Kimoun Kimoun

Privacy Policy — Kimoun

How kimoun.com handles personal data: quote form, audience measurement, cookies, retention periods, GDPR rights.
1. Data Controller   2. Data Collected   3. Purposes of Processing   4. Legal Basis   5. Recipients of Data   6. Retention Periods   7. Cookies and Trackers   8. Your Rights   9. Transfers Outside the European Union   10. Updates  

1. Data Controller  

The data controller for personal data collected via kimoun.com is:

2. Data Collected  

kimoun.com processes three categories of data.

Technical browsing data, collected automatically to enable site operation, administration and security: IP address, date and time of request, resource requested, standard technical information transmitted by your browser (user-agent).

Data submitted via the quote request form (page /en/get-a-quote/): first name, email address, phone number (optional), primary type of need, free-text message, organisation or activity, and explicit consent to be contacted. This data is collected and stored via Brevo (a marketing platform based in France).

Audience measurement data, collected only after your explicit consent via the cookie banner: anonymised visit counts, most-visited pages and traffic sources. No personally identifiable data is associated with these measurements (IP anonymised). No advertising cookies, no cross-site tracking, no commercial sharing.

3. Purposes of Processing  

Data is processed for the following purposes:

  • Operation and security of the website (technical data)
  • Processing your quote requests and related commercial communication (form)
  • Anonymous audience measurement to understand how the site is used and improve it (after consent)

No data is used for advertising, commercial profiling, or resale to third parties.

Each purpose relies on a distinct legal basis under GDPR:

  • Legitimate interest of the publisher in ensuring the proper operation and security of the website (technical data)
  • Pre-contractual measures taken at your request prior to entering into a potential contract (quote form, Art. 6.1.b GDPR)
  • Explicit consent from the user, collected via the cookie banner and withdrawable at any time (audience measurement, Art. 6.1.a GDPR)

5. Recipients of Data  

Data is accessible to:

  • Olivier Watte / Kimoun, data controller
  • Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris — servers in France/EU), sub-processor for the quote form and associated emails
  • OVH (2 rue Kellermann, 59100 Roubaix — servers in France), website hosting provider
  • Google LLC (Mountain View, USA), for audience measurement via Google Analytics 4 and Google Tag Manager, only after consent
  • Google reCAPTCHA for anti-spam protection on the form

No data is sold, transferred or used for commercial prospecting by third parties.

6. Retention Periods  

The following retention periods apply:

  • Server logs (IP addresses, requests): 6 months
  • Qualified quote requests (emails, form): 3 years from the last contact (standard CNIL period for B2B prospecting)
  • Audience measurement data on Google’s side (Google Analytics 4 reports): 14 months maximum
  • Measurement cookies (_ga, ga*, placed on your browser): 2 years maximum (standard GA4 cookie lifetime)
  • Cookie consent choice: 12 months (browser localStorage)
  • Newsletter subscribers (Brevo, if subscribed): until unsubscription or 12 months of inactivity

Beyond these periods, data is deleted or anonymised.

7. Cookies and Trackers  

kimoun.com uses two categories of cookies, clearly distinguished in the “Cookies & audience measurement” banner displayed on your first visit.

Essential cookies (always active, no consent required) — necessary for the proper functioning of the website: navigation, session, preferences (including remembering your cookie choices) and quote form submission. No personal data is transmitted to third parties via these cookies. Duration: session or 12 months for persistent choices.

Audience measurement cookies (subject to your explicit consent) — Google Analytics 4 loaded via Google Tag Manager (identifier GTM-TJ3F8H96). These enable anonymous visit counting, identification of most-visited pages and traffic sources. IP addresses are anonymised. No personally identifiable data, no advertising cookies, no cross-site tracking, no commercial sharing. Browser cookie lifetime: 2 years maximum (data on Google’s side is retained for 14 months — see section 6).

Until you have explicitly accepted, no measurement cookies are placed (Google Consent Mode v2, “denied” by default). You can change your choice at any time via the “Cookie settings” link at the bottom of each page.

The quote form (page /en/get-a-quote/) also uses Google reCAPTCHA v3 (anti-spam) and Brevo (form submission), which may place their own strictly necessary technical cookies — these fall under the “Essential cookies” category above and do not require prior consent.

8. Your Rights  

In accordance with GDPR and French data protection law, you have the following rights over your personal data:

  • Right of access: obtain confirmation that your data is or is not being processed, and receive a copy
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): request the deletion of your data
  • Right to restriction of processing
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object to processing, in particular for commercial prospecting
  • Right to withdraw your consent at any time (cookies, newsletter)

To exercise these rights, write to contact@kimoun.com stating your request. You will receive a response within a maximum of one month.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés — the French data protection authority):

9. Transfers Outside the European Union  

The majority of data processed by the website remains hosted in France (OVH, Brevo).

Some data may however transit to the United States in connection with Google services (Analytics, Tag Manager, reCAPTCHA). These transfers are governed by:

  • The Standard Contractual Clauses of the European Commission
  • Google LLC’s adherence to the EU-US Data Privacy Framework (DPF)
  • IP anonymisation enabled within Google Analytics
  • Google Consent Mode v2, which minimises data transferred in the absence of user consent

10. Updates  

This privacy policy may be amended at any time to reflect changes to the website, its features, or applicable regulations. The current version is the one published at this address.

Last updated: 25 April 2026

For any questions relating to your personal data, write to contact@kimoun.com or consult our legal notice.

On this page: