Privacy policy

1 · Our principles

Three principles guide how we handle your data:

• Minimum. We collect only what is strictly necessary for the service you request.
• Transparency. Your data is hosted by providers named in these pages — you always know who holds it and where (section 5).
• Reversibility. On simple request, we return or delete your data within 30 days.

We do not train any AI model on your data without explicit written consent, and we never resell any data to third parties — ever.

2 · Data collected

We collect the following data, classified by purpose:

Contact form

Name, email, phone, company, desired track, timeline, free-text message. Collected with your explicit consent.

WhatsApp Business

Phone number, content of the messages exchanged. Limited to the duration of the business relationship + 3 years.

Audience measurement

This site sets no advertising tracker and no third-party analytics cookie.

Technical logs

IP address, browser type, page viewed — logs generated by the host for security and diagnostics. Kept for 30 days.

3 · Purposes of processing

Your data is used exclusively to:

• Respond to your contact request (legal basis: pre-contractual performance)
• Perform the contract if a service is agreed (legal basis: contractual performance)
• Keep you informed of your project's progress (legal basis: legitimate interest)
• Comply with our Ivorian legal and accounting obligations (legal basis: legal obligation)

4 · Retention period

Prospect (no follow-up)

3 months after the last contact, then automatic deletion

Active client

For the entire contractual relationship

Former client

10 years after the end of the contract (Ivorian accounting obligation)

Browsing data

30 days

Analytics cookies

No persistent cookie

5 · Transfers outside UEMOA

Our infrastructure providers are established outside UEMOA: Vercel (site delivery), Supabase (database and authentication) and Resend (transactional emails). Your data therefore passes through these providers and may be stored outside Côte d'Ivoire.

These transfers are necessary to perform the service you request. Each of these providers acts only on our instructions, to deliver its service — never on its own account, and never for advertising purposes.

If you subscribe to an AI & Automation track using a language model hosted outside UEMOA (for example Claude by Anthropic or GPT by OpenAI), we tell you so in writing before any processing and we obtain your specific consent.

If hosting your data in Côte d'Ivoire is a requirement for your organization, tell us before signing: it is an architecture constraint, and it gets handled at the scoping stage.

6 · Your rights

In accordance with law n° 2013-450 on the protection of personal data in Côte d'Ivoire, and with the GDPR for EU citizens, you have the following rights:

• Access — obtain a copy of your data
• Rectification — correct inaccurate data
• Erasure — request the deletion of your data
• Portability — retrieve your data in a structured format
• Objection — refuse a processing operation (in particular for marketing)
• Restriction — freeze a processing operation while a verification is carried out

To exercise these rights, write to dpo@nextgen-consulting.ci. We respond within 30 days.

You may also refer the matter to the Telecommunications/ICT Regulatory Authority of Côte d'Ivoire (ARTCI) or, for EU nationals, your national data protection authority.

7 · Data protection officer

NextGen has appointed a data protection officer (DPO) reachable at dpo@nextgen-consulting.ci, or by postal mail at: DPO NEXT GEN CONSULTING, 09 BP 2871 Abidjan 09, Côte d'Ivoire.