Privacy Policy & Data Protection

1. Data Controller (Responsable de Traitement)

The legal controller responsible for processing personal data on lines-up.com is:

2. Categories of Information We Collect

We process only minimal, necessary information required for professional communication, growth audit evaluations, and verified contract execution:

• Identity & Professional Contact Data: Full name, corporate email address, business telephone number, WhatsApp handle, and job title submitted voluntarily via our contact and audit request channels.
• Commercial & Business Context: Company website URL, current monthly advertising budget tier, advertising channels in use, target geographies, and stated marketing bottlenecks.
• Technical & Telemetry Data: Anonymized IP addresses (truncated), browser user-agent, operating system, timestamp of requests, and referral URLs collected for server security and cyber defense diagnostics.
• Aggregated Analytics Data: Anonymous session events collected via Google Analytics 4 strictly under Google Consent Mode v2 without cross-site tracking or third-party data enrichment.

3. Legal Grounds for Processing (Article 6 GDPR)

All data processing operations are conducted under clearly defined lawful bases recognized by the European Union:

• Pre-Contractual & Contractual Performance (Art. 6.1.b GDPR): Processing contact information and project details to prepare requested 20-minute growth audits, conduct scope discussions, and fulfill growth partner service agreements.
• Explicit Consent (Art. 6.1.a GDPR): Loading non-essential analytics (GA4) or conversion attribution tags (Google Ads, Meta CAPI) only after explicit user interaction via compliant consent mechanisms.
• Compliance with Legal & Accounting Obligations (Art. 6.1.c GDPR): Retaining commercial invoices, partner contracts, and accounting ledgers as required by French commercial and tax legislation.
• Legitimate Interests (Art. 6.1.f GDPR): Safeguarding web infrastructure from brute-force intrusions, automated scraping, spam submissions, and fraudulent communications.

4. Cookies & Google Consent Mode v2 (CNIL Guidelines)

Lines-Up strictly implements Google Consent Mode v2. By default, all marketing and analytics tags remain disabled until you make an explicit selection. We do not engage in intrusive remarketing or sell personal profiles to third-party data brokers.

• Strictly Necessary Technical Cookies: Essential for session state, CDN routing (Cloudflare), spam protection, and recording your consent preferences. These cookies do not require prior consent and cannot be turned off.
• Analytics Cookies (GA4): Aggregated audience measurement that helps us understand which case studies and pages are valuable to prospective clients, with IP anonymization activated by default.
• Marketing Attribution Tags: Used solely to measure the efficiency of our own search and social campaigns without storing raw personally identifiable information (PII).

5. Data Retention Periods

Personal information is retained strictly for the duration necessary to accomplish the purposes described above:

• Prospective Client Inquiries & Audit Data: Retained for a maximum period of 24 to 36 months following the date of last contact, after which records are securely purged.
• Accounting & Invoicing Records: Retained for 10 years in strict accordance with Article L.123-22 of the French Commercial Code (Code de commerce).
• Consent Preferences: Retained in local browser storage for a period not exceeding 6 months in compliance with CNIL recommendations.

6. Your Rights Under European Law (Articles 15 to 22 GDPR)

As a data subject in the European Economic Area, you possess comprehensive legal rights regarding your personal information:

• Right of Access (Art. 15): You may request confirmation as to whether your personal data is being processed, and obtain a copy of that data.
• Right to Rectification (Art. 16): You may request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure / Right to be Forgotten (Art. 17): You may request deletion of your personal data where grounds for continued processing no longer apply.
• Right to Restriction of Processing (Art. 18): You may request suspension of data processing under certain legally defined circumstances.
• Right to Data Portability (Art. 20): You may receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object at any time to the processing of your data on grounds relating to your particular situation.

To exercise any of these statutory rights, submit your written request directly to: info@lines-up.com. We will respond within 30 calendar days.

If you consider that our processing of your personal data infringes European regulations, you hold the legal right to lodge a formal complaint with the competent supervisory authority: the French CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr (3 Place de Fontenoy, 75007 Paris, France).

7. Data Security & Server-Side Hygiene

Lines-Up enforces high technical standards across its digital assets:

• All web communications are encrypted in transit using modern SSL/TLS 1.3 256-bit certificates with strict HTTP Strict Transport Security (HSTS) headers.
• Inbound audit communications submitted via encrypted WhatsApp channels benefit from end-to-end encryption protocols.
• We enforce server-side data sanitization to prevent unauthorized telemetry leakage or unvetted third-party JavaScript execution.