Legal information

Privacy Policy – MultiPhysX Consulting – MPX

Personal data protection policy of the multiphysx.com website.

(Last Updated: September 2026)

1. Introduction

MultiPhysX Consulting – MPX (hereinafter “we” or “the Company“) is committed to protecting the privacy and personal data of its customers, partners, and visitors to the site https://www.multiphysx.com. This policy explains how we collect, use, share, and protect your personal data.

2. Data Collected

We collect the following data:

  • Identification data: Last name, first name, email address, phone number, postal address (for deliveries or invoices).
  • Professional data: Company name, industry, consulting or product needs.
  • Technical data: IP address, browser type and pages visited, recorded in the server logs and by the site’s security module. Traffic is measured anonymously and without cookies by the Koko Analytics plugin, hosted on our server. No advertising tools are used.
  • Contact data: Email exchanges, contact form submissions, or phone calls.

3. Purpose of Collection

Your data is used for:

  • Executing our contracts: Delivery of products, provision of consulting services, billing.
  • Improving our services: Analysis of customer needs, feedback on our services.
  • Communicating with you: Responding to your requests, sending quotes, invoices, or commercial information (with your consent).
  • Newsletter: sending our news to people who have subscribed.
  • Securing the site: detection of fraudulent login attempts and attacks, technical diagnostics.
  • Measuring traffic: anonymous visit statistics (page views, referring sites), without cookies or individual tracking.
  • Complying with our legal obligations: Accounting, tax declarations.

4. Legal Basis for Processing

  • Performance of a contract (Art. 6.1.b GDPR): For orders, quotes, or services.
  • Consent (Art. 6.1.a GDPR): newsletter subscription, via a checkbox. You can withdraw your consent at any time.
  • Legal obligation (Art. 6.1.c GDPR): Retention of invoices for 10 years.
  • Legitimate interest (Art. 6.1.f GDPR): replying to your contact requests, site security, technical logs and anonymous traffic measurement.

Data Hosting: Our services are hosted by GoDaddy, on servers located in Europe. GoDaddy acts as a processor under the GDPR and is committed to protecting your personal data in accordance with applicable regulations. The data collected via our site is stored on secure servers.

To ensure the security of your information, GoDaddy implements technical and organizational measures, including:

  • Data encryption (SSL/TLS).
  • Protection against unauthorized access.
  • Compliance with international standards (e.g., ISO 27001).

In accordance with the GDPR, GoDaddy has signed a Data Processing Agreement (DPA) with our company, ensuring that your data is processed in compliance with legal requirements. For more information, consult GoDaddy’s privacy policy.

5. Data Sharing

Your data is never sold to third parties. It may be shared with:

  • GoDaddy: hosting of the site and its database, on servers located in Europe.
  • Microsoft (Microsoft 365): email, receipt of contact form messages and storage of site backups (OneDrive). Microsoft participates in the EU–US Data Privacy Framework.
  • Legal authorities: In case of legal obligation (e.g., judicial request).

6. Data Retention Period

  • Customer data: 5 years from the end of the business relationship (for legal or commercial obligations).
  • Prospect data: 3 years from the last contact.
  • Newsletter subscriptions: until you unsubscribe.
  • Technical and security logs: 12 months maximum.
  • Visit statistics: aggregated and anonymous data only.
  • Payment data: Deleted after payment validation (unless legally required to retain).
  • Language cookie: 1 year (see our cookies policy).

7. Data Security

We implement technical and organizational measures to protect your data:

  • Encryption: HTTPS protocol on our site, encryption of sensitive emails.
  • Restricted access: Only authorized employees have access to your data.
  • Backups: regular backups of the site, kept in a secure Microsoft OneDrive storage space.
  • Site protection: two-factor authentication for administration, login attempt limits and security headers.

8. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: Request a copy of your data.
  • Right to rectification: Correct inaccurate data.
  • Right to erasure: Delete your data (subject to legal obligations).
  • Right to restriction: Limit the processing of your data.
  • Right to data portability: Retrieve your data in a structured format.
  • Right to object: Object to the processing of your data (e.g., for marketing purposes).

To exercise these rights, contact us at: frederic.bonnin@multiphysx.com.

9. Cookies

Our site uses only one cookie, which is strictly necessary for it to work:

  • pll_language: remembers the language you have chosen (duration: 1 year).
  • No audience measurement, advertising or social media cookies are used: our traffic measurement (Koko Analytics) works without cookies.

This cookie does not require your consent. You can delete it at any time in your browser settings. To find out more, see our cookies policy.

10. Policy Updates

This policy may be updated. We will inform you of significant changes by email or via a notification on our site.

11. Contact

For any questions:

12. Complaints

If you believe your rights are not being respected, you can file a complaint with the CNIL (www.cnil.fr).