Privacy Policy

Important: In case of data transmission to authorities upon judicial request, we comply in accordance with applicable law and will inform you within legally permitted limits.

Effective date: 7 September 2026. Nature of the modifications: an application firewall now filters requests sent to the contact form, and rate limiting applies at its receiving endpoint. Section 10 states this measure; section 2 publishes what it produces. What we chose not to do: the most common way of protecting a form is to limit the rate per IP address, which requires the provider to retain the list of addresses concerned. We declined that. The firewall we selected retains no IP address. What it does produce, and what we publish: aggregated counters — the number of requests per country, per internet access organisation and per device type. These three items are inferred from your request, they cannot identify you, and they are associated with no other data. We publish them because the list of what we measure, in sections 2 and 4, is meant to be complete: a derived item missing from it would make it false. These modifications add a security measure and the information that accompanies it. They change neither the purposes nor the retention periods, and restrict none of your rights. Previous notice — 7 September 2026. Nature of the modifications: the contact form is now received by a service we operate ourselves and which it reaches without leaving this domain, whereas it was previously sent to a separate address. Three consequences, which this policy publishes. First, an improvement: the service that now receives your submissions retains neither your IP address nor your user agent. The line that published their 30-day retention is removed from sections 2 and 5 — not because we stop publishing it, but because that retention no longer takes place. Second, a less favourable clarification: your submission now passes through our content delivery network, which accordingly receives your IP address — which section 6 expressly stated was not the case. That section is corrected. No request log is kept there, as it also publishes. Third, a residual copy we had not yet published: a continuous backup of our database allows its state to be restored up to 1 day earlier. Should we need to use it, a message deleted within that interval would reappear; we keep a register of the deletions requested and replay them before returning it to service. On balance these modifications reduce the data retained: a 30-day retention disappears, a one-day residual copy is created and published. They change neither the data collected nor the purposes, and restrict none of your rights. Previous notice — 3 September 2026. Nature of the modifications: section 5 now expresses in months the retention period granted by the plan we subscribe to with our audience measurement tool — 84 months, that is 7 years. Above all, that section carries a new paragraph devoted to your right to obtain the deletion of the information concerning you, which distinguishes what such a request reaches depending on the copy at issue. We undertake to delete, on request, the information arising from the contact form, in all three of its copies — an undertaking that goes beyond what sections 8 and 9 enumerate. Against that, the paragraph publishes two limits this policy had until now passed over in silence: we have not yet established how long a deleted item remains with our email provider and in our sales follow-up tool, and audience measurement data cannot be deleted individually — our processor's programming interface offers no means of deleting measurements by date or by person, the only deletion it knows being attached to a person profile, which our configuration does not create. The paragraph finally makes clear what the destruction of your identifier actually reaches: it concerns the future, the measurements already sent remaining with our processor for the period stated. These modifications change neither the data collected, nor the purposes, nor the periods actually applied, and restrict none of your rights: they add an undertaking to delete, and describe accurately what exercising your right to erasure reaches on each copy. We publish these limits because they already existed without being stated, not because they are new. Previous notice — 3 September 2026. Nature of the modifications: section 4 publishes that the visitor identifier created by our audience measurement tool is retained for 6 months at most, and that it is destroyed at the moment you are asked to make your choice again. A verification carried out on 3 September 2026 established that there was a case in which that destruction did not take place: when several tabs of this website were open at the same time, a tab left active could write the audience measurement trackers back just after expiry had erased them. On the next load, those trackers — including your visitor identifier — remained while no consent was recorded any longer, and the banner was presented to you as though you were a new visitor. The code has been corrected: the absence of a recorded consent now triggers exactly the same erasure as expiry, and that erasure covers both of your browser's storages. The correction was verified by measurement, before and after. This modification reduces the data retained in your browser and restores a guarantee already published; it changes neither the data collected, nor the purposes, nor the retention periods, and restricts none of your rights. Previous notice — 3 September 2026. Nature of the modifications: the retention period for audience measurement data, which this policy published as “12 months at most”, corresponded to no actual deletion — neither at our processor nor on our side. On verification, the plan we subscribe to with it sets at 7 years the retention period it grants; that value follows from the plan and cannot be changed from our account, and no automatic deletion is applied to it. We have also established that its programming interface does not allow events to be deleted according to their date: the only deletion it offers is attached to a person profile, and this website creates none. We are therefore unable, to date, to apply ourselves the 12-month limit that