Privacy Policy

Who We Are

This Privacy Policy explains how Iguana Solutions SAS (« Iguana Solutions », « we », « us ») — publisher of the ig1.ai website — collects, uses, shares and protects your personal data. It applies to your use of ig1.ai and to the services we provide, in accordance with the EU General Data Protection Regulation (GDPR) and applicable French law.

For any question relating to your personal data, or to exercise your rights, you can contact our Data Protection Officer (DPO) in writing at Iguana Solutions SAS, 17, rue de Surène, 75008 Paris, France, or by email at contact@ig1.com.

Our GDPR Commitments

In line with the GDPR, we are committed to:

• Accessing only the data strictly necessary for the specific operation justifying that access;
• Processing your data solely for the purpose set out in your instructions — Iguana Solutions will never use your data for any other purpose;
• Ensuring that the technicians in charge of your platform can only access your data using a personal password, with each access logged in a register available to you;
• Binding our technicians by an extremely strict confidentiality clause;
• Seeking your prior agreement before engaging any sub-processor who may access your personal data;
• Offering one of the highest levels of server security and communicating to you precisely the security measures put in place;
• Notifying you as quickly as possible of any breach affecting your data following a security incident;
• Assisting you in meeting your obligations within the scope of our services (in particular for access, modification, deletion or portability requests);
• Not storing your data outside the European Union unless expressly requested or agreed in writing by you;
• Deleting all your data at the end of our contractual relationship and keeping no copy in any form whatsoever.

Data We Process & Specific Processing

We process the personal data you provide to us (such as identity and contact details) when you contact us, request information, or use our services, as well as data collected automatically during your navigation (see the Cookies section below). Depending on the service, we may also carry out the following specific processing:

• Risk management & internal control: calculation of risk indicators, risk modelling, operational-risk reporting, regulatory declarations and internal-control operations.
• Video-protection: deployed within Iguana Solutions' and its providers' premises for the safety of people and property; where such devices are in use, specific information is displayed on site.
• Recording of telephone conversations: as part of managing the commercial relationship or our support services, calls may be recorded for evidentiary purposes, staff training and quality improvement. You are informed at the start of the call.

Where we act as a processor on behalf of our clients, a Data Protection Agreement appended to the Service contract defines the scope, purposes and arrangements of the processing entrusted to us.

Lawful Basis for Processing

Each processing operation carried out by Iguana Solutions relies on a precise legal basis:

• Processing necessary to comply with a legal or regulatory obligation to which Iguana Solutions is subject — in particular for all processing related to customer knowledge and compliance with French Law No. 2004-575 of 21 June 2004 on confidence in the digital economy;
• Processing necessary for the management and performance of the contracts to which the person is a party;
• Processing necessary for the legitimate interests pursued by Iguana Solutions, while respecting your fundamental rights and freedoms — for example risk prevention, business steering and development (commercial prospecting), staff training and improvement of the customer relationship;
• Processing you have specifically authorised: certain processing that does not fall under the three bases above may be carried out, in which case your consent is sought on a case-by-case basis at the time of collection or implementation.

Recipients of Your Data

Your personal data may be transmitted to the following recipients, for the following purposes:

• Legally authorised administrative and judicial authorities, for the performance of their duties;
• Any Iguana Solutions entity, for commercial prospecting, the conclusion of further contracts, the fulfilment of legal or regulatory obligations, or in the event of the pooling of resources or company groupings;
• Any Iguana Solutions entity in charge of managing or preventing operational risks (risk assessment, security, prevention of unpaid invoices) for the benefit of all Iguana Solutions entities;
• Sub-processors or partners of Iguana Solutions involved in particular in managing the customer relationship and the offering of products and services, solely for the needs of those activities;
• Survey or polling institutes, acting exclusively on behalf of Iguana Solutions, for statistical purposes;
• Partners of Iguana Solutions, to allow you to benefit from the advantages of the partnership and strictly within the framework of the partnership agreements;
• Experts, in particular chartered accountants and statutory auditors of Iguana Solutions, in the performance of their assignment.

