Privacy Policy — NextWorkStep

At NextWorkStep, we take privacy seriously. This page explains what data we collect, why we use it, how long we keep it, and what your rights are.

1. Who is responsible for processing your data?

NextWorkStep is the data controller for the personal data described in this policy. If you have any question about your data, its use, or exercising your rights, you can contact us through the contact details provided on the site.

This policy applies to data collected via our website, our waitlist forms, our contact requests, as well as future services offered by the platform.

2. What data may we collect?

We only collect the data necessary for the service to function properly and to manage our relationship with users.

Identity data: first name, last name if provided, or other information you enter voluntarily.
Contact data: email address, and optionally company, role, or professional context.
Browsing data: pages visited, referral source, UTM parameters, minimal technical information.
Service usage data: form responses, preferences, interactions with the product.
In some cases, additional data may be voluntarily provided by the user to improve the quality of guidance or matching.

3. Why do we use this data?

Data is used for specific, explicit, and limited purposes.

Managing waitlist sign-ups.
Responding to contact or demo requests.
Improving the user experience and product quality.
Understanding how the site is used and measuring interest in certain features.
Informing registered users about the launch, tests, or evolution of the service, where they have consented.
Ensuring the security, maintenance, and proper technical operation of the site.

4. Legal basis for processing

Depending on the case, we process data on one of the following legal bases:

Your consent, when you voluntarily sign up or agree to be contacted.
The performance of pre-contractual measures, for example when a company or recruiter requests a demo.
Our legitimate interest, in particular to improve the product, secure the site, or understand usage in a proportionate way.

5. How long do we keep your data?

We keep data for a limited period, adapted to its actual use.

Waitlist, contact, or demo data is kept only for as long as needed for the relationship or the associated legitimate interest. Once no longer useful, it is deleted or anonymized.

Exact retention periods may change depending on the nature of the service, applicable legal obligations, and what is strictly necessary for the platform to operate.

We do not sell your personal data.

Some data may be processed by technical subprocessors that are strictly necessary for the service to operate: hosting, email delivery, audience measurement, technical tools, or infrastructure services.

In this context, we limit access to data, contractually frame these processing activities, and choose providers that offer sufficient guarantees.

7. AI, profiling, and decision support

NextWorkStep may use analysis and assistance mechanisms, including artificial intelligence tools, to help surface ideas, pathways, or recommendations.

These processes are designed to support understanding and decision-making, never to impose an automatic verdict. We favor a logic of assisted reading, not blind automation.

When a more advanced service becomes available, further details will be provided on the nature of the processing involved.

8. Cookies and audience measurement

The site may use cookies or similar technologies for its operation, audience measurement, or to improve the user experience.

Where required by law, your consent is collected before certain non-essential cookies are set.

You can also change your preferences at any time using the mechanisms provided on the site.

9. Your rights

In accordance with the GDPR and applicable regulations, you have several rights regarding your personal data.

Right of access to your data.
Right to rectification if certain information is inaccurate.
Right to erasure within the limits provided by law.
Right to restriction of processing in certain cases.
Right to object where processing is based on legitimate interest.
Right to data portability where applicable.
Right to withdraw your consent at any time, where processing is based on this ground.

To exercise your rights, you can contact us through the contact details provided on the site. In case of reasonable doubt, we may request identity verification before processing the request.

10. Security

We implement reasonable technical and organizational measures to protect data against loss, unauthorized access, alteration, or disclosure.

As no system is infallible, we follow a logic of data minimization, segregation, and continuous improvement of our security practices.

11. Changes to this policy

This privacy policy may be updated to reflect changes to the service, our practices, or legal obligations.

The last-updated date shown at the top of the page identifies the applicable version.

12. Contact

For any question about this policy or the use of your personal data, you can contact us through the contact methods indicated on the NextWorkStep site.