1. Who we are
{{LEGAL_NAME}}, trading as {{BRAND}}, is the data controller for the personal data described in this policy. We are registered in France under SIREN {{SIREN}}, with a registered office at {{LEGAL_ADDRESS}}.
This policy covers {{WEBSITE}} and the consulting services we provide to client organisations. It does not cover third-party websites we link to.
2. Data we collect
Data you give us
- Identity and contact details: name, job title, employer, email address, phone number, postal address.
- Content of your enquiries and correspondence with us, including meeting notes.
- Contract and billing details for client organisations, including bank details where we invoice you.
- Recruitment data, if you apply for a role: CV, cover letter, references.
Data we collect automatically
- Technical data from your visit: IP address, browser type and version, device type, operating system, pages viewed, referring page, time and date of access.
Data from other sources
- Publicly available business information (company registries, professional networks) used to prepare for or verify a commercial relationship.
- Data provided by our clients in the course of an engagement, where they remain the controller and we act as processor on their instructions.
We do not seek special-category data (health, religion, political opinions, biometric data). Please do not include such data in messages to us unless it is strictly necessary and we have asked for it.
3. Why we use it and on what legal basis
| Purpose | Data | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Responding to enquiries and preparing proposals | Identity, contact, enquiry content | Steps prior to a contract; legitimate interest in answering business enquiries |
| Delivering consulting services and managing the engagement | Identity, contact, contract and project data | Performance of a contract |
| Invoicing, accounting and tax records | Contract and billing data | Legal obligation (French Commercial and Tax Codes) |
| Business updates and insights sent by email | Name, email, employer | Consent, or legitimate interest for existing business contacts |
| Operating, securing and improving the website | Technical data | Legitimate interest in a working, secure website |
| Recruitment | Application data | Steps prior to a contract; consent for talent pools |
| Establishing or defending legal claims | Relevant records | Legitimate interest; legal obligation |
Where we rely on legitimate interest, we have weighed that interest against your rights and freedoms. You can ask us for a summary of that assessment at any time.
4. Who we share it with
We never sell personal data. We share it only with:
- Service providers acting on our instructions — hosting, email, document storage, video conferencing, CRM, accounting software. They process data under a written agreement meeting Article 28 GDPR.
- Professional advisers — accountants, auditors, lawyers and insurers, where they need the data to advise us.
- Public authorities — where disclosure is required by law or court order.
- An acquirer — if the business is sold or merged, subject to equivalent protection.
5. International transfers
We keep personal data within the European Economic Area wherever possible. If a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses together with additional safeguards where required. Write to {{EMAIL}} for a copy of the relevant safeguards.
6. How long we keep it
- Enquiries that don't become projects: up to 3 years from our last contact.
- Client records and contracts: the duration of the engagement plus 5 years.
- Accounting and invoicing records: 10 years, as required by French law.
- Marketing contacts: until you unsubscribe, or 3 years of inactivity.
- Unsuccessful applications: 2 years, unless you ask us to delete them sooner.
- Website logs: up to 12 months.
After these periods we delete the data or anonymise it so it can no longer identify you.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have data erased, where one of the grounds in Article 17 applies;
- restrict processing while a dispute is resolved;
- receive data you gave us in a portable, machine-readable format;
- object to processing based on legitimate interest, and to direct marketing at any time;
- withdraw consent, without affecting processing carried out before withdrawal;
- give instructions on what happens to your data after your death, under French law.
To exercise a right, email {{EMAIL}}. We reply within one month, and may ask for proof of identity if we cannot otherwise confirm who you are. If you believe we have handled your data incorrectly, you can lodge a complaint with the French supervisory authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr), or with the authority in your country of residence.
8. Cookies
This website uses strictly necessary cookies to function and to keep the site secure. These do not require consent under French law. If we later add analytics or marketing cookies, we will ask for your consent through a banner before they are placed, and you will be able to change or withdraw that choice at any time.
Your browser also lets you block or delete cookies. Blocking strictly necessary cookies may stop parts of the site from working.
9. Security
We use encryption in transit, access controls limited to staff who need the data, multi-factor authentication on business systems, vetted subprocessors and regular backups. Our consultants are bound by confidentiality obligations. If a breach is likely to result in a high risk to your rights, we will notify you and the CNIL as required by Articles 33 and 34 GDPR.
10. Children
Our services are aimed at businesses. We do not knowingly collect data from anyone under 15. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We update this policy when our practices or the law change. The current version is always published here with its date. Material changes affecting how we use your data will be notified directly where we hold your contact details.
12. Legal notice
Information published in accordance with French law (Loi n° 2004-575 for confidence in the digital economy).
| Publisher | {{LEGAL_NAME}}, trading as {{BRAND}} |
|---|---|
| Registered office | {{LEGAL_ADDRESS}} |
| SIREN | {{SIREN}} |
| {{EMAIL}} | |
| Phone | {{PHONE}} |
| Website | {{WEBSITE}} |
The content of this website — text, structure and graphics — belongs to {{LEGAL_NAME}} and may not be reproduced without written permission.