Privacy Policy

Last updated: July 2026

Neodigit is committed to protecting the privacy of its website's users. This privacy policy explains how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

Data Controller

Neodigit
3 rue Courtpre, 21850 Saint-Apollinaire
Email: site@neodigit.fr

Neodigit is the controller responsible for the personal data collected on this site.

Data We Collect

We collect the following personal data:

Data you provide voluntarily:

First and last name
Professional email address
Phone number (optional)
Company name (optional)
Description of your project

Data collected automatically (anonymized analytics, see Cookies section):

Pages visited and time on site (aggregated, with no individual identifier)
Traffic source
Device type (mobile/desktop), country

This data is collected through our contact, quote request and appointment booking forms.

Purposes of Processing

Handling contact requests: responding to your questions and information requests
Handling quotes: preparing and sending personalized commercial proposals
Handling appointments: organizing and confirming discovery calls
Improving the site: analyzing site usage to improve its performance
Marketing communication: informing you about our services (with your consent)

The legal basis for this processing is:

The performance of pre-contractual measures (quotes, appointments)
Your consent (newsletter, marketing communication)
Our legitimate interest (improving the site, anonymized audience measurement)

Data Recipients

Internal:

Neodigit's sales team
The technical team (if needed for your project)

Processors:

Hosting: Neodigit, France - the site and audience measurement data (Umami) are hosted on our own infrastructure, in France
Email service: Resend - sending transactional emails (appointment confirmation, newsletter)

We ensure our processors provide sufficient guarantees to protect your data. Your data is never sold to third parties.

Retention Period

Contact data: 3 years from the last contact
Prospect data: 3 years from collection
Customer data: duration of the business relationship + 5 years (legal obligations)
Newsletter sign-ups never confirmed (double opt-in): purged after 30 days
Appointment requests: not stored on our servers, sent only by email (customer confirmation and internal notification)
Audience measurement data (Umami): aggregated, with no individual identifier, 13 months maximum

At the end of these periods, your data is deleted or anonymized.

Your Rights

In accordance with GDPR, you have the following rights over your personal data:

Right of access: obtain confirmation that your data is being processed and receive a copy of it
Right to rectification: correct your inaccurate or incomplete data
Right to erasure: request the deletion of your data in certain cases
Right to restriction of processing: restrict the processing of your data
Right to data portability: receive your data in a structured format
Right to object: object to the processing of your data
Right to withdraw your consent: at any time, with no effect on the lawfulness of prior processing

To exercise these rights, contact us at:site@neodigit.fr

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), France's data protection supervisory authority: www.cnil.fr

Cookies and Audience Measurement

This site uses no audience measurement cookies. Audience measurement is handled by Umami, a self-hosted tool on our own infrastructure (in France) that sets no cookies, collects no identifying personal data and performs no individual cross-site tracking: only aggregated, anonymous statistics are kept (page views, referrers, country, device type).

In accordance with CNIL guidelines on audience measurement tools that don't track individuals, this solution is exempt from prior consent: no cookie banner is therefore displayed on this site.

The only other technical mechanism in place, Cloudflare Turnstile (anti-spam protection for forms), likewise sets no third-party tracking cookie (see the "Anti-Spam Protection" section below) and is considered strictly necessary for the site's secure operation.

Data Security

Data encryption in transit (HTTPS/TLS)
Self-managed hosting on our own infrastructure, with restricted access
Our team's ongoing awareness of data protection

In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible.

Anti-Spam Protection

To protect our forms (contact, quote, newsletter, resources, appointment booking) against automated submissions (bots, spam), we use Cloudflare Turnstile in invisible mode. This solution:

sets no third-party cookie on your browser
performs no advertising profiling or cross-site tracking
does not collect identifying personal data for profiling purposes
is GDPR compliant

When you submit a form, a verification token is generated in your browser then validated on our servers with Cloudflare, to confirm the request comes from a human. For more information, seeCloudflare's privacy policy.

Transfers Outside the EU

Our main hosting (site, database, audience measurement) is located in France, on our own infrastructure. Only our transactional email provider, Resend, is based in the United States. This transfer is governed by the European Commission's standard contractual clauses.

Data collected: email address, language preference, date and time of consent, sign-up source.

Purpose: sending blog articles and information about our services.

Legal basis: your explicit consent (double opt-in).

You can unsubscribe at any time via the link in every email, or by contactingsite@neodigit.fr.

Changes

This privacy policy may be updated. The last update date is shown at the top of this page.

Contact

For any question regarding this privacy policy or your personal data:
Email: site@neodigit.fr
Address: 3 rue Courtpre, 21850 Saint-Apollinaire

We are committed to responding to your request within one month.