Website, services & events privacy policy.

1. Who we are

The data controller is QUIVIDI SAS, 74 rue du Rocher, 75008 Paris, France (RCS Paris 490 937 422).

Our Data Protection Officer can be reached at privacy@quividi.com or by post at the address above, marked “For the attention of the DPO”.

For the LinkedIn Insight Tag (section 5), Quividi and LinkedIn Ireland Unlimited Company act as joint controllers for the collection of data on our website. LinkedIn is responsible for its own processing after that.

2. What data we collect and why

Contact form

• Data: Topic, first and last name, work email, company, website (optional), country, role, number of screens (optional), message.
• Purpose: Answer your request, follow up on a commercial enquiry.
• Legal basis: Pre-contractual steps / our legitimate interest in answering business enquiries.

Newsletter

• Data: Work email, first and last name, job title, company, country.
• Purpose: Send our newsletter and product news, tailored to your region and role.
• Legal basis: Your consent (you can withdraw it at any time).

Events

• Data: Name, work email, company, job title, country; meeting notes when you meet our team.
• Purpose: Manage registrations and meetings, follow up after the event.
• Legal basis: Legitimate interest (B2B prospecting) or consent when collected through a registration form.

Customer accounts

• Data: Name, work email, company, username, phone number (for two-factor authentication), billing information.
• Purpose: Provide the services, support, security, invoicing.
• Legal basis: Performance of the contract; legal obligations (accounting).

Website browsing: essential

• Data: Technical data needed to display the site, protect the forms from spam, and remember your cookie choice.
• Purpose: Run and secure the website.
• Legal basis: Our legitimate interest; exempt from consent.

Website browsing: analytics

• Data: Pages viewed, device, browser, approximate location, interactions (Google Analytics).
• Purpose: Measure and improve the website.
• Legal basis: Your consent.

Website browsing: marketing

• Data: Visit data matched with LinkedIn members (LinkedIn Insight Tag).
• Purpose: Measure the performance of our LinkedIn campaigns and show relevant ads to website visitors.
• Legal basis: Your consent.

We only collect business contact data. Please do not send us sensitive data through our forms.

3. Who receives your data

Only Quividi teams who need the data receive it: sales, marketing, support and management. The service providers below also receive it, acting on our instructions:

• Webflow, Inc. (USA): website hosting, form submissions and spam protection, including through its subprocessor Cloudflare (Turnstile).
• Salesforce, Inc. (USA): our CRM.
• Intuit Mailchimp (USA): newsletters and email campaigns.
• Google Ireland Ltd / Google LLC: Google Analytics (with your consent only).
• LinkedIn Ireland Unlimited Company: LinkedIn Insight Tag (with your consent only), acting as joint controller (see section 1).

We never sell your personal data.

4. Transfers outside the European Union

Some of these providers are based in the United States or can access data from there. Transfers rely on the EU–US Data Privacy Framework where the provider is certified. Otherwise, they rely on the European Commission’s Standard Contractual Clauses, with additional safeguards where needed. You can ask us for a copy of these safeguards at privacy@quividi.com.

5. Cookies and similar technologies

When you first visit, a banner lets you accept all cookies, reject all non-essential cookies, or choose by category. You can change your choice at any time with the Cookie settings link at the bottom of every page. We keep your choice for 6 months, then ask again. Refusing is as easy as accepting and has no effect on your access to the site.

Essential: Quividi

• Cookies: qv_consent (browser storage).
• Purpose: Remember your cookie choice.
• Lifetime: 6 months.

Essential: Webflow forms (Cloudflare Turnstile)

• Cookies: Cloudflare security cookies.
• Purpose: Protect forms against spam and bots.
• Lifetime: Session to 30 minutes.

Analytics (with consent): Google Analytics 4

• Cookies: _ga, _ga_<ID>.
• Purpose: Audience statistics: pages viewed, traffic sources, device.
• Lifetime: Up to 13 months.

Marketing (with consent): LinkedIn Insight Tag

• Cookies: bcookie, bscookie, lidc, li_gc, li_sugr, UserMatchHistory, AnalyticsSyncHistory (and li_fat_id if LinkedIn’s first-party cookie option is enabled).
• Purpose: Conversion measurement, retargeting, and aggregated statistics on visitors’ professional profiles (job, industry, company size).
• Lifetime: From 24 hours to 2 years; see LinkedIn’s cookie table.

Before you consent, no analytics or marketing tag is loaded.

Google Analytics. We use Google Analytics 4 with IP addresses not stored. Event and user data are kept for 14 months, the Google Analytics cookie expires after 13 months and is not renewed by later visits, and Google signals and ad personalisation are disabled. Google’s privacy policy.

LinkedIn Insight Tag. LinkedIn only gives us aggregated, anonymised reports; we do not see which LinkedIn members visited the site. If you are logged in to LinkedIn, you can also manage LinkedIn advertising in your LinkedIn settings. LinkedIn’s privacy policy and cookie policy.

6. How long we keep your data

• Prospects and contacts (forms, events, newsletter): 3 years after the last contact coming from you. We may then ask whether you want to stay in touch; if not, we delete or anonymise the data.
• Newsletter: until you unsubscribe. After that, we keep only your email in a suppression list, so that we never contact you again.
• Form submissions stored in Webflow: deleted once transferred to our CRM, and in any case after 12 months.
• Customer data: for the duration of the contract, then 5 years (limitation periods). Invoices are kept 10 years (French accounting law).
• Cookies and consent choice: see section 5.

7. Your rights

Under the GDPR, you can:

• access your data;
• have it rectified or erased;
• restrict or object to its processing, including at any time and without reason to direct marketing;
• receive your data in a portable format;
• withdraw your consent at any time. Withdrawal does not affect processing carried out before it.

You can also give us instructions on what should happen to your data after your death.

To exercise your rights, email privacy@quividi.com. We answer within one month. We may ask for proof of identity if we have a reasonable doubt.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

If you think your rights have not been respected, you can lodge a complaint with the CNIL or with the supervisory authority of your country.

United States residents. Quividi Inc. (a Delaware corporation) serves our US clients. Residents of California and other US states with privacy laws have similar rights: to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. You can exercise them at privacy@quividi.com. We do not sell personal information. Where the LinkedIn Insight Tag counts as “sharing” for cross-context behavioural advertising, you can opt out by rejecting marketing cookies.

8. Security

We protect your data with appropriate technical and organisational measures:

• encrypted connections (HTTPS);
• access restricted to authorised staff;
• two-factor authentication on our tools;
• contracts with our providers that include data protection clauses.

9. Other websites

Our site links to other websites, such as LinkedIn and event organisers. Their own privacy policies apply.

10. Changes

We update this policy when our practices or the law change. The date at the top shows the latest version. We will announce significant changes on this page.

11. Contact

For any question about this policy or your data, write to privacy@quividi.com.