GDPR & Data Protection

1. Why This Approach?

As IT experts and shared CIO providers, we apply the same security and confidentiality standards that we recommend to our clients:

• No data collected: We don't track your browsing
• No resale: Your information is never shared with third parties
• No profiling: We don't create user profiles
• Natural compliance: Without collection, no complex GDPR obligations

2. What Happens When You Contact Us?

When you fill out our contact form, we only collect information you voluntarily provide:

• First and last name
• Email address
• Phone number (optional)
• Company name (optional)
• Message

Legal basis: Explicit consent (by checking the "I accept..." box)

Purpose: Respond to your contact or quote request

Retention period: Maximum 3 years after last contact

Recipients: Ethan Consulting team only (no subcontractors)

3. hCaptcha: Our Only Technical Cookie

To protect our contact form against spam and bots, we use hCaptcha, a privacy-friendly anti-spam protection service.

hCaptcha may set a technical cookie necessary for its operation. This cookie:

• Is not used for advertising
• Only serves to differentiate humans from robots
• Is GDPR compliant (EU processing available)

More info: hCaptcha Privacy Policy

4. Your GDPR Rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct inaccurate information
• Right to erasure: Delete your data from our systems
• Right to object: Refuse processing of your data
• Right to data portability: Retrieve your data in a usable format

To exercise your rights:

5. Hosting and Security

Your data is hosted with OVH SAS (Roubaix, France), a certified and GDPR-compliant host.

• 🔒 HTTPS encryption: All communications are secured
• 🇫🇷 Data in France: No transfer outside the EU
• 🛡️ Regular backups: Protection against data loss

6. No Data Subcontracting

Unlike many sites, we do not share your data with any external subcontractors (no cloud CRM, no marketing platform, no third-party analytics).

Your information stays in our hands, on our servers, in France.

7. Changes to This Policy

We reserve the right to modify this privacy policy. Any changes will be published on this page with a new update date.

Last updated: January 11, 2026

8. Complaint to the CNIL

If you believe your rights are not being respected, you can file a complaint with the French Data Protection Authority (CNIL):

• 🌐 www.cnil.fr
• 📍 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
• ☎️ +33 1 53 73 22 22