The list of Iguana Solutions entities likely to receive information concerning you can be provided to you on simple request to the Data Protection Officer.

International Data Transfers

During operations, personal data may be transferred to sub-processors established in a country outside the European Union. These entities perform, on behalf of Iguana Solutions, certain material and technical tasks essential to the commercial relationship and to the operation of our services. Such transfers are governed by appropriate security and control measures.

In some cases, these sub-processors may be located in countries that are not subject to an adequacy decision by the European Commission; in that event, transfers are governed by standard contractual clauses adopted by the European Commission. Details of these rules and of the transfer are available on simple request to the Data Protection Officer.

Where we act as a processor on behalf of our clients, we undertake not to store your data outside the European Union unless expressly requested or agreed in writing by you. Should a specific service require a transfer outside the EU to a country not recognised as offering an adequate level of protection, we will inform you beforehand and support you in identifying appropriate solutions.

Data Retention

Where the person whose data is collected is not a client of Iguana Solutions, their personal data may be kept for a maximum of 18 months from their last contact with Iguana Solutions, unless a shorter period is indicated in the channel used.

Where the person is party to a contract with Iguana Solutions, their data is kept for the time necessary to perform the service, to comply with regulatory obligations and to preserve evidence in contractual matters until the rights of the parties or third parties are extinguished. The main retention periods are:

• Contract-related data: up to 10 years from the end of the relationship;
• Data needed to manage a possible legal action: until the end of the proceedings, then archived for the applicable legal limitation periods;
• Accounting information: 10 years;
• Video-protection recordings: 30 days;
• Telephone-conversation recordings: 6 months.

Your Rights

At any time and under the conditions provided by law, you may access your personal data, object to its processing on grounds relating to your particular situation, object without reason to the processing of your data for commercial prospecting purposes, request its rectification, erasure, restriction or portability.

These rights are exercised with the Data Protection Officer at the address above, by written request accompanied by proof of identity. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

No fee will be charged for your requests; however, in accordance with the regulation, Iguana Solutions reserves the right to charge a fee or refuse to act on manifestly unfounded or excessive requests, in particular due to their repetitive nature. We will respond within one month of receipt of the request, a period that may be extended by two months given the complexity and number of requests.

You may register free of charge on the BLOCTEL telephone-canvassing opposition list at www.bloctel.gouv.fr. You may also lodge a complaint with the CNIL, 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07.

Cookies Policy

When you browse our sites and apps, we may — subject to your choice — place various cookies, including advertising and statistical cookies. A cookie is a small file placed by a website on a user's device that records their internet settings; it is downloaded via a browser on your first visit and can be read again on subsequent visits to the same site.

We use the following categories of cookies:

• Strictly necessary cookies: required for the site to function (e.g. navigation personalisation or account access). They cannot be disabled, as the site would not work normally without them.
• Consent-exempt audience-measurement cookies: placed to analyse page visits anonymously and measure the performance of our site, without ever identifying you.
• Audience-measurement (analytics) cookies: provide information on the traffic of our sites, their use and performance, helping us detect navigation issues and highlight popular content.
• Advertising cookies: used to present advertisements tailored to your interests on and off our site. Refusing them has no impact on your use of the site, but will not stop advertising — it will simply be less relevant to your interests.
• Social-media cookies: generated by social-media share buttons that let you share our content on social networks.
• Tracking pixels: let us track the activity of emails sent to clients and prospects who have consented, to know whether emails were opened and/or clicked in order to optimise our communication campaigns.

Third parties likely to place cookies on Iguana Solutions sites include: Google Analytics and Hubspot (audience measurement), Google Ads (advertising), and Twitter and LinkedIn (social media).

You can configure your choices at any time by enabling or disabling each category of cookie, and your browser settings allow you to block or delete cookies placed by the sites you visit. We invite you to configure your browser taking account of the different purposes of cookies.

Controller & Hosting

Data Controller: Iguana Solutions SAS — 17, rue de Surène, 75008 Paris, France

Data Protection Officer: contact@ig1.com

US EIN: 82-3279611

Hoster: AWS EMEA — Courbevoie, France

Last updated: June 2026