Privacy Policy

‍Last updated: May 2026

CEPHALGO SAS ("Cephalgo," "we," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit cephalgo.com or interact with our services.

1. Who we are

Data controller:CEPHALGO SAS8 rue des Veaux, 67000 Strasbourg, FranceSIRET: 90444732300018Contact: contact@cephalgo.com

2. What data we collect

Depending on how you interact with us, we collect:

  • Contact form submissions: name, email address, and any message content you send us
  • Booking information: when you book a call, your name, email, and meeting time (managed via Google Calendar)
  • Technical data: IP address, browser type, device information, pages visited, referring URL, time of visit
  • Cookies and tracking: see our Cookies section below
  • Business communications: records of emails and calls when you engage with us as a prospective or actual client

3. Why we collect your data and on what legal basis

We process your data for the following purposes, under the following GDPR legal bases:

  • Responding to inquiries (legitimate interest)
  • Providing our services and managing client relationships (contract performance)
  • Marketing and advertising measurement (consent — only after you accept advertising cookies)
  • Compliance with legal obligations (legal obligation)
  • Improving our website and services (legitimate interest)

4. How long we keep your data

  • Contact inquiries: 3 years from the last contact
  • Client records: duration of the contract plus 5 years (commercial law requirement)
  • Cookies: see Cookies section
  • Consent records: 13 months (CNIL guideline)
  • Technical/server logs: 12 months

5. Who we share your data with

We do not sell your data. We share data only with trusted service providers acting on our behalf:

  • Webflow (website hosting)
  • Google Workspace (email, calendar)
  • Google Ads (advertising measurement, only after consent)
  • Tarte au Citron (cookie consent management)

These providers are bound by data protection agreements and process data only for the purposes we authorize.

6. International transfers

Some of our service providers (notably Google) may transfer data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or adequacy decisions.

7. Cookies

Our website uses cookies. Strictly necessary cookies are used to ensure the site functions. Advertising and analytics cookies are only set after you grant consent through our cookie banner.

You can manage your preferences at any time by clicking the "Cookie preferences" link in our footer.

For full details, see our cookie banner or contact us.

8. Your rights

Under GDPR and French data protection law, you have the right to:

  • Access the data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten")
  • Restrict how we process your data
  • Object to processing based on legitimate interest
  • Data portability (receive your data in a structured format)
  • Withdraw consent at any time, without affecting prior lawful processing
  • Lodge a complaint with the French data protection authority (CNIL) at cnil.fr

To exercise any of these rights, email contact@cephalgo.com. We will respond within one month.

9. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS), access controls, and regular security reviews.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated through our website.

11. Contact

For privacy questions or to exercise your rights:contact@cephalgo.com