Privacy Policy

Introduction

Protecting your personal data is a priority for colibri.sh. This privacy policy explains what data we collect, why we collect it, and how we use it.

Data Controller

Nekolab
Micro-enterprise
SIRET : 814 848 297 00010
2 Rue Maurice Utrillo, 75018 Paris
Email : contact@colibri.sh

Data Collected

We collect the following data:

• Contact information (name, email, company)
• Campaign data (opens, clicks, form submissions)
• Technical data (IP address, browser)

Use of Data

Your data is used exclusively for:

• Conducting phishing simulation campaigns
• Generating campaign reports
• Communication with our clients

Data Retention

Campaign data is retained for a maximum of 30 days after the campaign ends, then automatically deleted. Client contact data may be retained longer for business relationship management.

Data Security

Data is protected by appropriate security measures:

• Database hosted in Europe (Neon, Frankfurt)
• Data encryption in transit (HTTPS/TLS)
• No passwords are ever stored during simulations
• Data access limited to what is strictly necessary

Your Rights

Under the GDPR, you have the following rights:

• Right to access your data
• Right to rectification
• Right to erasure
• Right to portability

To exercise these rights, contact us at contact@colibri.sh.

Contact

For any questions about this privacy policy:

Email: contact@colibri.sh

Last updated: January 2026