Skip to content
Legal

Privacy policy

How SDEN collects, uses, and protects your personal data.

Last updated: May 19, 2026

Scope

This policy explains how SDEN processes personal data collected through this website, in line with applicable data-protection law: the CCPA/CPRA (California), PIPEDA and Quebec's Law 25 (Canada), and the GDPR where it applies.

Data we collect

We collect the data you provide directly when you contact us (your name, email address, company, and the content of your message) and the project intake details you submit through the “Start a project” form.

With your consent, we also collect technical and behavioural data through analytics: pages visited, referrer, UTM parameters and click identifiers (gclid, fbclid, li_fat_id, msclkid), device and browser type, and product-level events (which step of the intake you reached, whether you booked a call). When you reject non-essential cookies, none of this data is collected.

Why we use it

Personal data is used to respond to your enquiries, manage our client relationships, improve the website, and, where applicable, send information you have requested. We do not sell your data.

Legal basis

We process your data on the basis of your consent, the performance of a contract or pre-contractual steps taken at your request, and our legitimate interest in operating and improving our services.

Retention

Personal data is kept only as long as necessary for the purposes described above, and no longer than [PLACEHOLDER: retention period] after our last interaction, unless a longer period is required by law.

Sharing and hosting

The website is hosted on infrastructure operated by SDEN within the European Union. Backend services that receive your project submissions run on our own Jelastic cluster (EU region); we do not use third-party form-as-a-service providers.

With your consent, analytics and marketing tools may transfer technical and behavioural data to their processors: Google (Google Analytics 4 and Google Ads, via Google Ireland Ltd, with possible transfer to the United States), PostHog (EU-region hosting), LinkedIn (LinkedIn Ireland), Meta (Meta Platforms Ireland). International transfers rely on the EU–US Data Privacy Framework and Standard Contractual Clauses.

Your rights

You have the right to access, rectify, erase, and port your data, to restrict or object to its processing, and to withdraw your consent at any time.

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

Contact

For any question about this policy or the processing of your data, contact SDEN at [email protected].