Privacy Policy

Website: autom7.com
Last updated: September 21, 2026

1. Personal data controller

Toussaint Digital LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States, operates AUTOM7 and is the controller for the personal data processing described here. Contact: contact@autom7.com. This policy concerns visitors and people contacting us, including in a professional capacity. It describes available information and technical limitations observed as of the date above.

2. Personal data collected

Information you provide: identity, contact details, enquiry content, business activity, website address and project information you choose to share. Booking information is also processed when you use the calendar. The French and English contact forms use HighLevel through go.autom7.com. The French Contact page also embeds a HighLevel booking calendar; the English Contact page has a form without an embedded calendar. Fields and input instructions depend on the interface displayed. Without the information needed to understand your request or contact you, we may be unable to respond. Do not send passwords or sensitive information in free-text messages.

Technical information: connections to the website and embedded services may transmit an IP address and information about the browser, device and page viewed. Complianz displays the cookie banner and stores preferences. An initial September 21, 2026 check observed Google Analytics cookies _ga and _ga_JSG1KGJHCG after explicit rejection. That issue was corrected. Since the controlled reactivation on the same date, Google Analytics loads only after consent to the “Statistics” category. Clean-browser tests found no Analytics request or cookie without a choice or after rejection; they confirmed loading after acceptance, followed by blocking and removal of Analytics cookies after withdrawal. HighLevel interfaces still load before a consent choice, and the __cf_bm security and automated-traffic-management cookie supplied through go.autom7.com was observed; see section 9.

3. Purposes and legal bases

Enquiries, quotes and appointments: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)) when you are a party to the prospective contract; otherwise, the legitimate interest in responding and managing business correspondence (Article 6(1)(f)). Separate marketing: an enquiry is not general consent to advertising. Any marketing must have an appropriate legal basis and comply with the rules for the channel used; this policy does not establish that a campaign is active or that marketing consent has been obtained. Google Analytics: audience measurement relies on prior consent (GDPR Article 6(1)(a)). The loader remains inactive until the “Statistics” category is accepted; no exemption is asserted here. Legal obligations: Article 6(1)(c) applies only when an identified legal obligation requires processing. Operation, security and abuse prevention: legitimate interest in maintaining and protecting the service (Article 6(1)(f)), subject to individual rights and without replacing consent for non-exempt trackers. Retention criteria are described in section 6.

4. Recipients of the data

Hostinger hosts autom7.com. This does not mean that all HighLevel form data is stored there. Effective storage and access locations are not confirmed here; exclusively European data residency is not guaranteed. The relevant account contract must be checked for legal roles and commitments. Google Analytics is loaded through one Complianz-gated loader only after consent to the “Statistics” category. After consent, Google Analytics measures website traffic and interactions and may receive information about pages viewed, navigation events, the device, browser, IP address and measurement identifiers, including cookie identifiers. Google Site Kit and Rank Math’s Analytics module remain disabled to avoid duplicate or uncontrolled tags. Clean-browser tests found no Analytics request or cookie without a choice or after rejection. After acceptance, the loader, a measurement request and the _ga and _ga_JSG1KGJHCG cookies were observed. Withdrawal removed those cookies and blocked Analytics on the next navigation. Data already received by Google is not automatically deleted by withdrawing consent and is not described here as anonymous. HighLevel, through go.autom7.com, provides the FR/EN forms and FR calendar for enquiries and appointments; loading them establishes connections even before a submission. No automatic mini-diagnostic-to-CRM transfer or automated campaign is asserted here. Complianz displays the banner, stores choices and gates the Analytics loader. This result does not by itself prove that every other third-party service honours the choice or that the Complianz publisher receives HighLevel messages. Other possible access includes people authorised to handle requests for Toussaint Digital LLC, email services used for correspondence, technical personnel as needed for their work, and authorities where legally required. The detailed provider and access inventory is not complete. Contracting entities, precise legal roles and account-specific processing terms are not all confirmed; using a provider does not prove that it has access to all data or guarantee compliance.

5. Transfers outside the European Union

Toussaint Digital LLC is established in the United States. Services used may involve processing or access outside the European Economic Area. We do not guarantee that data remains in the European Union, including for hosting. Actual storage and access countries, relevant entities and applicable transfer mechanisms are not all confirmed as of this date. We therefore do not assert that signed standard contractual clauses or an adequacy decision cover the accounts used. You can request available information and, where applicable, a copy of safeguards at contact@autom7.com. These uncertainties do not remove the legal obligations governing transfers.

6. Retention periods

Enquiries, contact details, correspondence, project information and appointments: relevant criteria are the time needed to address the request and its follow-up, an ongoing relationship, and any justified need relating to an obligation or dispute. Preference cookies and consent records: the need to remember the choice and the actual configured duration; an expiry inventory remains to be completed. Google Analytics data: collection occurs only after consent to the “Statistics” category. Withdrawal removes the Analytics cookies from the domain and blocks subsequent loading, but the retention settings for data already received by Google are not confirmed. Technical and security logs: operational, diagnostic and abuse-handling needs; actual retention is not confirmed. Archives and backups: applicable obligations, backup cycles and effective deletion arrangements require separate verification. These criteria are not evidence of an implemented deletion schedule. No verified campaign-retention period is stated. We do not guarantee uniform limits of 3 years, 13 months or 12 months, or automatic irreversible deletion or anonymisation. To ask about your records or request deletion, write to contact@autom7.com.

