LEGAL DISCLOSURES & GOVERNANCE

1.1 Data Controller

CodeVectorWorks, located at 17130, 10 Rue De L'ancien Hippodrome, Montendre, France, is the data controller responsible for processing personal data collected through this website. Inquiries may be directed to [email protected].

1.2 Data We Collect

We collect the following categories of personal data when you submit a contact form or engage our services:

• + Full name and business email address
• + Phone number and company affiliation
• + Project scope details and security requirements
• + Technical environment information voluntarily provided

1.3 Purpose of Processing

Personal data is processed exclusively for: (a) responding to your security consultation requests, (b) delivering contracted cybersecurity services, (c) maintaining statutory financial records, and (d) fulfilling legal obligations under French and EU commercial law.

1.4 Data Retention

Contact form submissions are retained for a maximum of 24 months. Contract-related data is retained for the duration of the engagement plus 5 years in compliance with French commercial record-keeping requirements. Data is stored within encrypted EU-hosted infrastructure.

1.5 Your Rights

Under the General Data Protection Regulation (EU) 2016/679, you have the right to access, rectify, erase, restrict processing, object to processing, and port your personal data. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).

2.1 Scope of Services

CodeVectorWorks provides cybersecurity architecture, threat detection, penetration testing, cloud security hardening, data governance consulting, and managed security operations. All services are delivered under explicitly contracted Statements of Work (SOW) executed between the client and CodeVectorWorks.

2.2 Intellectual Property

Upon complete settlement of all agreed commercial invoices, CodeVectorWorks assigns all worldwide intellectual property rights in client-specific deliverables—including custom security configurations, remediation scripts, and compliance documentation—directly to the client. Pre-existing frameworks, tools, and methodologies remain the property of CodeVectorWorks.

2.3 Confidentiality

Both parties agree to maintain strict confidentiality regarding all technical findings, vulnerability reports, and infrastructure details disclosed during the engagement. This obligation survives termination of the agreement for a period of 3 years.

2.4 Limitation of Liability

CodeVectorWorks shall not be held liable for indirect, incidental, or consequential damages arising from security incidents that occur outside the explicitly defined scope of the contracted SOW. Total aggregate liability shall not exceed the total fees paid under the applicable contract.

2.5 Governing Law

These terms are governed by the laws of the French Republic. Any disputes shall be submitted to the exclusive jurisdiction of the courts of Bordeaux, France.

3.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us recognize your browser and remember certain information about your session.

3.2 Cookies We Use

We use only essential functional cookies:

• + Cookie Consent: Remembers your acceptance of the cookie banner (localStorage). Expires after 365 days.
• + Session Integrity: Ensures secure form submissions and prevents cross-site request forgery.

3.3 Third-Party Cookies

We do not use third-party tracking cookies, advertising pixels, or analytics cookies that monitor your browsing behavior across websites. Google Maps embedded on our contact page may set cookies in accordance with Google's own privacy policy.

3.4 Managing Cookies

You can control and delete cookies through your browser settings. Disabling essential cookies may impair the functionality of certain website features, including the cookie consent banner and secure form submissions.

4.1 Service Commencement

Due to the nature of cybersecurity services—which involve immediate access to sensitive infrastructure information and commencement of advisory work—all fees are non-refundable once the engagement SOW has been signed and work has commenced.

4.2 Pre-Engagement Cancellation

If a client cancels a signed SOW before any work has commenced (within 48 hours of execution), a full refund of any advance payments will be issued within 10 business days.

4.3 Monthly Retainers

Monthly retainer services (including 24/7 Managed Security Operations) may be cancelled with 30 days' written notice. No partial-month refunds are issued. The retainer remains active through the end of the current billing cycle.

4.4 Disputed Invoices

Invoices disputed in good faith will be reviewed by CodeVectorWorks management within 5 business days. If a billing error is confirmed, a corrected invoice or refund will be issued promptly. Disputes should be directed to [email protected].