Privacy policy

Draft. The details in brackets must be filled in, and this text read by counsel, before launch. Until both are done it states our intent and binds nobody.

Who is responsible

[legal name], [registered address], France, registered under number [SIREN], decides why and how the data described here is processed. Questions go to [privacy email]. We have not appointed a data protection officer; [name] answers in person.

What we collect

Two things, and nothing else. There is no analytics on this site, no advertising tag, no profiling, and no third-party script of any kind.

• What you write in the contact form: your name, your email address, and — if you fill them in — your company, a budget range and your message. The date of arrival is recorded with it.
• Technical logs kept by our hosts: the IP address of the request, the browser it announces, the page asked for, and the time. They are written automatically and read only when something breaks.

Why, and on what footing

Your message is processed so that we can answer it — steps taken at your request before any contract. The technical logs are kept for the security and the good working order of the site, which is our legitimate interest, and they are not used to identify anyone.

How long we keep it

• Messages: [24 months] after the last exchange, then deleted. A message that becomes a project is kept under the contract instead.
• Technical logs: [30 days] at the host, then rotated out.

Who else sees it

Only the providers that make the site work, and only for that. Cloudflare, Inc. delivers the pages, receives the form and stores the images. [hosting provider] runs the content management system and its database. [email provider], once it is in place, carries the notification that a message has arrived. None of them uses your data for their own purposes.

Where it is kept

In the United States. The images on this site sit in Cloudflare's object storage in eastern North America; your message sits on the server that runs our content management system, hosted by [hosting provider] in [United States region].

This means personal data leaves the European Union. That transfer rests on [the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses — to be settled with counsel, and checked against each provider's current certification]. Ask us and we will send you a copy of the safeguards in place.

What you can ask for

Access to your data, its correction, its erasure, a limit on its use, an objection to its use, and a copy in a portable form. Write to [privacy email] and we answer within one month. We may ask you to confirm who you are, and for no other reason than that.

If our answer does not satisfy you, you may complain to the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or cnil.fr. You do not have to go through us first.

Automated decisions

There are none. No decision about you is taken by a machine on this site, and nothing you send is used to train one.

Changes

This page will change. The version that applies is the one published here on the day of your visit, and the date of the last change is shown at the top.