Privacy policy

1. Data controller

The controller of personal data is Mathieu Michel, sole trader (entrepreneur individuel), operating under the trading name Ancrage.

Address: 54 boulevard Guillaume Apollinaire, 06600 Antibes, France
Email: mathieu@ancrage.studio
Phone: +33 7 64 16 03 52

2. Data collected

Through the contact form, the website may collect:

• Name and, where applicable, company name
• Email address and phone number, when provided
• Website or link to be reviewed
• Message and selected package
• Language and page the enquiry was sent from
• Any UTM parameters present in the page address
• IP address
• Browser (user agent)
• Date the enquiry was received

This data is used to answer enquiries, prepare quotes, keep the forms secure, limit abusive submissions and understand where enquiries come from.

Ancrage does not request sensitive data in its form.

3. Purposes and legal bases

• Responding to enquiries: legitimate interest and pre-contractual steps
• Preparing a quote: pre-contractual steps
• Managing a project or client relationship: performance of the contract
• Managing invoices and accounting obligations: legal obligation
• Keeping the website secure: legitimate interest
• Measuring website audience and improving the content, through Google Analytics 4: consent
• Sending commercial communications only where a valid legal basis or consent allows it

When Google Analytics is accepted, some technical data related to browsing may be processed by Google in order to produce audience statistics. Audience measurement is disabled by default and only starts after your consent, which you can withdraw at any time through the “Manage cookies” link in the footer. See also the cookie information page.

4. Retention periods

• Enquiries without a commercial relationship: for the time needed to handle the enquiry, then a maximum of three years after the last contact
• Client data: for the duration of the contractual relationship, then archived for the statutory period needed to evidence rights and obligations
• Invoices and accounting documents: ten years
• Technical security data: for the period strictly necessary to keep the website secure

5. Recipients

The data is only accessible to:

• Mathieu Michel
• The technical service providers that are indispensable to the operation of the form, the hosting and the email delivery
• Legally authorised authorities where an obligation requires it

Ancrage does not sell or rent any personal data.

6. Service providers and international transfers

The service providers actually used to operate the website are:

• Lovable (Lovable Labs AB): publication and hosting of the website
• Supabase: database in which enquiries sent through the form are stored
• Lovable Emails (Lovable Labs AB): delivery of the email notifications for enquiries received
• Google Analytics 4 (Google LLC): website audience measurement, only after the visitor consents to analytics cookies

Some of these providers may process data outside the European Economic Area. Where this is the case, such processing must be covered by the safeguards provided for by the GDPR.

7. User rights

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability, where applicable
• Right to withdraw consent

Requests can be sent to mathieu@ancrage.studio.

Anyone may also lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr.

8. Security

Ancrage implements reasonable security measures to protect the data transmitted and only collects the data needed to handle enquiries.

9. Policy updates

This policy may change. The update date shown at the top of the page indicates the version in force.