DATA PROTECTION
PRIVACY POLICY.
Data collected, purposes, retention period, sub-processors, your rights under GDPR. Transparent and human-readable.
Last updated: July 28, 2026 — Version 1.7
This page is a translation provided for convenience. In case of discrepancy, the French version (Politique de confidentialité) prevails.
DATA CONTROLLER
Goumies Creative · Romy Alula
Sole proprietorship (micro-entrepreneur), Paris, France
Email: contact@goumies-creative.com
DATA COLLECTED
- Contact form: name, email address, message. Website and budget are optional.
- Analytics: aggregated, anonymous statistics via Plausible (no personal data).
PURPOSES AND LEGAL BASIS
- Responding to your request (form): legal basis Art. 6.1.b GDPR (pre-contractual measures).
- Site improvement (analytics): legal basis Art. 6.1.f GDPR (legitimate interest). No individual tracking.
RETENTION PERIOD
Contact form data is retained for 36 months from the last interaction. Analytics statistics are aggregated and non-identifiable.
SUB-PROCESSORS
Your data may be processed by the following sub-processors, each bound by a Data Processing Agreement (DPA):
- Formgrid (forms): form submission processing. DPA available via Formgrid admin dashboard or on request at contact@formgrid.dev.
- hCaptcha (contact form anti-spam, by Intuition Machines, Inc., United States): bot verification for the form. Your IP address and interaction data are sent to hCaptcha (hcaptcha.com) when the page loads, with no advertising profiling intent.
- Listmonk (email, self-hosted): transactional email delivery.
- Hostinger (hosting, Cyprus): site data storage. Hosting provider located within the European Union.
- Plausible (analytics SaaS, hosted in the EU): aggregated, anonymous statistics, cookie-free.
- cal.eu (scheduling): appointment booking.
YOUR RIGHTS
Under the GDPR and the French Data Protection Act, you have the following rights:
- Right of access (Art. 15): obtain a copy of your data.
- Right to rectification (Art. 16): correct inaccurate data.
- Right to erasure (Art. 17): request deletion of your data.
- Right to data portability (Art. 20): receive your data in a structured format.
- Right to object (Art. 21): object to processing for legitimate reasons.
To exercise these rights, contact us at contact@goumies-creative.com.
COOKIES
This site places no tracking cookies. Only aggregated statistics are collected via Plausible, with no personal identifiers.
SECURITY
Data is transmitted over encrypted connections (HTTPS). Technical and organizational measures are in place to protect your data against unauthorized access.
CONTACT
For any questions regarding the protection of your personal data, contact us at contact@goumies-creative.com.
You may also file a complaint with the CNIL (French Data Protection Authority) if you believe the processing of your data does not comply with the applicable regulations.