AUDIT 404 CONSEILS SARL attaches particular importance to the protection of your data. This policy explains what data is collected on the audit404conseils.com website — quote requests, appointments, payment, training, applications, newsletter and contact —, why, for how long, to whom it is disclosed and what your rights are. It applies in accordance with the Digital Code of the Republic of Benin (Book V) and, for individuals located in the European Union, the GDPR.
1. Data controller and data protection officer
AUDIT 404 CONSEILS SARL (acronym A 404 C), limited liability company, Ilot C/SB, Cocotomey district, Abomey-Calavi, Republic of Benin — RCCM RB/ABC/26 B 11731 — IFU 3202653739622. Legal representative: Mr Romaric MEGNIHA. Data protection officer: controle@audit404conseils.com, or by post to the registered office “for the attention of the DPO”.
2. Principles
- Lawfulness, fairness and transparency: each form states the purpose of the collection.
- Data minimisation: only necessary data is requested; optional fields are indicated.
- Purpose and storage limitation: data is deleted or anonymised at the end of the set period.
- No consent is pre-ticked; consent to the newsletter is never tied to a quote request.
3. Processing carried out on the website
| Processing | Purpose | Legal basis | Data | Retention |
|---|---|---|---|---|
| Quote request | Prepare and send the personalised quote | Pre-contractual measures | Identity, job title, contact details, organisation, need, attachment | 3 years after the last contact |
| Online appointments | Organise the call, send the invitation and the reminder | Pre-contractual measures | Identity, e-mail, phone, time slot, meeting format | 3 years after the appointment |
| Online payment | Collect the deposit or invoice, issue the receipt, prevent fraud | Performance of the contract; legal obligation | Reference, amount, method, Mobile Money number, status — never card data | 10 years (accounting records) |
| Clients and invoicing | Perform engagements, invoice | Performance of the contract; legal obligation | Identity of the client and contact person, invoicing details | Duration of the engagement + 10 years |
| PECB training | Registration, exam organisation, certificate | Contract; consent for transfer to PECB | Identity, employer, funding, results, attendance | 10 years (invoicing); 5 years (results) |
| Applications | Recruitment for the Firm or its clients | Pre-contractual measures; consent for the talent pool | CV, cover letter, contact details, skills keywords | End of recruitment; 24 months if in the talent pool |
| Accreditation of trainers and consultants | Review the application, assess and contract the partnership | Pre-contractual measures; consent for retention in the network | Identity, contact details, fields, certifications, CV, supporting documents, references | End of the application review; 3 years in the network with consent; duration of the contract + 5 years in the event of a partnership |
| Staffing requests | Respond to the company, propose profiles | Pre-contractual measures | Contact person, position, profile sought, job description | 3 years |
| Regulatory newsletter | Send the newsletter (Brevo tool) | Consent | E-mail, topics, proof of consent | Until unsubscription + 3 years for proof |
| Visitor reviews | Publish reviews after verification and moderation; reply publicly | Consent | Rating, review, display name, job title; e-mail not published | Publication period; e-mail deleted 3 months after verification |
| Contact | Reply to the message | Legitimate interest | Identity, e-mail, subject, message | 12 months after the reply |
| Exercise of rights | Handle data subject requests | Legal obligation | Identity, request, supporting document | 5 years |
| Audience measurement | Visit statistics (Google Analytics) | Consent | Pseudonymised browsing data, anonymised IP | 13 months maximum |
| Client area | Engagement monitoring, secure exchanges and uploads | Performance of the contract | Identity, two-factor access, documents, logs | Duration of the engagement + 5 years |
4. Online payment
Mobile Money and card payments are processed by the licensed payment provider FedaPay (Benin), which acts as data controller for fraud prevention. The Firm only receives the reference, the amount, the method used, the Mobile Money number where applicable and the payment status. It never receives or stores card numbers.
5. Recipients
Authorised members of the Firm, according to their role; our technical processors acting on our instructions and bound by contract: website hosting (OVHcloud, France), e-mail (OVHcloud, France), newsletter delivery (Brevo, France), audience measurement (Google, United States, with your consent), anti-bot protection (Cloudflare), payment provider (FedaPay, Benin); PECB (Canada) for exams, with your express consent. We never sell, rent or transfer your data.
6. Transfers outside Benin
Some recipients are located outside Benin (France, United States, Canada). These transfers are subject to appropriate safeguards, in accordance with the Digital Code, and preceded by the required formalities with the APDP.
7. Security
- Encryption of exchanges (HTTPS/TLS) across the whole website.
- Two-factor authentication for the back office and the client area; role-based access; tamper-proof action log.
- Antivirus scanning of attachments (CVs, quote documents) before storage.
- Encrypted daily backups; automatic deletion at the end of retention periods.
8. Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent at any time (newsletter, talent pool, audience measurement). Exercise them via the “Exercise my rights” link in the footer or at controle@audit404conseils.com. After verifying your identity, we reply within one month, which may be extended in the cases provided for by law. You may refer the matter to the Personal Data Protection Authority (APDP, www.apdp.bj).
9. Cookies and local storage
| Purpose | Trackers | Duration | Consent |
|---|---|---|---|
| Necessary | Session, security, anti-bot protection (Cloudflare Turnstile), remembering your cookie choices | Session to 6 months | Not required |
| Quote draft | Local saving of your input, in your browser only, so you can resume your request | 7 days, deleted after sending | Not required (service requested) |
| Audience measurement | Google Analytics (anonymised IP address) | 13 months maximum | Required |
| Third-party content | Map (OpenStreetMap), embedded videos | According to the third-party publisher | Required |
The “Reject all” button is as visible and simple as “Accept all”. Your choice is kept for 6 months and can be changed at any time via the “Manage cookies” link in the footer.
10. Updates
Version 1.1 of 6 November 2026. Any substantial change is announced on the website.