This English translation is provided for information only. The French version is the only legally binding version and prevails in the event of any difference.
Who processes your data
The starleads.co website is published by LOCUTA, a simplified joint-stock company (société par actions simplifiée) registered with the Bordeaux Trade and Companies Register (RCS) under number 884 096 512, Cité Numérique, CS 50045, 406 Boulevard Jean-Jacques Bosc, 33130 Bègles. LOCUTA is the controller for the processing described on this page. For any questions: dpo@starleads.co.
This page concerns visitors to the website. Data processed in the Starleads platform on behalf of customers is covered by the general terms of sale (Article 9) and the general terms of use (Article 7).
The data you give us
- Your contact message: name, email, reason for contact, message and agreement to receive a reply.
- Your appointment: the information entered in Cal.com, the time slot and the sales representative in charge, linked to your Pipedrive deal.
- Your callback request: your phone number, your agreement to be called back, the page you are writing from and where your visit came from (campaign parameters).
- Your answer to “How did you hear about us?”, if you answer it.
- Audience measurement and advertising, only with your consent: pages viewed, interactions, requests sent and bookings accepted. PostHog also makes it possible to replay visits, with input fields masked. Technical visit identifiers remain pseudonymised personal data. See the cookie policy.
Why we use it
- To reply to your message, organise your appointment or call you back for the demo you requested, then follow up on this request with our team.
- To find out which pages and campaigns bring us requests, so that we can improve the website.
The steps needed for a demo, quote or appointment that you request are based on pre-contractual measures taken at your request, where they concern you as a future contracting party. For audience measurement and advertising, we rely on your consent, which you can withdraw. Agreeing to receive a reply to a form does not count as consent to advertising cookies.
To answer general questions and follow up on requests from people who represent a company, LOCUTA relies on its legitimate interest in managing its business relationships. This follow-up remains linked to your request and your business activity. You can object to it at any time by writing to dpo@starleads.co.
Mandatory fields are marked in the forms. Without the contact details needed for your request, we cannot call you back, reply to you or organise the appointment. Rejecting measurement or advertising cookies does not prevent you from contacting us.
Who has access to it
LOCUTA's team and the service providers needed to handle your request: Pipedrive for contacts and sales deals, Vercel for hosting the website, Cal.com for bookings and Make for syncing sales follow-up. The video conferencing service named in your invitation receives the information needed for the appointment.
The Starleads service uses OVH, with replication at Scaleway, according to the technical configuration provided by our team. This information about the platform does not mean that all the website's service providers host their data in France. With your consent, Google, PostHog and Meta are also involved for the purposes described in the cookie policy.
Some service providers may process data outside the European Economic Area. The applicable safeguards depend on the provider and the service used: an adequacy decision or standard contractual clauses, as the case may be. To find out who the recipients are and where the processing takes place, and to obtain the safeguards applicable to your request, write to dpo@starleads.co. The platform's French hosting does not automatically cover the third-party services you use.
We do not sell your data.
How long we keep it
Your cookie choice is stored for 6 months; where your visit came from is stored only after you consent to audience measurement, for a maximum of 90 days. Advertising click identifiers also require your consent to advertising.
Prospect data in Pipedrive is kept for no more than three years from its collection or from the last contact initiated by the prospect, in line with the reference framework of the CNIL (the French data protection authority). A follow-up sent by our team does not restart this period.
Data entrusted by customers in order to use the platform is deleted at the end of the contractual relationship. Only data whose retention is required by law, or needed to defend a right, may be archived separately for that purpose and for the applicable period.
For bookings in Cal.com, LOCUTA keeps the data for 12 months after the appointment. The website's technical logs are limited to 30 days, unless an incident requires keeping the information needed to handle it. Data needed for sales follow-up remains subject to the three-year period stated above. These periods make up our retention policy; service providers' backups follow their contractual deletion cycles.
Your rights
Under the conditions laid down by the General Data Protection Regulation (GDPR) and depending on the legal basis for the processing, you can request access to, rectification, erasure, restriction or portability of your data, or object to its processing. You can object to direct marketing at any time.
You can withdraw your consent at any time, without affecting the processing carried out before the withdrawal. For cookies, use “Manage cookies”; for other requests, write to dpo@starleads.co. We reply within one month. If the complexity or number of requests requires an extension, we will tell you within that same month; the extension cannot exceed two further months.
You can lodge a complaint with the CNIL.
Temporary storage of conversions with Upstash
For the server-side tracking planned for the new version of the website, Upstash provides temporary storage of conversion events and of their transmission status. These events may contain technical identifiers, consent information and hashed contact details; no email address or phone number is stored in plain text in this queue. Events and processing records are kept for a maximum of seven days. Hashed contact details remain personal data. Advertising transmissions remain subject to your consent. At present, server-side sending is disabled.