Privacy Policy

1. Data controller

The controller of your personal data is LCH AGENCY, a French simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 993 629 146, with its registered office at 50 avenue des Champs-Élysées, 75008 Paris, France, represented by its president, Jean-Charles Lechalier.

2. Data we collect and why

We only collect the data each use requires. For each one, here is what is collected, why, and on which legal basis (Article 6 GDPR). Fields marked as required are needed to reply to you or send you what you ask for; without them, we cannot process your request. The others are optional.

• Automation resource: first name, last name, work email and, if you choose, phone number. Purpose: sending you the resource, then a short series of follow-up emails. Legal basis: your request, to send you the resource; our legitimate interest in offering services related to your business, for follow-up emails sent to a work address, which you can opt out of in one click.
• Cost estimate simulator: first name, email and the figures entered in the simulator (quote volume, average order, margin, contract base, price). Purpose: sending you the details of your estimate and following up on it. Legal basis: your request, to send you the estimate; our legitimate interest, to follow up on it, which you can opt out of in one click. Until you submit the form, your figures never leave your browser.
• Guidance quiz: your answers (role, company size, priority, timeline, budget). No name or email is asked. Purpose: recommending the right offer and understanding our visitors' needs. Legal basis: our legitimate interest.
• Booking a call: name, email and any information you enter in the Calendly booking page. Purpose: organising and preparing our call. Legal basis: steps taken at your request prior to entering into a contract.
• Email exchanges: the content of your messages and your contact details. Purpose: replying to you and following up on our relationship. Legal basis: our legitimate interest.
• Clients: contact details, contract and billing documents. Purpose: delivering and invoicing our services. Legal basis: performance of the contract and compliance with our legal obligations.
• Technical data: IP address and browser type, stored with each submitted form. Purpose: blocking automated submissions and abuse, keeping the site secure. Legal basis: our legitimate interest.

3. Facebook and Instagram ads (Meta)

We run ads on Facebook and Instagram, services provided in Europe by Meta Platforms Ireland Limited. Three mechanisms are involved.

• Instant forms: when you respond to one of our ads, you can fill in a form directly inside Facebook or Instagram, partly prefilled by Meta from your profile. We only receive the information you confirm by submitting it (usually first name, last name, email, phone, company and answers to the questions asked). It is sent automatically to our email tool so we can deliver what you asked for, then handled as described on this page. Legal basis: your request, to send you what you asked for; your consent, given through the form checkbox, for follow-up emails.
• Ads linking to our website: if you click one of our ads, you land on lch-agency.com, where the rest of this page applies.
• Meta Pixel and Conversions API: these tools tell us whether a visit coming from an ad led to an action (form submitted, call booked), so we can measure our campaigns and optimise their delivery. They send Meta browsing data and, for the Conversions API, identifiers such as your email in hashed form, unreadable as is. They are only enabled after you agree through the cookie banner, and send nothing to Meta without that agreement. You can withdraw it at any time from the "Manage cookies" link at the bottom of every page.

For the Meta Pixel and Conversions API, LCH Agency and Meta Platforms Ireland Limited are joint controllers of the collection of data and its transmission to Meta, under Meta's Controller Addendum (facebook.com/legal/controller_addendum): LCH Agency informs you and collects your consent, and Meta handles rights requests about the data it holds. For instant forms, Meta acts as our processor. For how Meta then uses the data on its own services, Meta is solely responsible under its own privacy policy, available at facebook.com/privacy/policy. You can also manage the ads you see from your Facebook or Instagram account settings.

4. Follow-up and prospecting emails

The emails we send after a resource request, an estimate or a Meta form are sent through our email tool, lemlist. Each one contains an unsubscribe link: one click is enough, and sending stops immediately.

We may write to a work email address without a prior request, only to offer services related to the recipient's line of business. We then use their name, role, company name and business contact details, taken from public sources (company website, business directories, LinkedIn). Legal basis: our legitimate interest in prospecting businesses. Every message states where the data came from and lets you object in one click. This data is kept for 3 years from the last contact.

5. Who can access your data

Your data is only accessible to the LCH Agency team and to the technical providers that help us run our services. Unless stated otherwise, these providers act on our instructions, under contracts compliant with Article 28 GDPR. We never sell, rent or trade your data.

• Hostinger International Ltd (Cyprus): hosting of the website and its databases.
• lemlist SAS (France): sending emails, managing contacts and identifying companies that visit the website.
• Calendly LLC (United States): call booking.
• Meta Platforms Ireland Limited (Ireland): delivery and measurement of our ads, instant forms.
• Our automation tool: forwarding contacts from Meta forms to lemlist.
• Where applicable, our accountant and the competent authorities, within the limits set by law.

6. Transfers outside the European Union

Some providers, including Calendly and Meta, may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework these companies have joined or, failing that, by the European Commission's standard contractual clauses. You can ask us for a copy of the applicable safeguards.

7. Retention periods

• Prospects (resource, estimate, Meta form, call with no follow-up): 3 years from your last contact with us. After that, without news from you, your data is deleted.
• Clients: for the whole contractual relationship, then 5 years, the statutory limitation period.
• Invoices and accounting records: 10 years, as required by the French Commercial Code.
• Quiz answers: 3 years.
• Technical data (IP address, browser): kept with the form it relates to, and deleted at the same time.
• Trackers requiring consent: 13 months at most. Your choice to accept or refuse them is kept for 6 months.
• Unsubscribing: your email is kept on a suppression list for 3 years from your request, for the sole purpose of never writing to you again.

8. Cookies and trackers

A cookie, or tracker, is a small file or identifier stored by your browser. Here are the ones this website may use.

• Functional: a setting stored in your browser remembers the light or dark mode you picked. It never leaves your device.
• Visitor identification (lemlist): a script recognises the company the website is viewed from and the pages visited, so we can tailor our conversations with it. Legal basis: your consent. The script only loads if you accept it. Duration: 13 months at most.
• Advertising (Meta Pixel): measures visits and conversions coming from our ads, only if you accept it.
• Call booking (Calendly): when you open the booking calendar, Calendly may set its own cookies, governed by its privacy policy (calendly.com/privacy).

You can block or delete cookies at any time from your browser settings, and withdraw your consent to advertising trackers. Refusing these trackers does not prevent you from using the website.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

• access: knowing what data we hold about you and getting a copy;
• rectification: having inaccurate or incomplete data corrected;
• erasure: having your data deleted;
• objection: objecting to processing, in particular to prospecting, without giving a reason;
• restriction: having processing suspended while a claim is checked;
• portability: receiving the data you provided in a reusable format;
• withdrawing your consent at any time, without affecting processing carried out before;
• giving instructions on what happens to your data after your death.

To exercise these rights, write to contact@lch-agency.com. We reply within one month at most, and may ask you to prove your identity if there is a reasonable doubt. No decision producing legal effects concerning you is based solely on automated processing. LCH Agency has not appointed a data protection officer; contact@lch-agency.com is the single point of contact.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

10. Security

Traffic to and from the website is encrypted (HTTPS). Access to data is limited to the people who need it, access keys to third-party services are kept outside the website code, and forms are protected against automated submissions. In the event of a data breach likely to put you at risk, we will notify the CNIL and, where required, the people concerned.

11. Minors

Our services are intended for professionals. They are not aimed at people under 15, whose data we do not knowingly collect.

12. Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date at the top of the page shows the version in force. If the changes are significant, we will let you know by email or with a notice on the website.