Privacy

Privacy Policy.

How Impulsa Conseil and Orbiss Inc. collect, use, share, and protect your personal data across this website and our services.

Questions? Reach out via our contact page.

1. Our Commitment

We process your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the French "Informatique et Libertés" law, and applicable regulations in the United States. We commit to:

  • Collecting only strictly necessary data.
  • Processing your data transparently and securely.
  • Allowing you to control and exercise your rights easily.

2. Data Collected

  • Directly collected data: last name, first name, email address, phone number, company name (provided via HubSpot forms).
  • Automatically collected data: IP address, browsing information (pages viewed, clicks, date/time), browser type, and cookies.
  • Professional data: information required for issuing quotes or performing accounting and consulting missions.

3. Purposes and Use of HubSpot

We collect your data to:

  • Respond to your requests via contact forms.
  • Manage our business relationship (emails, calls, commercial follow-up).

HubSpot usage: we use the HubSpot platform (CRM and marketing tools) as a data processor. Data is stored on secure servers. For transfers outside the EU, HubSpot ensures an adequate level of protection through Standard Contractual Clauses approved by the European Commission.

5. Data Sharing and Transfer

We do not sell, rent, or lease your personal data. Your data is only shared with:

  • Our technical service providers (including HubSpot and OVH hosting).
  • Our internal teams within Impulsa and Orbiss.
  • Competent authorities if required by law (specifically regarding regulated accounting activities).

6. Your Rights

Under applicable regulations, you have the following rights:

  • Access and Rectification: view or update your personal data.
  • Erasure: request the deletion of your data when no longer necessary.
  • Object to processing: specifically for marketing purposes.
  • Data Portability: receive your data in a structured, machine-readable format.

To exercise these rights, please reach out via our contact page. You also have the right to lodge a complaint with a supervisory authority (such as the CNIL in France).

7. Data Retention Period

  • Prospects: 3 years from the last contact.
  • Clients: 10 years for contractual data (legal and accounting obligations).
  • Cookies: 13 months maximum.

8. Data Security

We implement strict technical and organizational measures to protect your data, including:

  • Restricted access to data (authorized personnel only).
  • Secure hosting and SSL/HTTPS encryption for all data flows.

9. Cookies and tracking

This site does not use any analytics, advertising, or third-party tracking cookies. We do not run Google Analytics, Meta Pixel, or any similar tools. No personal data is collected, stored, or shared without your explicit consent.

The only cookies set on your device are strictly necessary cookies required to deliver the site:

  • cookie_consent — stores your choice on the cookie banner so we do not show it on every visit (12 months).
  • __cf_bm — set by Cloudflare to distinguish humans from bots and protect the site against malicious traffic. Does not store personal data or track users across sites (30 minutes).
  • __dpl — set by our hosting provider (Vercel) to pin a visitor to a specific deployment during a rollout, ensuring the HTML and JavaScript come from the same version (session).
  • session-id — set by our hosting/edge layer for request routing and load-balancing affinity. Opaque infrastructure token — not a login session and not analytics (session).

If you decline non-essential cookies, nothing additional is ever loaded or tracked. You can change your choice at any time using the "Cookie settings" link in the footer.