LeanPrivacy policy
Last updated: 20 July 2026
This page explains what personal data we process, why, for how long, and how to exercise your rights. It is deliberately written in plain language.
1. Data controller
to be completed — publisher of www.myleanmodel.com
and of the app.myleanmodel.com platform (see the
legal notice).
Contact: contact@myleanmodel.com
2. No cookies, no trackers on this website
This website sets no cookies. It uses no analytics, no advertising network, no tracking social buttons and no fonts loaded from a third-party server. That is why you are not shown a consent banner: there is nothing to consent to.
Our host keeps technical connection logs (IP address, date, resource requested) for security and service reliability purposes.
3. If you contact us
Data: the information you send us of your own accord (name, email
address, company, role, message content).
Purpose: answering your enquiry, arranging a demonstration and the
commercial follow-up that flows from it.
Legal basis: pre-contractual steps taken at your request, and our
legitimate interest in replying.
Retention: 3 years from the last contact, then deletion.
4. Commercial prospecting
We may contact by electronic means professionals whose role relates directly to our offering (continuous improvement managers, Lean Managers, quality/EHS leads, site directors in manufacturing and logistics).
Data: name, role, company, professional email address and publicly
available information about the company's context.
Legal basis: legitimate interest in promoting a professional
solution to people whose job it directly concerns (art. 6.1.f GDPR).
Retention: 3 years from the last contact; deleted immediately if
you object.
Don't want to be contacted again? Simply reply “stop” to our message, or write to contact@myleanmodel.com. Your request is honoured without delay and with no need to justify it — we will not come back to you.
5. If you are a platform user
For data entered into the LeanModel platform by our client companies (audits, action plans, KPIs, user accounts), the client company is the data controller; we act as a processor, under the terms of the subscription agreement.
Each client's data is isolated at database level. It is hosted in Europe and remains the client's property; it can be exported at any time, including at the end of the contract.
6. Recipients
Your data is never sold, rented or transferred. It is accessible to the publisher and, for technical purposes only, to our infrastructure providers. The application and your data are hosted in France (OVHcloud). Our business email service is hosted by OVHcloud in Canada, a country recognised by the European Commission as providing an adequate level of personal data protection.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, as well as the right to object to its processing.
To exercise these rights, write to contact@myleanmodel.com. We respond within one month.
If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr — or with the supervisory authority of your own country of residence.
8. Security
Exchanges with the website and the platform are encrypted (HTTPS). Access to data is restricted to those who need it, and each client's data is partitioned at database level.
9. Changes
This policy may be updated to reflect changes to the service or to applicable law. The date of the last update appears at the top of this page.