Privacy Policy

1. Data Controller

The data controller is PAGEONEBOOST, whose registered office is located at 54 rue de Ponthieu, 75008 Paris, France. For any question regarding your data, you may write to us at contact@pageoneboost.com.

2. Data We Collect

We collect only the strictly necessary data:

• Contact data you send us via the form: name, company, email address, phone number, company size, estimated budget and the content of your message.
• Browsing data: pages visited, audience measurement data and technical information (device type, browser), collected where applicable via cookies.
• The content of your exchanges with our conversational assistant, when you choose to use it: the text you enter and the response generated. These exchanges are recorded under a non-reversible technical identifier, without retaining your IP address. Please do not share any confidential or sensitive information in them.
• Open and click statistics for our business e-mails (quotes, contracts, audit reports): opening date and link clicked, measured by our sending provider. Indicative data used solely to follow up on our exchanges — never for profiling.
• Sign-in and activity data for the professional areas (partners, agencies, internal team): last sign-in date, online presence, daily usage time and daily action counts, used for team management purposes. The content of your work is neither recorded nor analysed.

We do not collect any 'sensitive' data within the meaning of Article 9 of the GDPR.

3. Purposes and Legal Bases

• Responding to your enquiries and handling sales follow-up — legal basis: pre-contractual measures and legitimate interest.
• Performing our SEO services — legal basis: performance of contract.
• Measuring and improving website traffic — legal basis: your consent.
• Answering your questions via our conversational assistant and keeping a record of the answers it gave you — legal basis: legitimate interest (service quality and evidence of the information provided under our brand).
• Complying with our legal obligations (accounting, tax) — legal basis: legal obligation.

4. Data Recipients

Your data is intended for the authorised teams of PAGEONEBOOST. It may be shared with our technical subcontractors acting on our instructions and providing guarantees compliant with the GDPR: hosting provider, content delivery network, email sending service, payment provider, audience measurement tool and the provider of the artificial intelligence model that powers our conversational assistant (Anthropic, United States). The up-to-date list of our subcontractors, together with their role and country of hosting, is published in our trust centre. We never sell or rent your data to third parties.

5. Retention Period

• Prospects: contact request data is retained for 3 years from the last contact.
• Clients: throughout the contractual relationship, then in accordance with statutory limitation periods and accounting obligations (up to 10 years for accounting records).
• Conversations with the site's conversational assistant: 90 days, pseudonymised and encrypted. Exchanges between our business partners and their dedicated assistant are retained for 3 years, as evidence of the business relationship.
• Cookies: 13 months maximum, see our cookie policy.

6. Your Rights

In accordance with the applicable regulations, you have the following rights over your data:

• Right of access and information;
• Right of rectification;
• Right to erasure ('right to be forgotten');
• Right to restriction of processing;
• Right to object, in particular to direct marketing;
• Right to data portability;
• Right to withdraw your consent at any time;
• Right to define instructions regarding the fate of your data after your death.

7. Exercising Your Rights

You may exercise these rights by writing to us at contact@pageoneboost.com, providing proof of your identity. We commit to responding within a maximum period of one month.

8. Complaint to the CNIL

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr.

9. Security

We implement appropriate technical and organisational measures (communications encryption, access control, secure hosting) in order to protect your data against any loss, unauthorised access, disclosure or alteration.

10. Transfers Outside the European Union

Our servers and backups are located within the European Union. Some of our subcontractors do, however, process data in the United States: the provider of the artificial intelligence model that powers our conversational assistant (Anthropic), our content delivery network, our email sending service and our payment provider. In practice, the text you enter into the assistant is transmitted to this provider in order to generate the response. These transfers are governed by the European Commission's standard contractual clauses, supplemented where applicable by certification under the EU-U.S. Data Privacy Framework. The details for each subcontractor are published in our trust centre.

11. Amendments

This policy may be updated at any time to reflect legal developments or changes in our practices. The date of the last update appears at the top of the page.