Privacy Policy

Last updated: 11 September 2026

1. Data controller

Kevin Lefebvre EI, operating the Initial Infra and Groupe Initial brands, is the controller for processing carried out through this website.

For any privacy question or data request, contact bonjour@initial-infra.com.

2. Data we collect

  • Contact and project forms: name, email address, company, phone number, subject and message.
  • Diagnostic: selected answers, organisation size, current IT setup and optional context.
  • Audience measurement, only after consent: viewed pages, usage events, technical data, measurement identifiers and visual journey reconstruction. Data entered in forms is masked in PostHog replays.
  • Security: IP address, connection information and logs required to protect the website.

3. Purposes and legal bases

  • Answer requests and prepare a proposal: pre-contractual measures or legitimate interest in handling professional enquiries.
  • Manage an existing commercial relationship: contract performance and legal obligations.
  • Measure audience and conversions: consent, which can be withdrawn at any time.
  • Prevent abuse and secure the website: legitimate interest.

4. Recipients and processors

Data is available to authorised Initial Infra staff and to providers strictly required to operate the website and follow up enquiries. It is not sold or rented.

  • PRODISTRIB: website and infrastructure hosting in France.
  • Resend: delivery of form notification emails.
  • HubSpot: contact and commercial follow-up management.
  • Discord: internal notification of new enquiries when the integration is enabled.
  • Google Analytics and Google Ads: audience and conversion measurement, only according to consent choices.
  • PostHog Cloud EU: journey analysis and session replay, only after audience-measurement consent.

5. Retention periods

  • Enquiries and prospects: up to 3 years after the last meaningful exchange.
  • Contract data: for the duration of the relationship and then for applicable statutory periods.
  • Technical security logs: up to 12 months unless an incident requires longer retention.
  • Consent choices: 6 months before the choice is requested again.
  • Measurement data and replays: according to the periods configured in Google and PostHog and limited to the announced purposes.

6. Transfers outside the European Economic Area

Some international providers may process data outside the European Economic Area. Such transfers must rely on an adequacy decision, an applicable recognised privacy framework, or standard contractual clauses with the required safeguards.

7. Your rights

You may request access, rectification, erasure, restriction or portability, and may object to certain processing. You can withdraw tracking consent through the “Manage cookies” link in the footer.

Send requests to bonjour@initial-infra.com. You may also lodge a complaint with the French data protection authority at www.cnil.fr.

8. Security

Technical and organisational measures are applied to reduce unauthorised access, loss, alteration and disclosure. As no system removes all risk, these measures are reviewed as the website and its integrations evolve.