Privacy Policy

Effective Date: 26 November 2025

This Privacy Policy governs the collection, processing, and protection of personal data by Navrouzov Consulting ("we," "our," "the Firm") through interactions with our website and advisory services. We process personal data in strict accordance with French law and the General Data Protection Regulation (GDPR).

By accessing this website or engaging with our services, you acknowledge this Privacy Policy.

1. Data Collector

Navrouzov Consulting

Société par actions simplifiée (SAS)

SIRET: 942 531 021 00015

Registered Office: 6 rue d'Armaillé, 75017 Paris, France

Contact: contact@navrouzov.com

The Firm is the data controller for all processing activities described herein.

2. Categories of Data Collected

We collect only data necessary for legitimate advisory and operational purposes.

2.1 Data You Provide

  • Full name, email address, and professional title

  • Organization name and contact details

  • Information submitted via contact forms or consultation requests

  • Documents, correspondence, or materials voluntarily shared during advisory engagements

2.2 Data Collected Automatically

  • IP address, browser type, and device identifiers

  • Pages accessed, duration of visit, and referral source

  • Technical cookies required for site functionality

We do not deploy behavioral tracking, advertising pixels, or third-party analytics beyond what is strictly necessary for site operation.

2.3 Data Obtained from Third Parties

When relevant to advisory engagements, we may collect publicly available professional information or data shared by partners, platforms, or institutional sources.

3. Purposes and Legal Basis for Processing

Data is processed exclusively for the following purposes.

  • Responding to inquiries and engagement requests (Legal basis: legitimate interest and pre-contractual measures)

  • Executing advisory engagements and client relationships (Legal basis: contractual necessity)

  • Sending updates or invitations when authorized (Legal basis: consent

  • Ensuring website security and functionality (Legal basis: legitimate interest)

  • Complying with legal, regulatory, or judicial obligations (Legal basis: legal compliance)

We do not sell, lease, or monetize personal data under any circumstance.

4. Data Sharing and Disclosure

Personal data is disclosed only when operationally necessary or legally required:

Service Providers: Hosting, email infrastructure, and security services operating under strict confidentiality agreements and GDPR compliance.

Legal Authorities: When required by court order, regulatory investigation, or statutory obligation.

Advisory Partners: Only when essential to delivering services and with explicit prior consent.

Cross-Border Transfers: Data is not transferred outside the European Economic Area unless subject to adequate safeguards under GDPR (e.g., Standard Contractual Clauses, adequacy decisions).

5. Data Security

We implement technical and organizational measures to protect personal data:

  • End-to-end encryption for communications

  • Role-based access controls and authentication protocols

  • Secure document management systems

  • Regular security audits and vulnerability assessments

No transmission or storage system is entirely impervious to breach. We cannot guarantee absolute security but maintain industry-standard protections.

6. Data Retention

Personal data is retained only as long as necessary for:

  • Responding to inquiries: Up to 12 months from last contact

  • Managing active engagements: Duration of relationship plus statutory retention periods

  • Legal and fiscal obligations: As required under French commercial and tax law (typically 6-10 years)

Upon expiration, data is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the following rights, exercisable by contacting us at contact@navrouzov.com:

Access: Obtain confirmation of data processing and copies of your personal data.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request deletion when data is no longer necessary or consent is withdrawn (subject to legal retention obligations).

Restriction: Limit processing under specific conditions.

Objection: Object to processing based on legitimate interest.

Portability: Receive your data in structured, machine-readable format.

Withdrawal of Consent: Revoke consent at any time without affecting prior lawful processing.

Complaint: Lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), France's data protection authority.

We respond to requests within one month unless complexity requires extension (maximum three months, with notification).

8. Third-Party Links

The website may contain links to external sites. We are not responsible for the privacy practices or content of third-party websites. Review their policies independently.

9. Amendments

This Privacy Policy may be updated to reflect legal, operational, or technological changes. The effective date will be revised accordingly. Continued use of the website or services following updates constitutes acceptance.

10. Contact

For questions regarding this Privacy Policy or to exercise your rights:

Email: contact@navrouzov.com
Address: 6 rue d'Armaillé, 75017 Paris, France