Privacy Policy

Last updated: January 2026

Introduction

Coste Consulting SAS is committed to protecting the privacy of its users. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data Controller

The data controller is Coste Consulting SAS. For any questions regarding data protection, you can contact us at: contact@coste-consulting.com

Data Collected

We may collect the following personal data:

  • Last name and first name
  • Email address
  • Phone number
  • Any other information voluntarily provided via the contact form

Purpose of Processing

Your personal data is collected for the following purposes:

  • Responding to your contact requests
  • Sending information about our services
  • Managing the business relationship
  • Improving our site and services

Legal Basis

Data processing is based on your consent (contact form submission) and/or the legitimate interest of Coste Consulting SAS in managing its business activities.

Data Retention

Your personal data is retained for the duration necessary to fulfill the purposes for which it was collected, and in accordance with applicable legal requirements. Contact form data is retained for a maximum of 3 years from the last contact.

Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

To exercise these rights, please contact us at: contact@coste-consulting.com

Data Security

Coste Consulting SAS implements appropriate technical and organizational measures to ensure a level of security adapted to the risk, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) due to our use of hosting services (Vercel). These transfers are governed by appropriate safeguards in accordance with the GDPR.

Policy Updates

This privacy policy may be updated at any time. We invite you to regularly consult this page to stay informed of any changes.