Privacy policy

2.What data we collect

The site is a set of static pages. There is no account, no basket, no newsletter, no profiling. In practice, all we ever receive is:

• The contact form data: your name, your email address, the subject you picked and your message. You decide what goes in it.
• The host's technical logs, generated automatically on every visit (IP address, date, page requested, browser type). They serve security and availability, and we do not read them individually.
• Nothing else. No analytics, no advertising pixel, no embedded social network.

We never collect payment details: purchases happen on the provider's site, never here.

3.Why we use it

Each processing operation has a purpose and a legal basis under the GDPR:

• Replying to your message. Legal basis: your consent, given by writing to us. Your details are used for that reply and nothing else.
• Keeping the site secure and working, through the host's logs. Legal basis: our legitimate interest in a site that stays available and protected from abuse.

Your data is never used for marketing, nor to sign you up to anything you did not ask for.

4.Which providers are involved

Three technical providers may see your data pass through. They act as processors, on our instructions only:

EmailJS

Carries the message typed in the form through to our mailbox. privacy policy

Google (Gmail)

Hosts the mailbox that receives and stores your messages. privacy policy

Cloudflare

Hosts and serves the site, and produces the technical logs. privacy policy

5.Cookies and local storage

The site sets no cookies, which is why no consent banner greets you: there is nothing to consent to. No analytics is in place.

One technically necessary exception: when you send the form, the sending tool writes a timestamp to your browser's local storage in order to limit repeated sends. That value never leaves your device and enables no tracking.

In detail

Cookie policy

6.Who we share your data with

The three processors listed above, and nobody else. We do not sell, rent or trade personal data. Partner providers never receive your details: when you click a link to one of them you leave our site, and their own policy applies from there.

Disclosure to an administrative or judicial authority remains possible where the law requires it.

7.Transfers outside the European Union

Our three providers are US companies, so your data may be processed in the United States. Those transfers rely on the mechanisms provided by the GDPR, in particular the European Commission's standard contractual clauses and, where applicable, certification under the EU–US Data Privacy Framework.

If that is a problem for you, write to us from your own mail client rather than through the form: the message will then not pass through EmailJS.

8.How long we keep it

We keep nothing longer than necessary:

• Contact messages and the details attached to them: three years from the last exchange, then deleted from the mailbox.
• The host's technical logs: for whatever retention period Cloudflare applies, on the order of days to weeks.

9.Your rights

The GDPR gives you, over data concerning you, a right:

• of access: to obtain a copy of the data we hold about you;
• of rectification: to have inaccurate information corrected;
• of erasure: to ask that your message and details be deleted;
• to object and to restrict: to oppose a processing operation or have it frozen;
• to portability: to receive your data in a reusable format.

To exercise any of these, write to [email protected]. We reply within one month. If our answer does not satisfy you, you can lodge a complaint with the CNIL (cnil.fr), the French supervisory authority, or with the authority in your own country.

10.Security

The site is served over HTTPS only and has no database: there is no visitor file to compromise. Messages we receive live in a mailbox protected by a password and two-factor authentication. No system is infallible, so please do not send sensitive information through a form.

11.Changes to this policy

This policy may change as the site does: a new tool, a new feature. The last-updated date is at the top of the page. If a change materially affects your rights, we will say so visibly on the site.

12.Governing law

This policy is governed by French law and by the General Data Protection Regulation (EU 2016/679).