Loading
Data Protection & Privacy

Privacy Policy

LEKYN commitments regarding confidentiality, security, and regulatory compliance under Benin's Digital Code (Law No. 2017-20 / APDP), the General Data Protection Regulation (EU GDPR), and Gulf (GCC) data protection laws.

Last regulatory update: October 2026

1. Data Controller & Data Protection Officer

The data controller for personal data collected across the LEKYN platform is the legal publisher:

Legal Identity of Controller
LEKYN
Entreprise Individuelle de Services Numériques & Création Digitale • RCCM RB/COT/24 A 12345 · N° IFU : 0202312345678 (Bénin)
Cotonou, République du Bénin
Data Protection Officer (DPO)
LEKYN Data Protection Officer
Direct point of contact for any questions regarding your data:
dpo@lekyn.com
Lead Regulatory Supervisory Authority: APDP (Bénin), CNIL (Europe) & UAE Data Office (GCC)

2. Collected Personal Data & Processing Purposes

In delivering our services, we strictly enforce the principle of data minimization. Only adequate, relevant, and necessary data is collected:

Identity & Contact

First and last name, business name, professional email address, telephone / WhatsApp number for quotes and project tracking.

Contracts & Invoicing

Purchase orders, invoicing history, selected currencies, SHA-256 cryptographic integrity hash in accordance with SYSCOHADA standards.

Technical & Security

Anonymized IP addresses, Dokploy/Docker server security logs, language and currency preferences, anti-CSRF safeguards.

Explicit and legitimate purposes:
  • Management of price quotes, performance of software engineering, design, and editorial contracts.
  • Provision of direct client support and technical updates via WhatsApp and email.
  • Intrusion prevention, transaction security, and regulatory compliance assurance.
  • Accounting, fiscal management, and certified archiving of business orders.

3. Legal Bases for Processing (Benin, EU, GCC)

Every processing activity conducted by LEKYN relies on a lawful basis under applicable international regulations:

Contractual Performance: Necessary for drafting commercial proposals, price estimates, and fulfilling orders (Art. 6.1.b GDPR & Benin Digital Code).
Legal & Fiscal Obligations: Retention of invoices and accounting records mandated by OHADA commercial law (Revised SYSCOHADA) and Beninese tax legislation.
Legitimate Interest & Security: Protection of IT infrastructure against DDoS attacks, fraud detection, and continuous platform enhancements.
Informed Consent: Explicitly granted for optional cookie storage or subscription to direct professional updates.

4. Sovereign Hosting, Security & Data Transfers

Data security and data sovereignty stand at the core of our engineering standards:

Cloud Application Infrastructure
Hetzner Online GmbH / Infrastructure Dokploy
Industriestr. 25, 91710 Gunzenhausen, Allemagne (Datacenters UE)
Isolated Dokploy/Docker containers with end-to-end TLS 1.3 encryption and strict network firewalls.
S3 Object Storage Cluster
Garage S3 Distributed Cluster
Cluster Garage S3 distribué auto-hébergé avec chiffrement souverain
AES-256 encryption at rest, geo-replication without sharing with advertising third parties or data brokers.
LEKYN does not sell, lease, or monetize personal data for marketing purposes. Any technical transfer to payment providers (Stripe, FedaPay) is governed by strict agreements providing data protection equivalent to GDPR and APDP mandates.

5. Data Retention Periods

3 years
Prospecting & Inquiries Data
Starting from the latest active contact initiated by the prospective client.
10 years
Accounting & Financial Records
Statutory obligation to retain accepted quotes, invoices, and accounting entries (SYSCOHADA).
12 months
Access & Connection Logs
Retention of technical audit trails in compliance with statutory security standards.

6. Your Rights & How to Exercise Them

In accordance with data protection frameworks (Benin Law No. 2017-20, EU GDPR, UAE Decree-Law 45/2021, Saudi PDPL), you hold the following rights over your personal data:

Right of Access & Disclosure Obtain confirmation of data processing and a complete copy of information held.
Right to Rectification & Update Request correction of inaccurate, incomplete, or outdated data.
Right to Erasure ('Right to be Forgotten') Request erasure of your personal data, subject to legal archiving obligations.
Right to Object & Restrict Processing Object to certain processing operations or request temporary restriction of processing.
How to exercise your rights with LEKYN?

Simply submit a written request via email to our Data Protection Officer:

dpo@lekyn.com Average response turnaround: under 30 calendar days.