7. Your GDPR rights

Where the GDPR applies, you may exercise the following rights under its conditions: access and a copy of your data; correction of inaccurate or incomplete data; erasure in qualifying circumstances, subject to legal retention obligations; and restriction in qualifying circumstances. For automated processing based on consent or a contract, portability may allow you to receive data you provided in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible. You may object on grounds relating to your particular situation to processing based on legitimate interest, and at any time without giving reasons to direct marketing, including related profiling. You may withdraw consent at any time without affecting the lawfulness of consent-based processing before withdrawal. Section 9 describes the tests performed and remaining limits; changing a cookie preference does not by itself prove compliance by every third-party service. A professional context does not remove these rights. Contact contact@autom7.com. The GDPR requires a response without undue delay and in principle within one month of receipt. This may be extended by two months where necessary because of complexity and the number of requests, with reasons and notice within the first month. We do not guarantee a 72-hour response. Additional information limited to what is necessary may be requested where there are reasonable doubts about identity; an identity-document copy is not routinely required.

8. Data security

Data protection requires measures appropriate to the processing and risks. The website and embedded interfaces examined use HTTPS URLs; this does not establish end-to-end security. Hostinger’s name does not establish a certification or storage location. Actual permissions and provider access need checking for each service; this policy does not guarantee backup arrangements, protection or deletion cycles. Do not send passwords by form or email. Report a difficulty or suspected incident to contact@autom7.com, avoiding unnecessary sensitive information. Google Analytics is active only after consent to the “Statistics” category. The no-choice, acceptance, rejection and withdrawal states were tested; withdrawal removed the Analytics cookies and the next navigation did not load Analytics. HighLevel flows and the complete provider inventory still require classification and review. No online transmission or storage can be guaranteed completely secure; this does not shift our protection obligations to visitors or limit their rights.

9. Cookies

Observed state on September 21, 2026 after controlled reactivation: Complianz displays the banner, records choices and gates a single Google Analytics loader. You can make your choice in the Complianz banner when it is displayed and change or withdraw consent to the “Statistics” category later using the consent-management button. Google Site Kit and Rank Math’s Analytics module remain disabled. Clean-browser tests found no Analytics request or cookie without a choice or after rejection. After acceptance, Google Analytics loaded and the _ga and _ga_JSG1KGJHCG cookies were observed. Withdrawal disabled further loading, removed those cookies and the next navigation did not load Analytics. HighLevel interfaces load before a consent choice. The __cf_bm cookie from .go.autom7.com was observed before a choice and after rejection; its observed function is Cloudflare security and automated traffic management on the embed domain. That description does not by itself establish a legal exemption for every HighLevel operation, whose full classification remains to be checked. The full tracker inventory, recipients and effective durations are not yet verified. Only trackers meeting the applicable exemption conditions may be used without consent; a preference or security label alone is not enough. Browser settings can delete or block cookies; this may affect services and does not guarantee that all third-party connections stop or that already-transmitted data is deleted. To make an enquiry without entering information in HighLevel forms, email contact@autom7.com. Email uses a messaging service and does not undo connections already made during your visit. These dated tests are not certification of all processing, transfers or retention periods.

10. Changes to this policy

This policy may change to reflect verified processing information and changes to the website or applicable rules. The date above identifies the latest revision. French and English versions aim to provide the same information without reducing your rights if they differ. Depending on the changes, further information or new consent may be required; publishing a text does not replace consent. Technical observations are dated and a wording update does not prove that a technical defect has been fixed.

11. Complaints and supervisory authorities

You may contact contact@autom7.com or complain directly to a competent supervisory authority. Contacting us first is not a condition for a complaint. Where the GDPR applies, you may complain in particular to the authority in the Member State of your habitual residence, place of work or the alleged infringement. In France, contact the CNIL: https://www.cnil.fr/fr/plaintes; its official website provides current procedures and contact details. Other EU authorities are listed by the European Data Protection Board. Other legal remedies remain available. Rights-request time limits are explained in section 7.

12. Links to other websites

Links may lead to third-party websites with their own privacy information. Embedded services described here are not merely links: they may connect when loaded. Read the relevant service’s information before sending data. This reference does not remove our responsibilities for processing we determine.

13. Minors

AUTOM7 services address business clients and are not designed for minors. Individual rights continue to apply to any data processed. If you believe a minor has provided data to us, contact contact@autom7.com to request review and, where the conditions are met, deletion.

14. Contact

For questions about this policy or personal data processing: Toussaint Digital LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States — contact@autom7.com. This policy describes available information and observed limitations. It is not a GDPR compliance certification or evidence that consent works correctly.