Privacy
The information needed for your request, who receives it and your rights. Updated 30 October 2026.
Controller and contact
Aimal MOHAMED, a French sole trader trading as CyberLifeCycle, is the controller for the processing described here. SIREN: 941 082 026. Address: 27 impasse des Réfractaires et Maquisards, 31100 Toulouse, France. For data-related questions or requests: contact@cyberlifecycle.fr.
Contact and training requests
Your name, email address and message allow us to assess your needs and respond. Company and job title are optional. The training form also collects request type; participant count is required for team quotes. Phone is optional unless you explicitly request a callback.
This information is used with the consent you express in the form to process the request and continue the conversation you requested. You may withdraw consent by contacting the address provided. The form does not subscribe you to a newsletter or trigger an order, payment or automated prospecting campaign. Without required fields and consent, the request cannot be saved; you can contact us directly.
Do not send passwords, sensitive inventories, client SBOMs, production logs or health data through these forms. Technical exchanges for an engagement are governed separately.
Online assessment
To display the results of the free assessment, you provide a work email address, your company phone number and company name. Your 15 answers and the resulting score are stored with these details.
This information is used to show your results and to contact you about your assessment, based on the consent given in the form. Receiving information about vulnerability management requires a separate, optional consent. It is kept for up to 12 months after the last exchange, then deleted. You can withdraw your consent at any time by writing to the contact above.
Recipients and hosting
Requests are accessible to the founder and expressly authorised administrators only. The website and database are hosted in France on the PulseHeberg VPS. Supabase runs on that server; the production database is not entrusted to Supabase Cloud. These forms send no automatic emails.
Email correspondence uses the OVHcloud mailbox associated with contact@cyberlifecycle.fr.
Request access is restricted to authorised administrators. Technical protections limit abuse attempts. No automated decision with legal effects is made from your request.
Request retention
Contact and training requests that do not lead to further engagement are kept for no more than 12 months after the last exchange, then deleted by the administrator. This also covers online assessments and their attribution. The controller ensures deletion at the end of that period.
If a contractual relationship begins, necessary information becomes part of the engagement file; its purposes and retention periods are specified separately according to the documents and applicable obligations.
Daily database backups follow a 14-day rotation. Information deleted from the active database may therefore remain in a backup until rotation. Backup access is restricted and backups are not used for prospecting.
Optional source attribution
Campaign or source codes may be offered in the form. They are attached only through a separate optional choice. You can inspect and correct them before submission. Declining does not prevent processing your request.
This mechanism stores no browsing history in browser storage. Submitted codes stay linked to the request for its retention period; you may withdraw consent to attribution. Codes must not contain prospect names, emails, budgets or confidential information.
Documents, blog and estimator
The company overview and training syllabus are directly accessible without contact details or a saved request. The blog adds no subscription or advertising tracker. Opening a LinkedIn link takes you to a separate service governed by its own terms; no message is sent automatically.
Cost-estimator inputs are calculated solely on the page. They are not sent to a server or kept in browser storage.
Technical data and cookies
Technical connection data is used for website security and abuse prevention. Application counters use pseudonymised identifiers. Technical logs may be retained for security and troubleshooting.
Public pages install no audience measurement, advertising pixels or session recording. The clc-language cookie retains your French or English choice for one year without browsing history. Administration cookies support authentication. The Cookies page explains their operation.
Exercising your rights
You may request access, rectification, erasure, restriction of processing and, where applicable, portability. You may withdraw consent at any time without affecting previous processing. Write to contact@cyberlifecycle.fr with your request; do not routinely attach an identity document.
If you believe your rights are not respected, you may complain to the CNIL, including through cnil.fr. A new purpose or provider change involving different processing requires this information to be updated.
References
Version dated 30 October 2026.