Privacy Policy
Last updated: [À COMPLÉTER : date de mise en ligne]
This page explains what personal data we collect on hiclix.com, why, how long we keep it and how to exercise your rights. We collect as little data as possible: only what we need to respond to your request.
1. Who is responsible for your data?
The data controller is Nach Consulting, Tarek Nachnouchi's business, which operates the Hiclix brand.
- Publisher: Nach Consulting
- SIREN: 445 026 776
- SIRET: 445 026 776 00036
- Service area: Gradignan, Bordeaux, Gironde
- Email: nach@hiclix.com
- Phone: +33 6 86 24 64 41
Hiclix is an independent business. We have not appointed a Data Protection Officer (DPO). For any question about your data, write to nach@hiclix.com.
2. What data do we collect?
Through the contact form
- Full name
- Company name (optional)
- Email address
- Phone number (optional)
- The need you select and your preferred language
- The content of your message
By email
The data you choose to send us: your email address, your name, and the content of your messages and attachments.
Through call booking (Calendly)
The "Book a call" button is a plain link to https://calendly.com/nach-hiclix. It opens Calendly's website: no Calendly widget is embedded in our pages. When you book a call, Calendly collects your name, your email address, the time slot you choose and your answers to any questions on the booking form.
Technical data
When you visit the site, our hosting provider, Vercel, records technical data (IP address, browser type, pages requested, date and time). This is used to run and secure the site.
Analytics
We use Vercel Analytics to understand site traffic. It sets no cookies. See section 7.
We do not collect sensitive data. Please don't include any in your messages.
3. Why do we use this data?
| Purpose | Legal basis |
|---|---|
| Responding to your contact request | Pre-contractual steps taken at your request, or our legitimate interest in replying to messages we receive |
| Organising and holding a call booked via Calendly | Pre-contractual steps taken at your request |
| Following up and, where relevant, preparing a proposal | Pre-contractual steps, then performance of the contract |
| Running and securing the site | Legitimate interest |
| Measuring site traffic with anonymous statistics (Vercel Analytics, no cookies) | Legitimate interest |
| Meeting our legal obligations (accounting, invoicing) | Legal obligation |
We do not use your data for automated marketing. We don't sell or rent it. We make no automated decisions about you.
4. Who has access to your data?
Your data is processed only by Tarek Nachnouchi (Nach Consulting, Hiclix). It may also be processed by technical providers acting on our behalf as processors:
- Website hosting and analytics: Vercel Inc. (United States), which hosts the site and provides Vercel Analytics
- Delivery of contact form messages and emails: Resend (United States)
- Call booking: Calendly LLC (United States), for call bookings
These providers use your data only to deliver their service.
5. Is your data transferred outside the European Union?
Vercel, Resend and Calendly are based in the United States, so your data may be transferred there. These transfers are covered by safeguards provided for by the GDPR: the provider's certification under the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses. [À CONFIRMER : garantie applicable pour chaque prestataire]
6. How long do we keep your data?
| Data | Retention period |
|---|---|
| Contact requests and email exchanges that don't lead to a project (prospects) | 3 years after your last contact, in line with the CNIL's recommendation |
| Calls booked via Calendly (prospects) | 3 years after your last contact, in line with the CNIL's recommendation |
| Client data | For the duration of the engagement, then 5 years (limitation period) [À CONFIRMER] |
| Accounting records and invoices | 10 years (legal obligation) |
| Website technical logs | Period applied by our host, Vercel [À CONFIRMER : durée selon l'offre Vercel] |
| Analytics (Vercel Analytics) | No data that identifies you is kept: the technical visit identifier is discarded after 24 hours; only aggregated statistics are kept |
At the end of these periods, data is deleted or anonymised.
7. Cookies and analytics
hiclix.com sets no analytics cookies, no advertising cookies and no third-party cookies. That's why there is no cookie banner.
- Analytics: we use Vercel Analytics, which works without cookies. It produces anonymous, aggregated statistics (pages viewed, country, device type, referring site). Each visit is recognised by a technical identifier calculated from the request, valid for one day and discarded after 24 hours. It cannot track you from one day to the next, or from one website to another.
- Call booking: Calendly is not embedded in our pages. The "Book a call" button is a plain link, so Calendly sets no cookies on hiclix.com. If you click the link, you land on Calendly's website, which applies its own privacy and cookie policy.
- If we change tools and a new tool needed cookies that require consent, we would add a cookie banner before turning it on, and update this page.
8. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights:
- Access: find out what data we hold about you and get a copy.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete your data.
- Restriction: ask us to pause the use of your data.
- Objection: object to processing based on our legitimate interest, including analytics.
- Portability: receive your data in a readable format, or have it sent to a third party.
- Withdrawal of consent: at any time, for processing based on your consent.
- Post-mortem instructions: decide what happens to your data after your death.
To exercise these rights, write to nach@hiclix.com. We will reply within one month at most, as required by the GDPR. If we have reasonable doubts, we may ask you to prove your identity.
9. Complaints to the CNIL
If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr, or with the supervisory authority in your country of residence. We'd encourage you to contact us first: we'll do our best to find a solution.
10. Security
We take reasonable measures to protect your data: secure connection (HTTPS), restricted access, protected accounts, and providers chosen for their security standards.
11. Changes
We may update this policy, for example if we change tools. The date of the last update is shown at the top of the page.
12. Contact
A question about your data? Write to nach@hiclix.com. See also our legal notice →