Privacy policy

1. Data controller

Perseus Agency Limited, an Irish company registered under CRO number IE749068, with its registered office at POD 2 The Old Station House, 15A Main Street, Blackrock, Dublin A94 T8P8, Ireland. Contact: lorenzo@perseus.paris.

Data processing is governed by the GDPR (EU 2016/679) and the Irish Data Protection Act 2018. The competent supervisory authority is the Data Protection Commission (DPC), Ireland. Individuals residing in France may also lodge a complaint with the CNIL (French data protection authority) (cnil.fr).

2. Data processed

Website visitors

• Appointment booking (Calendly): name, email, time slot, time zone, collected directly by Calendly.
• WhatsApp messages: if you contact us via the WhatsApp button, your number and the content of the conversation.
• Browsing data: if you accept measurement cookies, aggregated statistics (pages viewed, duration, traffic source), without personal identification.

Clients

Billing and contract management data.

Our clients’ prospects

As part of our marketing and customer relationship management services on behalf of our business clients:

• contact details (name, phone number, email address) collected through our clients’ ad forms, with the prospect’s consent;
• content of WhatsApp conversations between these prospects and our automated systems.

3. Purposes and legal bases

• Responding to your contact or demo request and getting back to you in the context of a business project (legitimate interest).
• Qualifying and following up with prospects on behalf of our clients (legitimate interest and the prospect’s consent when submitting their request).
• Performance of the contract with our clients.
• Anonymized audience measurement (consent).
• Compliance with our legal and accounting obligations (legal obligation).

4. Recipients and processors

Your data is accessible only to the Perseus Agency team. It may be processed by our technical subprocessors:

• Meta Platforms Ireland Ltd (Ireland): WhatsApp Business Platform and Meta Pixel (advertising effectiveness measurement, enabled only with your consent; EU-US Data Privacy Framework).
• Google (Gemini; Google Analytics 4: anonymized audience measurement, IP anonymized, advertising signals disabled, enabled only with your consent).
• Anthropic (Claude).
• Vercel Inc. (USA): web hosting, governed by the European Commission’s Standard Contractual Clauses.
• Supabase (Frankfurt, Germany, EU): database.
• Calendly (USA): appointment booking, covered by Standard Contractual Clauses.

These providers process data according to our instructions and their own data protection commitments. No data is transferred, sold or rented to third parties for commercial purposes.

5. Retention periods

• Contact requests: 3 years from the last exchange.
• Conversations and contact details of our clients’ prospects: duration of the relationship with the client concerned, then 12 months.
• Clients: duration of the contractual relationship + 5 years (commercial limitation period).
• Invoices: 10 years (legal obligation).
• Measurement cookies: 13 months maximum.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time. To exercise a right: lorenzo@perseus.paris, with a response within 30 days. Any prospect can also reply STOP to a WhatsApp message to stop being contacted. You may lodge a complaint with the Data Protection Commission (Ireland) or, in France, with the CNIL (French data protection authority).

7. Data deletion

To request deletion of your data (visitor, prospect or client), write to lorenzo@perseus.paris with the subject “Data deletion”, stating the phone number or email address concerned. We confirm deletion within 30 days at most. A prospect can also reply STOP to any WhatsApp message to stop being contacted.

8. Security

We implement technical and organizational measures to protect your data: TLS encryption, access restricted to what is strictly necessary, regular backups, access monitoring and internal training.

9. Cookies

The site uses a consent banner compliant with CNIL (French data protection authority) guidelines: no non-essential cookie is set before you make your choice. A technical cookie perseus_consent (12 months) remembers your choice. If you accept: Google Analytics 4 (audience measurement, anonymised IP, consent mode) and the Meta pixel (advertising performance measurement) are enabled. If you decline: nothing else is stored. You can change your choice at any time via the cookie banner. See the cookies page for details.

10. Changes

This policy may change. The date of the last update is shown at the top of the page.