Privacy policy
How your personal data is processed, in compliance with the GDPR.
Data controller
Orthodrome Consulting (details in the legal notice). Point of contact: contact@orthodrome.fr.
Data collected & purposes
Contact form: name, email, company, message — to handle and answer your request (legal basis: pre-contractual steps taken at your request, art. 6.1.b GDPR).
Client area: identity and project data — to perform the service (legal basis: contract).
Client-area security logs: IP address, date and type of authentication event — to protect accounts and detect fraudulent access (legal basis: legitimate interest in securing the service).
Introductions by a business introducer: date and topic of the meeting, the introducer’s declarations and, if you agreed to receive the next steps by email or text, your business address or number passed on by the introducer, so that we can send you a link to the possible next steps (business-to-business marketing, legitimate interest). If you reply: name, email, optional phone, company, message, to reply to you (article 6.1.b GDPR). The introducer receives a reference and the date of your request; if an engagement is signed, your organisation’s name and the amount excluding VAT once the engagement is paid (legitimate interest under their agreement).
Business introducers: identity, company and agreement, to manage the agreement and its fee (contract and legal obligations).
Retention period
Contact requests: 24 months, then automatic deletion. Security logs: 12 months, then IP anonymisation. Client data: duration of the contractual relationship, plus applicable statutory retention obligations.
Introductions: your address or number is kept only as a fingerprint, together with the date and topic of the meeting, for 3 years, to prove the sending and respect an objection; unconfirmed request: 14 days; request without follow-up: 24 months. Objections: 3 years after the last request, as a fingerprint. Introducers: end of agreement plus 5 years; accounting records 10 years. How long our sending provider keeps its own logs is still to be checked in its data processing agreement: it will be written here before the first send.
Your rights
Access, rectification, erasure, restriction, portability, objection — exercised by writing to contact@orthodrome.fr. Complaints may also be lodged with the CNIL.
To stop receiving messages: orthodrome.fr/en/stop, reply “STOP” to the email, or “STOP” to the number given in the text.
Processors & transfers
Website and data hosting: OVHcloud, in France.
Emails and texts: Brevo, a French company with servers in the European Union. Its data processing agreement provides that some of its subprocessors and group companies (network security, support, maintenance, text-message routing) may process this data or access it outside the European Union, notably in the United States and India, under standard contractual clauses or the Data Privacy Framework. No text message is sent at this time.