Menu

Privacy Policy

Data controller

ID4US SAS, 21 rue Frédéric Mistral, 38400 Saint-Martin-d’Hères, France, is the controller of personal data described in this policy. Privacy enquiries and requests may be sent to contact@id4us.fr.

Scope of this policy

This policy applies to the ID4US corporate website and to business enquiries sent through the email links displayed on the website. The website does not provide biometric enrolment or authentication and does not collect fingerprint, vascular, liveness or other biometric data from visitors.

Personal data processed

  • Business enquiries: name, professional contact details, company, job title, message content and any information voluntarily supplied by email.
  • Technical and security logs: IP address, date and time, requested page, browser or device information, referrer and security events generated by the hosting infrastructure.

Purposes and legal bases

  • Responding to enquiries, evaluating potential partnerships and taking pre-contractual steps requested by the contact.
  • Managing B2B relationships and relevant follow-up, based on ID4US’s legitimate interest in developing and operating its business.
  • Operating, securing and diagnosing the website, based on ID4US’s legitimate interest in maintaining a reliable and secure online service.
  • Meeting legal, regulatory and evidentiary obligations where applicable.

Recipients

Data is accessible only to authorized ID4US personnel who require it for the stated purposes and to service providers acting on ID4US instructions, including hosting, security and email providers. Data is not sold.

Retention periods

  • Prospect and partnership correspondence is generally retained for up to three years after the last meaningful contact, unless a longer period is required to establish, exercise or defend legal claims.
  • Information relating to an active contractual relationship may be retained for the duration of the relationship and applicable statutory limitation or accounting periods.
  • Technical and security logs are retained only for the period necessary for security, diagnostics and abuse prevention, generally no longer than twelve months, subject to the hosting provider’s documented retention settings.

International transfers

The website is hosted by OVHcloud in France. If another service provider processes personal data outside the European Economic Area, ID4US will require an applicable transfer mechanism and appropriate safeguards.

Cookies and audience measurement

The website uses Google Analytics 4 only after the visitor has actively accepted analytics cookies through the consent banner. Until consent is granted, the Google Analytics tag is not loaded and no analytics data is sent to Google.

When accepted, Google Analytics may process page views, navigation events, device and browser information, approximate location derived from the IP address, and first-party identifiers stored in the _ga and _ga_<container-id> cookies. ID4US configures the tag without Google Signals or advertising-personalization features, limits first-party analytics-cookie lifetime to 13 months, and renews the visitor’s consent choice after six months.

Consent can be withdrawn at any time through the control available in the footer. Further information is available in the Cookie Policy.

Your rights

Subject to applicable conditions, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. You may also withdraw consent where consent is the legal basis.

To exercise your rights, email contact@id4us.fr. ID4US may request reasonable proof of identity where necessary to protect the requester and other individuals.

You may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or through www.cnil.fr.

Security

ID4US applies organizational and technical measures designed to protect personal data, including encrypted HTTPS connections, restricted administration access, security headers, data minimization and controlled access to business correspondence. No internet service can guarantee absolute security.

Policy updates

This policy may be updated to reflect changes to the website, service providers or legal requirements. The date shown at the top identifies the latest version.