Privacy policy
This page explains what happens to the information you give us on this website, mainly through the demo form. It describes what the software actually does.
Last updated: 30 September 2026.
This translation is provided for your convenience. Only the French version is legally binding: read the French version.
Data controller
The data controller is CAPSIDE, 8 rue Colbrant, 59000 Lille, France.
For any question about your data, write to contact@capside.fr.
The data we collect
The demo form asks for:
- your company name and, where they exist, its SIREN, SIRET, NAF code and address;
- your first and last name, prefilled with those of the director listed in the company register, which you can change;
- your email address;
- your country, your trade if you give it, the language of the page and the date of your consent.
Nothing else: no phone number, no IP address, no browsing data.
Why
- to create your demo and send you its access link;
- to contact you again about this demo and Léo.
They are used for nothing else: no newsletter, no advertising, no profiling.
Legal basis
Your consent, given by ticking the box on the form, which is never ticked in advance (Article 6(1)(a) GDPR), and steps taken at your request before a possible contract: the demo is a trial before any contract (Article 6(1)(b)).
A public source: the company register
When you type your company name, our server queries the French government’s public company register (annuaire-entreprises.data.gouv.fr). Your browser does not connect to it: only the text you type is sent, not your IP address.
From the answer, we keep only what the form uses: company name, SIREN, SIRET, NAF code, address, and the director’s name and role. Directors’ dates of birth, which the register publishes, are never kept. These answers are kept in memory for 24 hours, so the register is not queried on every keystroke.
Who receives it
The CAPSIDE team that follows up demos, and our technical providers insofar as they need it: the server’s hosting provider and the email delivery service.
Your data is never sold, rented or passed on to anyone.
How long
Your demo lasts 14 days. When it ends, access is closed; the demo and everything in it, your account and whatever you entered, are deleted automatically 30 days later.
If you ask for an extension, these periods run from the new end date.
The record of your request, meaning the form data, is kept for as long as we are in contact with you. If you do not follow up, it is deleted at the latest three years after our last contact, and immediately if you ask.
Security
- Your IP address is never recorded. It is only used to limit requests to 3 requests per hour: the server keeps only a fingerprint of it (SHA-256 hash), deleted after one hour.
- Exchanges with the website are encrypted (HTTPS).
- Bots are kept out by an invisible trap field, not by a third-party CAPTCHA service that would watch your browsing.
- The access link to your demo is personal, single-use and time-limited. You choose your password there, and we store it only in hashed form.
- Each demo is a separate space: no other Léo user can see what you enter in it.
- No font, image or script is loaded from a third-party service.
- The data is hosted in France.
Your rights
You can access your data, have it corrected or erased, restrict its processing, object to it, receive it in a common format (portability), and withdraw your consent at any time, without affecting what was done before. You can also give instructions on what happens to your data after your death.
To exercise them, write to contact@capside.fr, or by post to CAPSIDE, 8 rue Colbrant, 59000 Lille, France. We reply within one month.
Complaints
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07), or with the data protection authority of your country.
Your customers’ data in Léo
When a print shop uses Léo, it decides what data it stores there, its customers, contacts and orders, and it is the controller of that data. CAPSIDE processes it on the print shop’s behalf and only on its instructions, as a processor (Article 28 GDPR). A contract with each print shop governs this processing.