Privacy Policy
Data Collected
We collect the data you voluntarily submit through the contact form: name, professional email, company, phone (optional), message and consent to processing. When creating an account, we also collect your email address and encrypted password.
Use of Data
Your data is used to respond to your requests, manage your client account, organize appointments, send transactional emails and measure the technical performance of the site. No data is sold or shared with third parties for commercial purposes.
Legal bases
Contact form processing is based on your consent and Cross K's legitimate interest in responding to professional requests. Account and appointment management is based on pre-contractual or contractual measures. Audience measurement cookies are based on your consent.
Recipients and processors
Data is accessible only to authorized Cross K staff. It may be processed by our technical providers: OVH hosting, API and PostgreSQL database, Resend for email, Calendly for appointments and Google Analytics only if you accept audience measurement cookies.
Retention Period
Contact data is kept for 3 years from the last exchange. Account data is kept while the account is active, then deleted or anonymized 1 year after closure. Technical logs and performance measurements are kept for a limited period necessary for security and service improvement.
Your Rights
Under the GDPR, you have the following rights: access, rectification, deletion, portability, restriction and objection to the processing of your data. To exercise these rights, send an email to contact@crossk.fr with 'Personal Data' in the subject line.
Security
We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, hashed passwords, httpOnly authentication cookies, restricted data access and logging of sensitive operations.
Cookies and audience measurement
Strictly necessary cookies support site operation and authentication. Google Analytics cookies are loaded only after you accept them. Conversion events and Core Web Vitals are used to measure journey quality without selling your data.
DPO Contact
For any questions regarding the protection of your personal data, you can contact our Data Protection Officer at contact@crossk.fr. In case of dispute, you can contact your local data protection authority.