Legal
Privacy Policy
Data we collect
The contact form collects your name, email address and message, which are required, and your company, which is optional. The message must be at least 20 characters. If a required field is missing, the message is not sent. This site is hosted on a VPS at OVH SAS (see the Legal Notice): its nginx server writes an access log — including your IP address and browser — to the container logs that Coolify collects on that VPS. This site sets no cookie and no analytics tag.
Purpose and legal basis
This data is used only to read and answer your request. The legal basis is article 6(1)(b) GDPR: you asked to be contacted about a possible engagement.
Retention
The data is kept for 3 years after our last exchange, then deleted. If a contract follows, invoices and contract records are kept for the French accounting period, which is 10 years.
Recipients
The data is received by JB Laurent, who is the controller. Your data is never sold. When you send the contact form, your request reaches two services. An n8n automation self-hosted by JB Laurent sends JB Laurent a Telegram notification that only says a new request arrived and points to HubSpot: Telegram's operator is based in the United Arab Emirates, outside the European Union, so this notification contains no personal data — no name, no email, no company, no message. Your details (name, email, company and message) are stored as a contact record in HubSpot (HubSpot, Inc.) and also appear in the execution log of the n8n automation self-hosted by JB Laurent on that OVH VPS: n8n records executions by default, and saving them is to be switched off at deployment (saveDataSuccessExecution: none). The HubSpot account is hosted in HubSpot's European Union data centre (eu1 region), so the contact record is stored in the European Union. HubSpot's parent company, HubSpot, Inc., is based in the United States: where HubSpot or one of its sub-processors accesses the data from outside the European Economic Area, that transfer is covered by the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (article 45 GDPR). Where an adequacy decision does not apply, the transfer is safeguarded by standard contractual clauses adopted under article 46(2)(c) GDPR.
Your rights
Under the GDPR you have the right to access, rectify, erase, object to, restrict and port your personal data. To exercise these rights, contact me at [to be provided before publication]. You can also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
Cookies and analytics
At this stage the site sets no cookies and uses no analytics or tracking tools.