Privacy policy.

DATA COLLECTED

What data we collect.

We collect only the data strictly necessary for the purposes described below. No data is collected without your knowledge.

Via the contact form

When you complete the contact form at /contact, we collect:

• · Full name (required)
• · Company (required)
• · Professional e-mail address (required)
• · Phone (optional)
• · Type of requirement (required)
• · Scope — number of agents (optional)
• · Desired timeline (optional)
• · Free-text message (required)

Via the checklist form

When you request the CCaaS Migration checklist, we collect your e-mail address, your consent choices, the date of the request and the confirmation status of your subscription.

Via the conversational assistant

When you use the Alexi assistant, we collect the content of your messages, as well as your first name and e-mail address if you choose to provide them. Replies are generated by an AI model provided by OpenAI.

Via appointment booking

Once the contact form has been sent, the Calendly module is pre-filled with your name, e-mail address, company and requirement. Calendly records the time slot you select.

Via audience measurement

We use Plausible Analytics, a privacy-friendly solution that sets no cookies and collects no personal data. The information gathered is anonymised and aggregated: page views, visit duration, device type, traffic source. No information allows individual identification.

Via anti-spam protection

We use Google reCAPTCHA v3 to protect our forms against automated submissions (spam). The script is only loaded when you start filling in a form. reCAPTCHA may collect technical information relating to your browsing behaviour (mouse movements, completion time, etc.) in order to assess whether a submission is human. This data is processed by Google in accordance with its own privacy policy: https://policies.google.com/privacy

PURPOSE OF PROCESSING

Why we collect this data.

Your data is processed exclusively for the following purposes:

• · Responding to your enquiry
• · Qualifying your requirement and preparing a productive conversation
• · Scheduling an appointment
• · Maintaining a record of our commercial exchanges
• · Sending you the checklist you requested
• · Sending you the newsletter, only if you asked for it
• · Answering your questions via the conversational assistant
• · Protecting our forms against abuse

No data is resold or used for targeted advertising. The newsletter is only sent with your explicit consent, which you can withdraw at any time via the unsubscribe link in every e-mail.

LEGAL BASIS

Contact form and appointment booking: pre-contractual measures taken at your request (Article 6.1(b) GDPR). Sending the checklist: performance of your request (Article 6.1(b) GDPR). Newsletter: your consent (Article 6.1(a) GDPR), which you may withdraw at any time. Conversational assistant: legitimate interest of ExpertiaX SASU in answering visitors' questions (Article 6.1(f) GDPR). Anti-spam protection (reCAPTCHA): legitimate interest of ExpertiaX SASU in securing its forms (Article 6.1(f) GDPR). Anonymised audience measurement (Plausible): legitimate interest of ExpertiaX SASU in measuring the use of its website (Article 6.1(f) GDPR).

RETENTION PERIOD

How long we retain your data.

Contact form and appointment booking: 36 months from our last exchange, the period recognised by the CNIL for B2B commercial prospecting. Checklist and newsletter: until you unsubscribe; unconfirmed requests are deleted after 30 days. Conversational assistant: 12 months from the last conversation. At the end of this period, your data is automatically deleted from our systems, unless a longer legal retention obligation applies (for example, where a contract has been entered into, commercial data is retained for 10 years after the end of the contract for accounting and tax purposes). Plausible audience measurement data is retained in anonymised, aggregated form for a maximum period of 24 months.

RECIPIENTS AND PROCESSORS

Who receives your data.

Your data is accessible solely to Yassine Rogui, President of ExpertiaX SASU, and is never sold or transferred to third parties for commercial purposes. To ensure the operation of the website and the processing of your enquiry, we engage the following technical processors:

• · Amazon Web Services EMEA SARL — Website hosting (Luxembourg, EU)
• · Hostinger International Ltd — Hosting of the n8n automation tool (forms, checklist, assistant) (Cyprus, EU — server located in Paris)
• · Microsoft Ireland Operations Ltd — Business e-mail and enquiry tracking (Microsoft 365) (Ireland, EU)
• · Notion Labs Inc. — Management of checklist requests and newsletter subscriptions (United States, transfer governed by Standard Contractual Clauses of the European Commission)
• · OpenAI Ireland Ltd — AI model of the conversational assistant (Ireland, EU — processing may occur in the United States, governed by Standard Contractual Clauses of the European Commission)
• · Calendly LLC — Appointment booking (United States, transfer governed by Standard Contractual Clauses of the European Commission)
• · Google LLC — reCAPTCHA v3 anti-spam, loaded only when a form is used (United States, transfer governed by Standard Contractual Clauses of the European Commission)
• · Plausible Insights OÜ — Cookieless audience analytics (Estonia, EU)

Each of these processors is contractually bound to maintain the confidentiality of your data and to implement appropriate security measures.

YOUR RIGHTS

How to exercise your rights.

Under the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• · Right of access — obtain a copy of the data held about you
• · Right of rectification — correct inaccurate or incomplete data
• · Right of erasure ('right to be forgotten') — request the deletion of your data
• · Right to object — object to the processing of your data
• · Right to restriction of processing — request the temporary suspension of a processing activity
• · Right to data portability — receive your data in a structured, machine-readable format
• · Right to give instructions regarding the use of your data after death

To exercise any of these rights, please write to us at:

We undertake to respond to your request within one month, in accordance with Article 12 GDPR.

If you consider that the processing of your data does not comply with the applicable regulations, you may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr

SECURITY

ExpertiaX SASU implements appropriate technical and organisational measures to ensure the security of your personal data: encrypted communications (HTTPS/TLS), access authentication, regular backups, and the selection of processors that comply with GDPR requirements. However, as no transmission or storage system is 100% infallible, ExpertiaX SASU cannot guarantee absolute security. We undertake to inform you without undue delay in the event of a significant security incident affecting your data (Article 34 GDPR).

COOKIES

Cookies and trackers.

The website sets no advertising cookies. Audience measurement (Plausible) works without cookies. Two third-party services may set or read trackers, only when you use them: Google reCAPTCHA, loaded when you start filling in a form, to protect it against bots; Calendly, loaded after the contact form has been sent, for appointment booking. The website also stores a few technical items in your browser (local storage): your choice regarding the information banner, the display theme, your Academy progress and the current conversation with the assistant.

UPDATES

This privacy policy may be updated at any time, in particular in response to regulatory changes or changes to our practices. The date of the most recent update is shown at the top of the page. Material changes will be notified to you by e-mail if you are in an active commercial relationship with ExpertiaX SASU.

CONTACT

For any enquiries regarding this privacy policy or the processing of your data: