Privacy policy

Data controller

Stratedge Consulting, SASU with a share capital of €10,000, RCS Paris 922 351 127, 60 rue François 1er, 75008 Paris. Contact: contact@stratedgeconsulting.com, subject line “GDPR”.

Purposes and legal bases

• Responding to contact and qualification requests (discovery form); legal basis: pre-contractual steps taken at your request.
• Fulfilling orders: diagnostics, fixed-price products, bespoke services, appointment booking, preparatory questionnaires, invoicing; legal basis: performance of the contract and statutory accounting obligations.
• Session personalisation: identifying your company through the public French company search API and adapting the indicators shown; legal basis: legitimate interest in presenting relevant content. This data is not kept unless a form is submitted.
• AI concierge: conversations with the assistant are recorded to answer you, qualify your need and contact you again; legal basis: legitimate interest, with a permanent notice in the panel header.
• Security and proper operation of the website; legal basis: legitimate interest.

Data processed

• Identity and contact details: surname, first name, email, telephone, company, position.
• Qualification elements: segment, need, budget envelope, timeline, company context (sector, headcount, city).
• Exchanges: AI concierge messages, answers to preparatory questionnaires, appointment slots.
• Order data: product, amount, payment reference (payment is processed by Stripe, which passes no complete banking data to us).

Recipients and processors

• Stratedge Consulting's internal team, strictly as necessary.
• Hosting and database: the website's application infrastructure.
• Payment: Stripe.
• Appointment booking: the website's own calendar; the invitation and the video-call link are created in the Stratedge Consulting Google Workspace calendar.
• Confirmation, reminder and receipt emails: Resend.
• AI model provider for the concierge, with no reuse of your data for training.
• No data is sold or transferred for advertising purposes.

Transfers outside the European Union

Some processors may process data outside the European Union. These transfers are governed by the European Commission's standard contractual clauses or an adequacy decision.

Retention periods

• Prospects and unconverted requests: 3 years from the last contact.
• AI concierge conversations: 12 months, then deletion or anonymisation.
• Clients: duration of the contractual relationship, then 5 years.
• Accounting records and invoices: 10 years, in accordance with the French Commercial Code.
• Unvalidated session personalisation data: not kept.

Your rights

• Right of access, rectification and erasure.
• Right to restriction and right to object, in particular to processing based on legitimate interest.
• Right to portability of the data you provided to us.
• Right to set instructions on the fate of your data after your death.
• Right to lodge a complaint with the CNIL (www.cnil.fr).

To exercise your rights: contact@stratedgeconsulting.com, subject line “GDPR”. You receive an answer within one month.

Audience measurement

To know which pages are read and which paths lead to a request, the website records anonymous events: page viewed, button clicked, form step, request sent, appointment booked, order paid. These events are tied to a random session identifier, stored in the tab's memory and erased when the tab closes. No cookie is set, no IP address is kept, no browser fingerprint is computed, and only the device family (desktop, mobile, tablet) is retained.

This measurement is carried out by Stratedge Consulting, for its own account, without cross-referencing with other websites or transmission to third parties. Events are kept for thirteen months. The Global Privacy Control signal and your browser's Do Not Track setting are honoured, and you can turn the measurement off below.

Newsletter

Subscribing to the newsletter takes two steps: you enter your address, then confirm through the link you receive; without that click nothing is sent and the address is deleted after thirty days. We keep the address, the language, the subscription page and the dates of confirmation, sending and unsubscription. Sendings are limited to the weekly summary of blog articles; every email carries an immediate unsubscribe link. Emails go through our sending provider (Resend, or the host's infrastructure), with no other use of your address.

Cookies

The website only uses trackers strictly necessary for its operation, exempt from consent (client area and console session, language preference, remembering where you came from to attach your request to its campaign, for the life of the tab). No advertising cookie is set without your consent: if campaign measurement pixels are enabled, a banner asks for your choice before anything loads, and you can change it by clearing this site's data in your browser.

Security

Access is restricted, exchanges are encrypted in transit and data is hosted on infrastructure with access controls. Security incidents affecting personal data are notified under the conditions set out by the GDPR.