FR | EN

Privacy policy

At Ixila we attach great importance to protecting your data. Here is how we collect, use and protect it.

1. Data controller

The data controller is IXILA, with registered office at 18 Rue Portalis, 13100 Aix-en-Provence, France.

For any question about your personal data: bienvenue@ixila.com.

2. Data collected

We collect only the data strictly necessary for the stated purposes:

  • Contact form: first name, last name, email address, company, message.
  • Appointment booking form: details required to make the booking (name, email address) and the slot selected.
  • Technical data: IP address (collected for security and abuse prevention), browser type, pages visited.
  • Cookies: see our cookie policy.

3. Purposes of processing

Your data is used to:

  • Reply to your contact request
  • Arrange and confirm the appointments you book online
  • Provide our services and establish our business relationship
  • Ensure site security (rate limiting, abuse detection)
  • Improve our service by analysing site usage (aggregated statistics)

4. Legal basis

Processing is based on:

  • Your consent (contact form, non-essential cookies)
  • Performance of a contract or pre-contractual measures (replying to a business request)
  • Our legitimate interest (site security, anonymised audience measurement)

5. Retention period

  • Contact messages: retained 3 years from the last contact, for commercial purposes.
  • Technical security data (access logs, login attempts): retained 12 months maximum.
  • Analytics cookies: 13 months maximum.

6. Recipients of data

Your data is strictly reserved to IXILA and is never sold to third parties for commercial purposes. It may be processed by our technical sub-contractors (hosting, email sending) bound by confidentiality and GDPR compliance:

  • Hostinger International Ltd. (website hosting) — registered office in Cyprus, servers located in France, GDPR compliant
  • Resend, Inc. (delivery of transactional emails: acknowledgements, notifications) — company established in the United States; the transfer is covered by the safeguards set out in section 7
  • Nowayn, published by SAXHO SARL (online appointment booking form) — 47 Avenue de la Libération, 13850 Gréasque, France, SIREN 532 963 915, parent company of IXILA. Application hosted with Hostinger, servers located in France. Processes the details entered when booking, together with the related confirmations and reminders

7. Transfers outside the EU

Our data is processed within the European Union, with the exception of transactional email delivery, which is handled by Resend, Inc. (United States). That transfer is covered by equivalent GDPR safeguards: standard contractual clauses or an adequacy decision.

8. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights:

  • Right of access to your data
  • Right of rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the CNIL: www.cnil.fr

To exercise these rights, contact bienvenue@ixila.com stating the purpose of your request. We will reply within 1 month maximum.

9. Security

We implement appropriate technical and organisational measures to protect your data: HTTPS encryption, prepared SQL statements, CSRF protection, secure hosting, regular backups, restricted data access.

10. Updates

This policy may be updated to reflect regulatory or service changes. The last update date appears below.

Last updated: 17/09/2026