Privacy Policy

Last updated: August-8-2026

Who We Are

This website is operated by Medgalia SAS, located in Nantes, France. Our website address is: https://medgalia.com.

For any questions about this policy or your personal data, please use our contact form.

We act as the data controller for the personal data described below, in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

What Personal Data We Collect and Why

Contact Form

When you submit our contact form, we collect the information you provide (such as name and email address) in order to respond to your inquiry. The legal basis for this processing is your consent, given by submitting the form, and/or our legitimate interest in responding to enquiries. This data is processed via WPForms and is not shared with third parties for marketing purposes.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help with spam detection.

An anonymized string created from your email address (a “hash”) may be shared with the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public alongside your comment.

Cookies
This website uses a small number of essential cookies needed for it to function correctly, for example, to remember your selected language (English/French) and to protect our contact form from spam. These cookies do not track you and contain no personal data beyond what’s needed for these purposes. You can remove these cookies at any time via your browser’s settings.

Embedded Content
Some pages may include embedded content (e.g. videos) from other websites. This content behaves as if you visited that other website directly, and that website’s own privacy policy applies to it.

Who We Share Your Data With
Data submitted via our contact form is processed through WPForms, stored in our WordPress database, and may involve third-party services for email delivery. We do not sell your personal data to third parties.

Where Your Data Is Sent
Our website is hosted by HostGator. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, as required by GDPR.

How Long We Retain Your Data
Contact form submissions are retained for 24 months from the date of submission, unless a longer period is required by law.

What Rights You Have Over Your Data
Under GDPR, if you are located in the EU (including France), you have the right to access, rectify, or erase your personal data, restrict or object to its processing, request data portability, and lodge a complaint with the CNIL (https://www.cnil.fr) if you believe your rights have not been respected.

To exercise any of these rights, please contact us via our contact form. We will respond within one month, as required by GDPR.