Privacy policy
Last updated: 19 October 2026
Who is responsible
Scham’s Ltd is the controller of the data collected on this website. The provider who runs the site acts as a processor on behalf of Scham’s.
For any question about your data: [email protected].
What we collect and why
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Quote requests | identity, contact, need, attachment | request of the person | 3 years after the last exchange |
| Messages | identity, contact, message | request of the person | 3 years after the last exchange |
| Acknowledgements and alerts (e-mail) | e-mail, reference, summary of the request or message | request of the person | 30 days after sending |
| Contact book | identity, e-mail, phone, sector, history | business relationship or consent | length of the relationship + 3 years |
| Text messages | number, content, status | consent | 1 year of sending history |
| Mailings (e-mail, text) | recipient, content, status, consent per channel | consent | until withdrawal; history 1 year; proof of consent 3 years |
Where the data is kept
Data is kept on Scham’s dedicated server, hosted in Europe. Attachments are stored in a private space, accessible only to the Management and the Secretariat.
This transfer outside Côte d’Ivoire is limited to hosting and to the two services described below (form bot protection, e-mail delivery): the data is neither sold nor transferred to third parties, and only Scham’s authorised staff and its technical provider can access it.
Quote and contact forms
A quote request or a message sent from the website is recorded in Scham’s management space, which only the Management and the Secretariat can view. You receive an acknowledgement by e-mail; the team receives an alert that contains neither your phone number nor the description of your need.
An attachment (PDF, DOCX, XLSX, JPG or PNG, up to 10 MB) is stored in a private space and never published. Only the Management and the Secretariat can open it, and every opening is logged. It is deleted together with your request.
If you agree to receive text messages, this consent is recorded with its date on your request or message; it does not add you to any list until the team adds you to its contact book.
Requests and messages are kept for 3 years after the last exchange, then deleted.
Third-party services
Bot protection: the forms may use Cloudflare Turnstile (Cloudflare, Inc., United States) to check that a submission comes from a person. This check reads technical information about your browser and connection, without advertising tracking. Its script only loads as you approach the form.
E-mails: the website’s automatic e-mails (acknowledgements, alerts, replies from the team) are sent by Resend (Resend, Inc., United States). Resend receives the recipient’s address and the content of the e-mail, only to deliver it; it has no access to the management space.
WhatsApp: the WhatsApp button opens a conversation in WhatsApp (Meta Platforms, Inc.). Nothing is sent until you send a message; your exchanges are then subject to WhatsApp’s terms.
Your rights
- Access to your data
- Rectification
- Objection
- Erasure
To exercise these rights, write to [email protected]. We reply as quickly as possible.
Text messages and e-mails
We only contact you by text message or e-mail with your consent, given channel by channel. You can withdraw it at any time: reply STOP to a text message, or use the unsubscribe link in an e-mail.
Security
- Encrypted connection (HTTPS) across the site
- Two-factor authentication for Scham’s team
- Encrypted backups