Privacy Policy

Last updated: March 2026

1. Who We Are

Evidentia Consulting ("we", "us", "our") is a consulting firm specialising in regulatory strategy, clinical validation, and product development for FemTech and women's health innovators. We are based in Paris, France, and operate globally.

For any questions about this policy or how we handle your data, please contact us at: hello@evidentia-consulting.com

2. What Data We Collect

When you submit our Contact Us form, we collect the following personal data:

  • First name and last name

  • Email address

  • Any additional information you choose to provide in your message, which may include descriptions of products or devices you are developing

We also collect information you provide when using any interactive tools made available on our website (for example, tools that help you draft regulatory or clinical documents). This may include descriptions of your product, its intended use, target population, and other details you choose to enter into those tools.

We only collect data that you voluntarily provide to us. We do not collect any data automatically through tracking technologies on our website.

3. How We Use Your Data

We use the information you provide solely to respond to your enquiry and to communicate with you about the services you have expressed interest in. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the basis of legitimate interests (Article 6(1)(f) GDPR) — specifically, to respond to business enquiries submitted to us — and, where relevant, on the basis of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).

If you provide sensitive information relating to health or medical devices in your message, we process that information solely on the basis of your explicit consent by choosing to share it with us.

5. How Long We Keep Your Data

We retain your contact information and correspondence for as long as is reasonably necessary to manage our business relationship with you, and for a period of up to 3 years after our last meaningful contact, unless a longer retention period is required by law. After this period, your data will be securely deleted.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share your data with third-party service providers who assist us in operating our website or managing communications (for example, email hosting or CRM tools), strictly for those purposes and subject to appropriate data processing agreements. We do not share your data with any other third parties.

7. International Transfers

If any of our service providers process your data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

8. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

  • Right of access — you may request a copy of the data we hold about you.

  • Right to rectification — you may ask us to correct inaccurate or incomplete data.

  • Right to erasure — you may ask us to delete your data, subject to any legal obligations we may have to retain it.

  • Right to restriction of processing — you may ask us to limit how we use your data in certain circumstances.

  • Right to object — you may object to our processing of your data where we rely on legitimate interests as our legal basis.

  • Right to data portability — you may request that we provide your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at hello@evidentia-consulting.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, please contact us at hello@evidentia-consulting.com.