Privacy policy

Last updated: October 2026

CEPHALGO SAS ("Cephalgo", "we", "us") respects your privacy. This policy explains how we collect, use and protect your personal data when you visit cephalgo.com or interact with us.

1. Who we are

Data controller: CEPHALGO SAS, 8 rue des Veaux, 67000 Strasbourg, France. SIRET 904 447 323 00018.
Contact: contact@cephalgo.com

2. What data we collect

Document requests (posters, white papers and the EEG validation report): your work email address (needed to send the document) and the document you asked for.
Emails you send us: your name, email address and the content of your message.
Call bookings: when you book a call through Calendly, the name, email address and meeting time you enter.
Technical data: IP address, browser type, device information, pages visited, referring URL and time of visit.
Cookies: see section 7.
Business communications: records of emails and calls when you engage with us as a prospective or actual client.

3. Why we use your data, and the legal basis

Sending you a document you requested (legitimate interest in answering your request).
Following up with you about the document and related work, by professional email (legitimate interest; you can object at any time, and every follow-up email lets you opt out).
Responding to enquiries (legitimate interest).
Providing our services and managing client relationships (performance of a contract).
Advertising measurement (consent, given only through the cookie banner).
Complying with legal obligations (legal obligation).
Improving our website and services (legitimate interest).

4. How long we keep your data

Document requests and enquiries: 3 years from the last contact with you.
Client records: the duration of the contract plus 5 years.
Records of your cookie choices: 12 months.
Technical and server logs: 12 months.

5. Who we share your data with

We do not sell your data. We share it only with service providers acting on our behalf:

Webflow (website hosting and form submissions)
Google Workspace (email and calendar)
Calendly (call booking)

These providers are bound by data protection agreements and process data only for the purposes we set.

Some services receive your IP address when a page loads and process it under their own terms: Google Fonts (font delivery), and jsDelivr and Amazon CloudFront (delivery of site scripts).

Google Ads (advertising measurement) runs only after you consent. Google acts as an independent controller for this data, under its own privacy policy (policies.google.com/privacy).

Cookie consent is managed by a script that stores your choice in a cookie on your device.

6. International transfers

Some of these providers, including Webflow, Google and Calendly, may process data outside the European Economic Area, in particular in the United States. Where this happens, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework for certified companies, or on the European Commission's standard contractual clauses.

7. Cookies

Strictly necessary cookies keep the site working. Advertising cookies are set only after you accept them in the cookie banner. You can change your choice at any time through "Cookie preferences" in the footer.

8. Your rights

Under the GDPR and French data protection law, you have the right to access, rectify and erase your data, to restrict its processing, to object to processing based on legitimate interest, including follow-up emails, to data portability, and to withdraw consent at any time without affecting earlier processing. You can also lodge a complaint with the CNIL (cnil.fr).

To exercise these rights, email contact@cephalgo.com. We reply within one month.

9. Security

We use reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS) and access controls.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version.

11. Contact

For privacy questions or to exercise your rights: contact@cephalgo.com