The legal matrix, split into four readable tiles.

1.1 Data we collect

We collect identification and contact details you provide directly (name, work email, phone number, organization), correspondence contents, billing information required for invoicing, and technical logs (IP address, user agent, timestamps) generated when you browse this site.

1.2 Purposes and legal bases

Enquiry data is processed to answer your request and prepare a quote (Art. 6(1)(b) GDPR — pre-contractual steps). Contract data is processed to deliver purchased services and issue invoices (Art. 6(1)(b)). Technical logs are processed to secure the platform and prevent abuse (Art. 6(1)(f) — legitimate interest). Newsletter or briefing data is processed only with your consent (Art. 6(1)(a)), which you may withdraw at any time.

1.3 Retention

Enquiry records are kept for 24 months after the last contact. Contract and invoice records are retained for the statutory 10-year accounting period under French law. Security logs are rotated after 12 months. Consent records are kept as long as the consent is active plus three years.

1.4 Recipients and transfers

Data is accessible only to NetworkSentinelWorks personnel bound by confidentiality obligations and to our strictly necessary processors: hosting, email, payment and analytics providers acting under Art. 28 data-processing agreements. Where a processor operates outside the EEA, transfers rely on Standard Contractual Clauses and supplementary technical safeguards.

1.5 Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Write to [email protected] and we answer within one month. You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French supervisory authority.

2.1 Scope and quotes

Each engagement is defined by a written quote stating scope, deliverables, price and turnaround. Work outside the agreed scope requires a written change order. Quotes are valid for 30 days and prices are quoted excluding VAT unless stated otherwise.

2.2 Fees and payment

Fixed-scope engagements require a 50% deposit before work begins, with the balance due on delivery. Retainers are billed monthly in advance. Invoices are payable within 14 days by card through our Stripe payment link or by bank transfer. Late payments accrue interest at three times the French statutory rate plus a €40 recovery fee.

2.3 Client obligations

You will provide timely access to systems, credentials through an approved secret-sharing channel, and accurate information about your environment. Delays in client input extend delivery dates by an equivalent period. You remain responsible for the lawfulness of the data you ask us to process.

2.4 Intellectual property and confidentiality

On full payment, all intellectual property in client-specific deliverables transfers to you. NetworkSentinelWorks retains ownership of pre-existing tools, frameworks and know-how, licensed to you perpetually for your internal use. Both parties keep each other's confidential information secret for five years after engagement end.

2.5 Liability and termination

Our aggregate liability is limited to the amount paid for the engagement giving rise to the claim, excluding indirect damages, lost profits or data loss where we are not at fault. Either party may terminate for material breach with 15 days written notice. These terms are governed by French law; disputes fall to the competent courts of Bobigny, France.

3.1 Strictly necessary cookies

These keep your session hardened, remember your cookie choice and protect form endpoints against cross-site request forgery. They cannot be switched off and do not require consent under Article 82 of the French Data Protection Act.

3.2 Analytics cookies (optional)

If you choose Accept All Cookies, we collect aggregated page-view counts, referrer and device category to understand which defense services visitors look for. Data is pseudonymized, never sold, and retained for a maximum of 13 months.

3.3 Cookie register

• nsw_cookie_consent — stores your consent choice, first-party, 12 months.
• session_token — authenticates your console session, first-party, session only.
• csrf_guard — protects form submissions, first-party, session only.
• _analytics_id — anonymized visit counter, first-party, 13 months, consent required.

3.4 Managing your choice

Change your mind at any time by clearing this site's data in your browser settings, or by rejecting optional cookies in our banner. Browser-level controls let you block or delete cookies entirely, though the console may then remember only your essential session. Questions go to [email protected].

4.1 Cooling-off period

Individual consumers contracting at a distance have a 14-day statutory right of withdrawal from the order date. If work has not started, the full amount is refunded. If you ask us to begin inside the withdrawal period, you owe a prorated amount for work already delivered.

4.2 Fixed-scope engagements

If we miss a delivery date for reasons within our control and the delay exceeds 15 business days beyond the agreed turnaround, you may cancel the remaining scope and receive a refund of the unearned balance. Once a penetration test has been performed or a hardening baseline has been deployed, that portion of the fee is non-refundable because the service has been consumed.

4.3 Retainers

Monthly incident-response retainers can be cancelled at any time before the next billing date; the current month remains payable. Unused prepaid months are refunded pro rata if you cancel within the first 30 days of the retainer.

4.4 How to request a refund

Send a request from [email protected] including your invoice number, the engagement name and your IBAN or card reference. We acknowledge within two business hours and decide within 14 days. Approved refunds are returned to the original payment method by Stripe; banks typically post the credit within 5 to 10 business days.