This policy explains what personal data AUDU Consulting (“we”, “us”) collects through auduconsulting.com, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and French data protection law.

Who is responsible for your data

AUDU Consulting, a consultancy based in France, is the data controller for the personal data described here. For any question about this policy or your data, email us at info@auduconsulting.com.

What we collect and why

Newsletter

If you subscribe to our newsletter, we store your email address, your subscription status, the dates you signed up, confirmed and (if applicable) unsubscribed, and a random code used in your confirmation and unsubscribe links. We use this only to send you our newsletter.

Legal basis: your consent (GDPR Article 6(1)(a)). We ask you to confirm your subscription by email before we send you anything, and every newsletter contains a link to unsubscribe in one click.

To stop spam, our newsletter and contact forms use Google reCAPTCHA. It loads only once you start using a form, and Google then collects information such as your IP address, browser details and how you interact with the page to judge whether you’re a person. We only receive a score, not that information. Legal basis: our legitimate interest in protecting our forms from abuse (Article 6(1)(f)). Google’s Privacy Policy and Terms of Service apply.

When you contact us or book a call

If you email us or use the contact form, we keep your name, email address, company (if you give it) and message to reply and to follow up on your request. Messages from the contact form are delivered to our inbox by email.

Free consultation calls are booked through Calendly, which collects the details you enter in its booking form under its own privacy policy. If you allow it, our contact page shows Calendly’s booking calendar directly; otherwise the booking button opens Calendly in a new tab.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b)), or our legitimate interest in answering enquiries (Article 6(1)(f)).

Visiting the website

Like any website, our hosting providers process technical data such as your IP address and browser details in order to deliver pages and protect the site against abuse. We don’t use analytics, advertising or tracking tools, and we don’t build profiles of visitors.

Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)).

Cookies

We don’t use analytics or advertising cookies. When you first visit, we ask whether you’re happy for our contact page to show Calendly’s booking calendar, which sets Calendly’s own cookies. We remember your answer in your browser’s local storage (audu-consent) so we don’t ask again, and you can change it at any time with “Cookie settings” at the bottom of every page.

These don’t need your consent because they’re strictly necessary:

  • Google reCAPTCHA may set its own cookie (_GRECAPTCHA) when you use one of our forms, to tell people and bots apart.
  • In the private administration area only, cookies keep authorised staff signed in (audu_admin, up to 7 days) and secure the Google sign-in process (google_oauth_state and google_code_verifier, 10 minutes).

Who we share your data with

We never sell your data. We use these service providers, who process it only on our instructions:

  • Vercel: hosts the website.
  • Cloudflare: stores our database (including newsletter subscribers) and blog images.
  • Resend: delivers our confirmation and newsletter emails, and messages from our contact form.
  • Calendly: handles call bookings, including the booking calendar on our contact page if you allow it.
  • Google: provides reCAPTCHA spam protection on the newsletter form, and sign-in for our administrators.

Some of these providers are based in, or process data in, the United States. Where data leaves the European Economic Area, it’s protected by the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

  • Newsletter subscribers: for as long as you stay subscribed.
  • After you unsubscribe, we keep your email address and the date you unsubscribed, marked as unsubscribed, so we can prove we honoured your request and never email you again. Ask us and we’ll delete it entirely.
  • Emails you send us: for as long as needed to handle your request and any resulting work together.

Your rights

Under the GDPR you can ask us to:

  • access the personal data we hold about you and get a copy of it;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to how we use it;
  • transfer it to another organisation (data portability).

You can withdraw your consent to the newsletter at any time using the unsubscribe link in any email; this doesn’t affect anything we did before you withdrew it. To exercise any other right, email info@auduconsulting.com. We reply within one month.

If you think we’ve mishandled your data, you can complain to the French data protection authority, the CNIL (www.cnil.fr), or the authority in the country where you live.

Security

Data is encrypted in transit, access to our database requires a secret key, and only authorised staff can sign in to our administration area.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. For significant changes affecting newsletter subscribers, we’ll let you know by email.