Privacy policy

This policy explains how personal data is handled on vanquor.io (the “Site”). The Site is a marketing site for Vanquor, operated by Izys, SAS registered under SIREN 941 571 960, Carrefour Les 4 Chemins, Route de Marigot, 97133 Saint-Barthélemy, France (the “Controller”). Contact: [email protected].

Data processing performed inside the Vanquor product for clients is governed by each client’s agreement and data-processing addendum — see Data processing (DPA) — not by this policy.

1. Data we collect on this Site

• Demo & contact requests. Name, work email, company, firm type, approximate scale, primary need, timeline and any message you include — provided by you, to respond to your request.
• Request context. With each demo request we record the page the form was submitted from, the page whose “Book a demo” link you followed (a src parameter in the link, not a cookie or any storage on your device), the referring URL if your browser sends one, and the submission timestamp — so we know which part of the site prompted the enquiry and can prepare accordingly.
• Technical logs. Standard server logs (IP address, user agent, requested URL, timestamp) retained briefly for security and abuse prevention.
• Consent choices. Your privacy choices, stored locally in your browser (localStorage), not on our servers.
• Analytics (only with consent). If enabled and consented to, we use privacy-first, cookieless analytics (aggregate page statistics, no cross-site tracking, no advertising identifiers).

We do not run advertising trackers, and we do not sell or share personal information for cross-context behavioural advertising.

2. Purposes and legal bases (GDPR)

• Responding to your enquiry — performance of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest in operating a B2B sales process (Art. 6(1)(f)).
• Security and abuse prevention — legitimate interest (Art. 6(1)(f)).
• Analytics — consent (Art. 6(1)(a)); you may withdraw at any time via “Cookie & privacy preferences” in the footer.

3. Retention

• Demo/contact requests: for the duration of the evaluation and up to 24 months after last contact, unless a client relationship begins. Requests are stored as records on our own server in the country of hosting, under the same 24-month limit, and deleted on request.
• Technical logs: up to 12 months.
• Consent records: for as long as your browser stores them; you can clear them at any time.

4. Recipients and processors

Data is accessed only by the team handling institutional enquiries, and processed by service providers acting on our instructions: site hosting, CRM/lead-management tooling, and (if consented) the analytics provider. Processors engaged by us are bound by data-processing agreements.

So that urgent enquiries are seen quickly, a notification containing the details you submitted is also delivered to our internal team messaging channel (Telegram). That channel is operated by a third party under its own terms rather than under a data-processing agreement with us; if you would prefer your enquiry not to be routed that way, email us directly at [email protected] instead of using the form.

5. International transfers

Where personal data is transferred outside your jurisdiction (including to/from the EU and the US), we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.

6. Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, and withdraw consent at any time. Write to [email protected]. You may also lodge a complaint with your supervisory authority (in France, the CNIL).

7. California notice (CCPA/CPRA)

In the preceding 12 months we have collected the categories described in section 1 (identifiers, professional information, internet activity). We use them for the business purposes in section 2, retain them per section 3, and disclose them to the service providers in section 4. We do not sell personal information and do not share it for cross-context behavioural advertising.

California residents may exercise rights to know, access, correct and delete, free from discrimination, via [email protected]. A “Do Not Sell or Share My Personal Information” control is available in the footer and is honoured even though we do not currently sell or share personal information.

8. Cookies and local storage

• vq-consent-v1 (localStorage, essential): stores your privacy choices. No expiry; clear via your browser or the preferences panel.
• Analytics script (only after consent): cookieless; no persistent identifiers are set on your device.

The Site sets no advertising or third-party tracking cookies.

9. Changes

We will update this policy as the Site evolves (for example, if a CMS or additional analytics are introduced) and revise the effective date above.