Privacy policy
What data is collected, why, for how long, and how to exercise your rights.
Last updated :
Data controller
Data sent through this site is processed by the publisher of the site, identified in the legal notice.
- Contact
- contact@digital-kaizen.com
Data collected
This site collects nothing without your knowledge. The only information gathered is what you enter in the contact form, plus two technical items needed to keep automated submissions out.
- Full name, required.
- Work email address, required.
- Company, optional.
- Phone number, optional.
- Type of need, required.
- A description of your project, required.
- A fingerprint of your IP address: the address itself is never stored, only a salted SHA-256 hash, used to cap how many messages can be sent per hour.
- Your browser identifier and the time of sending.
Purpose and legal basis
This data is used solely to answer your enquiry and, where relevant, to continue the conversation it opens. It is never sold, and never used for unsolicited marketing.
The legal basis is your consent, collected through a checkbox that is never pre-ticked. The IP fingerprint and browser identifier rest on the legitimate interest in protecting the form from automated submissions.
Retention
Enquiries are kept for twenty-four months from the last exchange, then deleted automatically. You may ask for deletion before that.
Who has access
Access is limited to the publisher. Four technical providers are involved, each on a defined scope and with no other use of the data:
- Vercel — hosting of the site and execution of server code.
- Supabase — the database in which the enquiry is recorded.
- Resend — delivery of the two emails triggered by a submission: the internal notification and your acknowledgement.
- Cloudflare — anti-bot verification of the form, with no advertising cookie.
Transfers outside the European Union
Vercel, Resend and Cloudflare are established in the United States. Any transfer is covered by the European Commission's standard contractual clauses and, where applicable, the Data Privacy Framework.
Security
The database is reachable by no one from the browser: row level security is enabled with no access policy at all, and the only possible write goes through server code. Privileged keys never leave the server.
Your IP address is never stored in clear.
Cookies and analytics
This site sets no analytics cookie, no advertising tracker and no behavioural analysis tool. That is why you are shown no consent banner: there is nothing to consent to.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.
To exercise them, write to contact@digital-kaizen.com. You will receive an answer within one month.
Complaints
If the answer does not satisfy you, you may lodge a complaint with the French data protection authority: Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.