Privacy policy
This English version is provided for information. The French privacy policy is the reference version.
Last updated: 3 November 2026
This policy explains what personal data C86 (Cabinet 86) processes, why, for how long, and what your rights are, under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.
1. Data controller
C86, EURL with share capital of €3,000, RCS 911 902 435, whose registered office is shown in our legal notice, represented by Benjamin Gateau, managing director.
For any question about your data: benjamin@cabinet86.com.
C86 has not appointed a data protection officer, as this is not mandatory for its activity.
2. Data, purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your requests (email, WhatsApp, phone) | name, email, phone, company, message | legitimate interest in answering requests | 3 years after the last exchange |
| Orders and delivery of services, including the AI Reputation Audit | client identity and contact details, company information, material provided for the assignment | performance of a contract or pre-contractual steps | term of the relationship, then 5 years (limitation period) |
| Invoicing and accounting | billing data | legal obligation | 10 years (French Commercial Code, Art. L.123-22) |
| Applications and partnership proposals (“Careers” form) | first name, last name, email, message, LinkedIn link | pre-contractual steps and legitimate interest | 2 years after the last exchange, unless you ask for deletion |
| Business-to-business prospecting | name, business email, job title, company | legitimate interest, with the right to object at any time | 3 years after the last exchange |
| Website audience measurement | visitor ID, pages viewed, technical data | consent, collected through the cookie banner | 13 months maximum for the cookie |
| Website security | IP address, technical logs | legitimate interest | period set by the host |
As part of our monitoring and online reputation assignments, we may look at public information about people mentioned online. We do so on behalf of our clients, within the limits set by the assignment contract, and this information is deleted or returned at the end of the assignment.
3. Recipients
Your data is used by the C86 team. Where necessary, it may be shared with:
- Squarespace, which hosts the website, its forms and its statistics;
- our email, invoicing and accounting providers;
- WhatsApp (Meta group), if you choose to contact us that way;
- members of our team in Paris and Abidjan working on your request;
- administrative or judicial authorities, when the law requires it.
Our providers act on our instructions. We do not sell your data.
4. Transfers outside the European Union
Some data may be processed outside the European Union:
- in the United States, by some of our providers (including Squarespace and Meta). These transfers rely on the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) or on the European Commission’s standard contractual clauses;
- in Côte d’Ivoire, by our Abidjan office. As there is no adequacy decision for this country, these transfers are covered by the European Commission’s standard contractual clauses.
You can obtain a copy of these safeguards by writing to benjamin@cabinet86.com.
5. Your rights
You can ask to access, correct or erase your data or to restrict its processing, object to its processing (including for prospecting), ask for its portability, withdraw any consent at any time, and set instructions on what happens to your data after your death.
Write to benjamin@cabinet86.com. We reply within one month. If we have reasonable doubts about your identity, we may ask for proof.
You can also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the data protection authority of your country.
6. Cookies
The cookies used on the website and how to change your choice are described in our cookie policy.
7. Security
We take appropriate technical and organisational measures to protect your data: access limited to those who need it, strong passwords, encrypted connection (HTTPS).
8. Updates
This policy may change. The date of the latest update is shown at the top of this page.