Privacy Policy

Effective date: October 2025
Last updated: October 2025
Entity responsible: LND Consulting Services (EURL)
Registered address: 14 Rue Voltaire, 92140 Clamart, France
SIREN: 989 603 899
Contact: contact@lnd-consultant.com



1. Purpose of this Policy

This Privacy Policy explains how LND Consulting Services (“LND”, “we”, “our”, or “us”) collects, uses, stores, and protects personal data in the course of providing marketing, campaign-execution, and AI-powered services—such as LiftOff AI™ and AI PCaaS™—to our clients and partners.

LND Consulting Services is committed to complying with the EU General Data Protection Regulation (GDPR), the French Data Protection Act, and relevant local laws in every region where we operate.



2. Data We Collect

We collect and process only the minimum personal data required for legitimate business purposes.
Typical data includes:

  • Name and professional title

  • Company name and business email address

  • Telephone number (work)

  • Job function, sector, or region

  • Engagement data (emails opened, campaign interactions, event participation)

We do not knowingly collect data from individuals under 18 years of age or any sensitive data (religion, health, political opinions, etc.).



3. How We Collect Data

Data may come from:

  • Direct submissions via contact forms or campaign landing pages

  • Email or LinkedIn communications with our teams

  • Event registrations and business meetings

  • Publicly available B2B databases or legitimate third-party lead sources that comply with GDPR

  • Partner or vendor referrals (under contract and data-processing agreements)



4. Lawful Bases for Processing

We process data under one or more of the following lawful bases:

  • Legitimate interest – for B2B marketing, relationship management, and service delivery.

  • Consent – when required for email campaigns or newsletter subscriptions.

  • Contractual necessity – to perform obligations under service agreements.

  • Legal obligation – to meet compliance or regulatory requirements.



5. Purpose of Processing

Personal data is used to:

  • Deliver contracted services and campaign reports

  • Manage client and partner relationships

  • Send relevant professional communications and insights

  • Analyze engagement to improve service quality

  • Comply with legal and regulatory obligations



6. Data Storage and Security

All data is stored on Amazon Web Services (AWS) in EU regions (Paris and Frankfurt).
Security measures include:

  • AES-256 encryption at rest

  • TLS 1.2/1.3 encryption in transit

  • Multi-factor authentication (MFA) for all administrative access

  • Regular access reviews and security audits

Backups are encrypted and retained 30 days before automated deletion.



7. Data Retention

  • Client data: 12 months after project completion, unless otherwise required by contract.

  • Prospect and marketing data: 24 months after last contact.

  • Backups: 30 days.

  • Accounting and contractual data: 10 years (legal obligation).

After expiry, data is securely deleted or anonymized.



8. Data Sharing and Subprocessors

LND Consulting Services does not sell or rent personal data.
We may share data only with trusted subprocessors under GDPR-compliant Data Processing Agreements:

Subprocessor

Purpose

Region

Certification

Amazon Web Services (AWS)

Cloud hosting & storage

EU (Paris / Frankfurt)

ISO 27001, SOC 2, GDPR

Microsoft 365

Business communications

EU

ISO 27001, SOC 2, GDPR





Each provider is contractually required to maintain equivalent security and privacy safeguards.



9. International Data Transfers

All production data remains within the European Economic Area (EEA).
If data must be transferred outside the EEA such transfers are covered by Standard Contractual Clauses (SCCs) and vendor-specific GDPR DPAs.



10. Data Subject Rights

Under GDPR, you have the right to:

  • Access and obtain a copy of your personal data

  • Request correction or deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise your rights, email privacy@lnd-consultant.com.
Requests are handled within 30 days.

11. Cookies and Tracking

Our website uses essential and analytics cookies only.
You can manage or disable cookies through your browser.
We do not use behavioral advertising or cross-site tracking.

12. Data Breach Notification

In the unlikely event of a data breach involving personal data:

  • LND will notify affected clients within 24 hours of confirmation.

  • Where legally required, LND will notify the CNIL (France) within 72 hours, in accordance with GDPR Article 33.



13. Children’s Privacy

Our services and campaigns target business professionals only.
We do not intentionally collect information from persons under 18 years of age.
Any such data discovered will be deleted immediately.



14. Updates to This Policy

This Privacy Policy may be updated periodically to reflect regulatory or operational changes.
The latest version is always available on this page, with revision dates clearly indicated.



15. Contact

For privacy inquiries or to exercise your rights:
contact@lnd-consultant.com
LND Consulting Services – 14 Rue Voltaire, 92140 Clamart, France
Supervisory Authority: CNIL (Commission Nationale de l’Informatique et des Libertés)www.cnil.fr