Privacy.

Two companies run duo&co, and each is responsible for the personal data it handles:

• RMJV Consulting OÜ, registered in Estonia (registry code 16921104, VAT number EE102707353, address Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia).
• Swann Vichot EURL, registered in France (SIREN 831 329 941, address 231 rue Saint-Honoré, 75001 Paris, France). For the website, sign-ups and audit requests, both companies are responsible together. For client work, it is the company named on your proposal and invoice. Contact for anything about your data: hello@duoand.co.

• Audit requests: your name, work email, company website and answers to our questions, so we can assess fit and reply. Legal basis: steps taken at your request before an agreement.
• Newsletter, podcast, events and Club sign-ups: your name and email, so we can send what you signed up for. Legal basis: your consent.
• Buddy: the profile details you share (role, company, interests, what you want from a buddy), so we can match you by hand. Legal basis: your consent.
• Clients: contact and billing details, plus the business data you give us access to, to deliver the work and meet legal duties. Legal basis: contract and legal obligation.
• Site usage: with your consent, Google Analytics, to understand which pages help. Legal basis: your consent.

Only with the providers that help us run things: Lovable (hosts the site and its database, and sends our emails), Slack (alerts us to new requests), Notion (our internal notes and planning), Ausha (hosts the podcast and its player), Google (analytics) and Axeptio (our cookie consent tool). They act on our instructions. We do not sell your data. Some providers may process data outside the EU/EEA, in which case we rely on safeguards such as standard contractual clauses.

Audit and Club requests that do not go ahead: up to 12 months. Mailing lists: until you unsubscribe. Client records: for as long as the work runs and the law requires us to keep invoices (up to 10 years).

You can ask to see, correct, delete or export your data, to object to or restrict how we use it, and to withdraw consent at any time. Every email we send has an unsubscribe link. To use any right, write to hello@duoand.co. You can also complain to your local data protection authority, for example the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or, in France, the CNIL.

We use Axeptio to ask for your consent. Only the cookies the site needs to work are always on. With your consent, we also use Google Analytics, to see which pages help. We do not run ads, so we use no advertising cookies. You can say no, choose what you allow, or change your mind at any time with the "Cookie settings" link in the footer.

If we change this page in a meaningful way, we will update the date above and, where it matters, tell you directly.