Skip to content
Digital Kaizen

Privacy policy

What data is collected, why, for how long, and how to exercise your rights.

Last updated :

Data controller

Data sent through this site is processed by the publisher of the site, identified in the legal notice.

Contact
contact@digital-kaizen.com

Data collected

This site collects nothing without your knowledge. The only information gathered is what you enter in the contact form, plus two technical items needed to keep automated submissions out.

  • Full name, required.
  • Work email address, required.
  • Company, optional.
  • Phone number, optional.
  • Type of need, required.
  • A description of your project, required.
  • A fingerprint of your IP address: the address itself is never stored, only a salted SHA-256 hash, used to cap how many messages can be sent per hour.
  • Your browser identifier and the time of sending.

Purpose and legal basis

This data is used solely to answer your enquiry and, where relevant, to continue the conversation it opens. It is never sold, and never used for unsolicited marketing.

The legal basis is your consent, collected through a checkbox that is never pre-ticked. The IP fingerprint and browser identifier rest on the legitimate interest in protecting the form from automated submissions.

Retention

Enquiries are kept for twenty-four months from the last exchange, then deleted automatically. You may ask for deletion before that.

Who has access

Access is limited to the publisher. Four technical providers are involved, each on a defined scope and with no other use of the data:

  • Vercel — hosting of the site and execution of server code.
  • Supabase — the database in which the enquiry is recorded.
  • Resend — delivery of the two emails triggered by a submission: the internal notification and your acknowledgement.
  • Cloudflare — anti-bot verification of the form, with no advertising cookie.

Transfers outside the European Union

Vercel, Resend and Cloudflare are established in the United States. Any transfer is covered by the European Commission's standard contractual clauses and, where applicable, the Data Privacy Framework.

Security

The database is reachable by no one from the browser: row level security is enabled with no access policy at all, and the only possible write goes through server code. Privileged keys never leave the server.

Your IP address is never stored in clear.

Cookies and analytics

This site sets no analytics cookie, no advertising tracker and no behavioural analysis tool. That is why you are shown no consent banner: there is nothing to consent to.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.

To exercise them, write to contact@digital-kaizen.com. You will receive an answer within one month.

Complaints

If the answer does not satisfy you, you may lodge a complaint with the French data protection authority: Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.