was published. Section 5 now states the actual position: the period our processor grants, and the absence of automatic deletion on either side. This modification lengthens the retention period brought to your knowledge: it changes nothing about what was actually retained, but corrects a figure that was not being met. It changes neither the data collected nor the purposes, and restricts none of your rights. Previous notice — 3 September 2026. Nature of the modifications: the hosting of the data in our sales follow-up tool HubSpot, which this policy located in the United States, is in fact in Canada — observed on 3 September 2026 in the HubSpot console, which states “Your data hosting location: Canada”. The six statements concerned are corrected in both languages: in section 6, the “Country” and “Safeguards” columns of the HubSpot row; in section 7, the two paragraphs that described this transfer; and the label of the contact form checkbox. Section 7 could not be corrected by changing a word: it grounded a transfer to the United States that does not take place for storage. It now distinguishes where the data is stored — in Canada — from who can access it: HubSpot's data processing agreement permits processing in the United States and in the jurisdictions where its affiliates and sub-processors operate, and those accesses remain, governed by the standard contractual clauses and the Data Privacy Framework certification. Separately, technical log entries from the function that processes the form, which contained the name, company and email address of two individuals, were deleted on 3 September 2026; the logging that produced them had already been removed from the code. These modifications correct inaccurate information, describe hosting more protective than the one published, and reduce the data retained. They change neither the data transmitted, nor the purposes, nor the retention periods, and restrict none of your rights. Previous notice — 2 September 2026. This notice follows the one published the same day and completes it, further to a technical audit of the website. Nature of the modifications: the guarantee that this website loads no third-party resources, stated without qualification in section 6, now carries there the same reservation as in section 4 — it holds until you accept audience measurement —, and the single exception that opens afterwards is described there; the two PostHog domains your browser contacts after acceptance are named in section 6 — eu-assets.i.posthog.com, from which the measurement code and its configuration are loaded, and eu.i.posthog.com, to which the measurements are sent: the former was named nowhere; the trackers this tool places in your browser's session storage are added to the table in section 4, which declared none of them, and they are now cleared as soon as you withdraw your consent or it expires; finally, two settings of that tool left at their default values, which collected the campaign parameters present in the address you arrived by (utm_* and advertising click identifiers) as well as the site you came from, have been disabled: this data is no longer collected, which makes the closed list of what is measured, published in sections 2 and 4, accurate again. These modifications clarify the information published, reduce the data collected, and restrict none of your rights. Previous notice — 2 September 2026. Nature of the modifications: the scope of the General Data Protection Regulation is now described for all the processing covered by this policy, rather than for audience measurement alone, following the launch of our services for clients established in the European Union; the scope of our undertaking regarding HubSpot is clarified so as to cover information originating from this website; the qualifiers of consent under the GDPR are restored identically in the French and English versions; the contact form now states that you confirm having read this policy rather than that you accept it, the policy being information and not a condition you agree to; the fonts, until now loaded from a Google server, are now served from our own domain: no page of this website loads any third-party resource any more, and your browser makes no request to any third party until you have accepted audience measurement; the logging of your IP address when you submit the contact form, kept for 30 days, is now published in sections 2 and 5, where the retention period of technical logs is broken down per service instead of a single figure; the scroll-position tracker, strictly necessary, is added to the table in section 4; the measurement of page loading times is explicitly disabled in our audience measurement tool. These modifications clarify the information published, reduce the data sent to third parties, and restrict none of your rights. Previous notice — 27 August 2026. Nature of the modifications: the retention period for contact form messages now runs, in the text as in the mechanism, from the receipt of the message rather than from the last interaction — which shortens it; the three copies of a message are distinguished (record held by the receiving service, copy in our inbox, optional sales record) and, for each, what triggers its deletion is stated; the website's content delivery network is named among the processors, together with the fact that it receives your IP address and that no access log is retained there. These modifications clarify the information published and do not restrict any of your rights. Previous notice — 25 August 2026. Nature of the modifications: Google Analytics replaced by PostHog, in the European data region, as the audience measurement tool; publication of the service that receives contact form messages, of the receiving inbox, and of the optional transfer to HubSpot, which is now conditional on a separate checkbox; addition of a 12-month maximum retention period for audience measurement data; renewal of your tracker choice every 6 months, with destruction of the visitor identifier; replacement of the notion of "legitimate interest" by the justifications specific to Quebec law; addition of the right to restriction of processing (Art. 18 GDPR). These modifications broaden the information published and restrict none of your rights.