Privacy Policy

1. Data controller

The data controller is Palladium Africa, headquartered in Cotonou, Republic of Benin (Avenue Dorothée LIMA, rue 11010 Gbégamey Place Bulgarie). For any question about this policy or to exercise your rights, contact us at the address below.

2. What data we collect and why

• Contact form: name, email address, subject and message content. Purpose: to respond to your request and manage the commercial or pre-contractual relationship. Legal basis: your consent (checkbox at submission) and, where applicable, pre-contractual measures.
• Job applications: name, email, phone number, preferred country, experience level, availability, CV file and any cover message provided. Purpose: to evaluate your application and manage the recruitment process. Legal basis: pre-contractual measures and your explicit consent (checkbox) collected at submission.
• Partner account (Holding area): data collected through Supabase Auth at registration or login (email, password, name and profession if provided). Purpose: to create and secure your account and provide access to the restricted area. Legal basis: performance of a contract and legitimate interest in securing access.
• Internal audience analytics: pages visited, clicks on key elements, and the approximate country when made available by the hosting infrastructure. Purpose: to measure site traffic and improve the user experience. Legal basis: legitimate interest. These data are not used to identify or profile you individually for advertising outside Palladium Africa.
• Google Analytics (if enabled): aggregated browsing statistics (pages, sessions, etc.) via Google tools. Purpose: audience measurement. This service is operated by Google Ireland Limited (or its affiliates) under their own terms and privacy policy.

4. Retention periods

• Contact messages: retained for the time needed to process your request and any follow-up, typically up to 3 years from the last contact.
• Job applications: retained for the duration of the recruitment process and up to 2 years after the last contact if the position is not filled, in accordance with applicable Beninese rules.
• Partner account: data retained for the lifetime of the account and the applicable legal retention period after closure.
• Internal analytics: according to our internal configuration.

5. Security

We implement appropriate technical and organisational measures to protect data: HTTPS encryption, access controls, use of professional hosting environments and a dedicated admin area restricted to authorised staff.

6. Your rights

Under Beninese Law No. 2009-09 of 22 May 2009 on personal data protection, you have the right to access, rectify, oppose and erase data concerning you. You may also withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing. For users in the European Economic Area, the GDPR rights (portability, restriction, lodge a complaint with a supervisory authority) additionally apply.

To exercise your rights or file a complaint, you may contact the Personal Data Protection Authority of Benin (APDP — Autorité de Protection des Données Personnelles, Cotonou), or, for EU residents, the supervisory authority of your country of residence (in France: CNIL).

7. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. The updated version will be published on this page with a new date.