Privacy policy
Holoul takes the protection of your personal data seriously. This policy explains what we collect, why, and what your rights are.
Data controller
Holoul — TODO(content) company name and address. Contact: contact@holoul.tech.
Data we collect
Only what you enter in our quote or contact forms: name, email, company, phone, contact preference, project description, indicative budget and timeline. We also record the language and page the form was sent from.
Purposes and legal basis
We use this data solely to answer your request and, where relevant, to prepare a quote. Processing is based on your consent, given by ticking the dedicated box, and on pre-contractual steps taken at your request.
Recipients and processors
Your data is read by the Holoul team. It passes through our technical providers: our hosting provider (virtual private server), Cloudflare (Turnstile spam protection), Google (Google Analytics) and Zoho Mail (sending and receiving email). Some of these providers are located outside Tunisia. We never sell or share your data.
Retention
TODO(legal): proposed period — 3 years after our last exchange, then deletion.
Analytics and cookies
We use Google Analytics to measure how the site is used (pages viewed, where visitors come from, device type). It sets measurement cookies (_ga, _ga_*, kept for up to 2 years) and the data is processed by Google, including outside Tunisia. We do not use it for advertising. You can refuse these cookies in your browser settings or with the Google Analytics opt-out add-on. TODO(legal): consent collection (cookie banner) for visitors from the European Union. A draft of the quote form may be kept temporarily in your browser (session storage) and is never sent unless you submit it.
Your rights
Under Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, and under the GDPR for people in the European Union, you have the right to access, correct, object to and delete your data. Write to us at contact@holoul.tech. You may also contact Tunisia’s National Authority for the Protection of Personal Data (INPDP) or the data protection authority in your country.