This English version is provided for convenience. The French version is the authoritative legal text.
Data controller
The controller for the processing described on this page is MaherLabs, a French SASU whose registered office is located at 2 rue du Docteur Émile Roux, 60200 Compiègne, France.
For any question about your personal data, email [email protected].
Data and purposes
Contact requests and Founder applications
Email address, subject, message content, selected offer and submission context.
Purpose: review your needs, reply, prepare a call or quote, and manage the pre-contractual relationship.
Legal basis: pre-contractual steps taken at your request and the legitimate interest in answering professional enquiries.
Founder reopening alert
Email address and a short project description when applications are closed.
Purpose: notify you when the programme reopens.
Legal basis: your consent, which you can withdraw at any time by email.
Security and operation
Technical data strictly required to deliver and protect the website, such as IP address, timestamps, and security or error logs.
Legal basis: the legitimate interest in securing the service, preventing abuse and diagnosing incidents.
Required fields are necessary to process your request. Without them,MaherLabs cannot reply. No automated decision-making or commercial profiling is performed using this information.
Recipients and transfers
Data is accessible only to MaherLabs and the technical providers required to deliver the service:
- Cloudflare, Inc., for website hosting, delivery and security;
- Plus Five Five, Inc. (Resend), to deliver form submissions to the ZimaBuild mailbox.
These providers are established in the United States. Transfers are governed by their contractual data-protection commitments and, where required, the European Commission’s Standard Contractual Clauses. Data is never sold or rented.
Retention periods
- Prospects and unanswered enquiries
- Three years from the last contact.
- Founder reopening alert
- Until the alert is sent or consent is withdrawn, and no longer than 12 months.
- Clients and contracts
- For the duration of the contractual relationship, then for the applicable limitation periods. Invoices are kept for 10 years.
- Technical logs
- Up to seven days in Cloudflare logs, depending on the plan in use, unless separate retention is required by a security incident or legal obligation.
Your rights
Depending on your situation, you may have rights of access, correction, deletion, restriction, objection and portability. When processing relies on consent, you can withdraw it at any time without affecting processing already carried out.
To exercise your rights, email [email protected] or write to the registered office. Proof of identity will only be requested where there is reasonable doubt about your identity.
If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the CNIL.
Cookies and analytics
As of this policy’s latest update, zimabuild.com uses no advertising cookies and enables no optional tracker requiring consent. It uses only technical mechanisms essential to display and secure the website and to submit a form voluntarily.
If analytics or a third-party service requiring consent is added later, it will remain disabled until you make a choice and this page will be updated.