breed, age and name of the animal.

• Claim-related data: care forms, veterinary invoices, prescriptions and supporting documents.

Mandatory data is indicated when you provide your information. If you do not provide mandatory data, we may not be able to respond to your request, prepare a quote, complete a subscription, manage your contract or process a claim.

Topcho does not collect human health data as part of its pet health insurance activity.

3. On what legal bases, for what purposes and for how long do we retain your data?

Purposes

The data collected are processed for the purpose of entering into and managing the insurance contract.

More specifically, data may be processed to respond to your requests, prepare a quote, verify eligibility criteria, complete your subscription, manage your membership, manage payments, process reimbursement requests and claims, handle complaints, provide customer support, prevent and combat fraud, comply with legal and regulatory obligations applicable to insurance brokers and insurers, and defend our rights in the event of pre-litigation or litigation.

Legal bases

The legal bases for the processing carried out are, depending on the case, pre-contractual measures taken at your request, performance of the insurance contract, compliance with legal obligations, our legitimate interest, or your consent where required, in particular for certain cookies or marketing communications.

Retention periods

In general, personal data are retained for the period necessary to achieve the purposes pursued.

If you take out an insurance policy, your data are retained for the entire duration of the contract and then for five (5) years from the end of the contract, the settlement of the claim or the end of the dispute, for evidentiary purposes.

If you do not subscribe to the insurance contract, data used for commercial communications may be retained for three (3) years from your last contact, unless you object.

Data processed for anti-money laundering and counter-terrorist financing purposes are retained for five (5) years from the end of the insurance contract.

Fraud alerts are retained for a maximum of six (6) months while the alert is being assessed. Alerts qualified as irrelevant are deleted without delay. Where an alert is qualified as relevant, the data may be retained for five (5) years from the closure of the fraud investigation.

4. Who are the recipients of your data?

Your personal data are accessible only to authorised recipients, within the limits of their respective duties.

The following may have access to your data:

• Authorised staff of Topcho and Seyna.

• Tessi, as claims manager, for the administrative processing of claims and reimbursements.

• Seyna Technologies and technical service providers involved in hosting, maintenance, security, website management, forms, messaging, electronic signature, identification or authentication.

• Secure payment service providers, where applicable.

• CRM, customer support, messaging, analytics, audience measurement, email and newsletter providers, where applicable and subject to your choices.

• External advisers, including lawyers, experts, auditors and accountants, where necessary.

• Public, administrative, judicial or regulatory authorities, where required by law, including TRACFIN, the French Treasury Directorate, the ACPR and the CNIL.

No personal data is sold to third parties.

5. Are your data likely to be transferred outside the European Union?

Where possible, your data are stored and processed within the European Union.

However, as part of certain tools or technical service providers used for the operation of the Site or Topcho services, your data may be transferred outside the European Union or accessed from outside the European Union.

Where such transfers occur, they are protected by appropriate safeguards in accordance with the GDPR, including an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), an approved certification mechanism or any other appropriate safeguard provided for by Chapter V of the GDPR.

6. What are your rights over your data?

You have the following rights with regard to your personal data:

Right to information.

Right of access.

Right to rectification.

Right to erasure.

Right to restriction of processing.

Right to data portability.

Right to object to processing.

Right to object to direct marketing.

Right to withdraw your consent at any time where processing is based on consent.

Right to define instructions relating to the retention, erasure and communication of your data after your death.

Right to lodge a complaint with the CNIL (www.cnil.fr).

7. What cookies do we use?

A cookie is a small text file placed on your device when you visit a website.

The Topcho Site may use cookies and other trackers to ensure the proper functioning of the Site, secure your browsing, remember your preferences, measure website traffic and usage, improve the user experience, provide tailored content and measure the effectiveness of marketing campaigns, where applicable.

Strictly necessary cookies are essential for the operation of the Site and the services requested. They do not require your consent.

Other cookies, such as audience measurement, customer support, marketing, advertising or social media cookies, may require your prior consent depending on their purpose and configuration.

When you first visit the Site, a cookie banner allows you to accept cookies, refuse non-essential cookies or customise your choices by purpose.

You may change your choices at any time via the cookie management module available on the Site. Refusing non-essential cookies does not prevent access to the Site, but certain functionalities or content may be limited.

Cookies are kept for a limited period proportionate to their purpose. Cookies may be retained for a maximum period of thirteen (13) months from the date they are placed, unless a shorter period applies.

Choices relating to cookie consent or refusal may be kept for six (6) months.

The exact list of cookies used on the Site is available in the cookie management module accessible via the “Cookies settings” link on the Site.

8. Data Protection Officer

For any questions regarding the protection of your personal data or to exercise your rights, you may contact our Data Protection Officer using the details below:

Contact email: support@topcho.io

Contact address:
TAWL Solutions France
60 rue François 1er
75008 Paris
France

9. Changes

We may amend this Privacy and Cookies Policy at any time, in particular to comply with regulatory, case-law, editorial or technical developments, or to reflect changes to our tools, services, providers, insurance product, claims process or customer journey.

These changes apply from the effective date of the amended version.

We therefore encourage you to consult the latest version of this policy regularly to stay informed of any updates.

We will notify you of any material changes to this Privacy and Cookies Policy through appropriate means.