Privacy Policy

We take the privacy of our customers, partners and website visitors seriously. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it.

01Who we are

This Privacy Policy explains how Smart CIC Global Services SAS (trading as XVOLV), together with its operating companies (XVOLV Connect France SAS, XVOLV Connect Spain SL, XVOLV Connect UK Ltd, SCIC US Inc and Smart CIC Global Services Poland Sp. z o.o.), trading as XVOLV (“XVOLV”, “we”, “us”), collects and uses personal data in connection with this website and our dealings with customers, partners and prospects.

We are the data controller for the personal data described here. Our registered office is 16 Impasse du 11 Novembre, 06400 Cannes, France.

02Scope

This policy covers personal data collected through this website, through enquiry and subscription forms, and in the course of our business relationships. It does not cover third-party websites we link to, which have their own policies.

03Personal data we collect

• Contact and enquiry data — name, business email, telephone, company, role and the content of your message when you complete a form or contact us.
• Marketing data — your subscription preferences and interactions with our communications.
• Technical and usage data — IP address, device and browser information, and pages viewed, collected via cookies and similar technologies (see our Cookies Policy).
• Business-contact data — professional contact details of prospective customers and partners, obtained directly or from public and third-party sources for legitimate B2B marketing.

04How we use it and our lawful bases

We process personal data on the following lawful bases under the GDPR:

• To respond to your enquiries, send you the requested information and provide services.
• To send marketing and relevant business communications — where permitted by applicable law, our legitimate interests in promoting our business, or your consent where required.
• To operate, secure and improve the website — our legitimate interests in running a safe, effective service.
• To meet legal and regulatory obligations — compliance with applicable law.

05Marketing and your choices

Where we send marketing, you can opt out at any time using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not affect communications necessary to provide a service you have requested.

06Sharing your data

We do not sell personal data. We share it only with:

• service providers acting as our processors, under written data-processing terms — for example hosting (Akamai Connected Cloud, EU region), our CDN and security provider (Cloudflare), our CRM (HUB) and our analytics provider (Plausible Analytics, EU-hosted and cookieless);
• our group operating companies where necessary for the purposes above;
• authorities, advisers or acquirers where required by law or to protect our rights.

We do not use personal data collected through this website to make solely automated decisions producing legal or similarly significant effects.

07International transfers

Our systems are hosted in the EU. Where personal data is transferred outside the EEA (for example to our US office or a non-EEA provider), we rely on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

08How long we keep it

We keep personal data only as long as necessary for the purposes above and to meet legal obligations. Enquiry and prospect data gathered for marketing is reviewed on a rolling basis and, where not converted to an active relationship, deleted within a defined retention window.

09Your rights

Subject to the conditions in the GDPR, you have the right to: access your data; have it corrected or erased; restrict or object to its processing; data portability; and to withdraw consent where processing is based on consent.

To exercise any right, contact [email protected]. You also have the right to lodge a complaint with any competent supervisory authority including, in France the CNIL, in Spain the AEPD, and in the UK the ICO.

10Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and hosting under recognised security certifications. No method of transmission is completely secure, and we cannot guarantee absolute security.

11Cookies

This website uses cookies and similar technologies. Please see our Cookies Policy for details and controls.

12Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be notified where appropriate.

13Contact

We have appointed a Data Protection Officer. For any privacy question, or to reach our Data Protection Officer, email [email protected] or write to us at 16 Impasse du 11 Novembre, 06400 Cannes, France.