Book a demo

Privacy and Cookie Policy

Last updated: 23/07/2026. This policy applies to visitors of https://sustaain.org and to individuals and legal residents of the European Economic Area, the United Kingdom, and Switzerland.

1. Who we are

Sustaain (SAS, SIREN 928 862 002), 1 rue Grangeneuve, 33000 Bordeaux, France, is the data controller for the personal data described in this policy. Contact: contact@sustaain.org.

2. What data we collect and why

Contact and demo request forms (HubSpot): name, professional email address, company, job title, phone number, and the content of your message. Used to respond to your enquiry, provide information about our platform, and, where you have agreed, send you relevant marketing communications.

Website analytics (Google Analytics, Google Search Console): anonymized or pseudonymized data on pages visited, time spent, referral source, device and browser type, and search queries that led visitors to our site. Used to understand how the website is used and to improve it. We do not use this data to identify individual visitors.

We do not collect any data beyond what you actively provide or what is described above.

3. Legal basis for processing

Responding to your enquiries: legitimate interest and, where applicable, performance of pre-contractual steps.

Marketing communications: your consent, which you may withdraw at any time.

Analytics and audience measurement cookies: your consent, collected through the cookie banner described in section 6.

4. Who receives this data

HubSpot, Inc. (CRM, marketing forms, email communications). HubSpot is certified under the EU-U.S. Data Privacy Framework.

Google LLC (Google Analytics, Google Search Console). Google is certified under the EU-U.S. Data Privacy Framework.

OVH SAS (website hosting). Data is hosted within the European Union.

We do not sell personal data to third parties, and we do not share it beyond what is necessary to operate the services listed above.

5. International data transfers

HubSpot and Google are based in the United States and are both certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection for personal data transferred outside the European Union. Where applicable, Standard Contractual Clauses adopted by the European Commission also apply. OVH hosts website data within the European Union.

6. Cookies and similar technologies

When you first visit our website, a consent banner lets you accept or decline nonessential cookies, category by category. Strictly necessary cookies do not require consent and cannot be disabled, as they are required for the website to function.

The table below lists the main cookies placed by the tools used on this website.

Privacy and Cookie Policy

Note: durations are those documented by HubSpot (May 2026) and the CNIL's recommended cap for Google Analytics identifiers. Exact cookie names may vary slightly depending on final technical configuration.

7. Data retention

Contact form submissions and related correspondence: retained for the duration of the commercial relationship, and up to 3 years after the last contact for prospects who do not become customers.

Analytics data: retained for a maximum of 14 months, in line with CNIL guidance.

8. Your rights

Under the GDPR, you have the right to access, rectify, delete, or transfer your personal data, to restrict or object to its processing, and to withdraw your consent at any time. To exercise these rights, contact us at contact@sustaain.org. You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

9. Changes to this policy

We may update this policy to reflect changes in our practices or in applicable law. The date at the top of this page indicates the last update.