Privacy

Lean Trade International is based in France, so this site is governed by the EU General Data Protection Regulation (GDPR) and the French Data Protection Act. This page explains, in plain terms, what we collect and what you can ask us to do about it.

Who is responsible

The data controller is Lean Trade International, at Now Toulouse, 33 Piste des Géants, 31400 Toulouse, France.

For anything on this page, including any request about your data, write to [email protected].

What we collect, and why

We only collect what you type into one of the two forms on this site. There is no account to create, no profile built in the background, and no tracking of what you read.

If you request a quotation

The form at /quotation asks for the product or category, the approximate volume, the destination port or country, your company name, an email address or a WhatsApp number, and anything else you choose to add.

We use it to prepare a quotation and to reply to you. The legal basis is that processing is necessary to take steps at your request before entering into a contract.

If you apply for a role

The application form on each careers page asks for your name, email address, where you are based, your years of experience, the languages you work in, a link to your CV, and an optional short note. If you send your CV by email instead, we hold the file itself on the same terms.

We use it to assess your application and to contact you about it. The legal basis is that processing is necessary to take steps at your request before entering into a contract of employment.

If you are not selected, we delete the application email and anything attached to it within twelve months of receiving it, unless a legal obligation requires us to keep it longer. If another role opens in that time and your application suits it, we may come back to you about it — and you can ask us to delete your application at any point before then, which we will do.

Please do not send us information we have not asked for. We do not need, and do not want, your date of birth, marital status, nationality, photograph, health information or any other special category of data.

If you contact us another way

If you email us or message the WhatsApp Business number, we hold that correspondence in order to reply to it. Messages you send over WhatsApp are also processed by WhatsApp Ireland Limited under its own privacy policy, which we do not control.

Server logs

Our host records standard technical information for every request — IP address, time, page requested, browser type. This is ordinary web server logging, kept for security and to keep the site running. The legal basis is our legitimate interest in operating a secure service.

Cookies

This site sets no cookies of its own, and there is no analytics on it. Fonts are served from our own domain rather than a third party, so loading a page here does not tell anyone else that you visited.

Our hosting provider may set a strictly necessary cookie to distinguish human visitors from automated traffic. It carries no advertising or profiling function, and under the ePrivacy rules it does not require consent — which is why you are not being asked to dismiss a banner.

Who else sees your data

We do not sell personal data, and we do not share it for anyone else’s marketing.

Three providers process data on our behalf, under contract and on our instructions only:

• Cloudflare — hosting and content delivery.
• Web3Forms — delivers form submissions to our inbox.
• Google Workspace (Google Ireland Limited) — carries and stores the resulting correspondence.

Some of these providers operate outside the European Economic Area. Where they do, transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

We may also disclose data where the law requires it.

How long we keep it

What	How long
Job applications	Twelve months from the date we receive them
Quotation enquiries that do not become business	Three years from your last contact with us
Records relating to an actual trade	As long as commercial and accounting law requires
Server logs	As set by our hosting provider’s standard retention

Quotation enquiries that do not turn into a customer relationship are kept for three years from our last contact with you, then deleted — unless a legal obligation requires us to keep them longer. Where there is no exchange after your enquiry, the three years run from the day you sent it.

If an enquiry does become an actual trade, it stops being a prospect record. From that point the file is kept under the commercial and accounting retention rules in the row above, not the three-year period.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete it;
• restrict or object to what we do with it;
• hand it over in a portable format, or send it to someone else.

Write to [email protected]. We will respond within one month. We will not charge you, and we will not ask you to justify the request.

If you think we have handled your data badly, you can complain to the French supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), at www.cnil.fr. You can complain to them without speaking to us first, though we would rather you gave us the chance to put it right.

Changes

If this page changes materially we will update the date at the top. Anything already collected stays governed by the version in force when we collected it.