Privacy Policy

How your data is collected, used and protected.

This is a courtesy translation. The French version prevails.

1. Data controller

The controller of the personal data collected on this site is:

2. Data collected

I only collect the data you voluntarily send me, through the contact form or the quote simulator:

  • First name, last name or company name
  • Email address
  • Phone number (optional)
  • Your simulator answers (situation, type of site, options chosen) and the resulting estimate
  • Project type, indicative budget and description of your project (form)

When the form is submitted, your IP address is recorded to fight spam. It is erased after 6 months.

No banking data or sensitive information is collected.

Apart from the form, the site produces anonymous traffic statistics, without cookies and without any identifier that could be used to recognise you. Details are in section 8.

3. Purposes of processing

Your data is collected for the following purposes:

  • Respond to your request for a quote or information
  • Prepare and send a personalised quote
  • Email you the estimate prepared from the simulator, as a PDF
  • Follow up on your project if you become a client
  • Protect the site against spam

Your data is never sold, rented or passed on to third parties, and is not used for any commercial purpose other than those listed above. It is not used to send you unsolicited marketing.

4. Legal basis for processing

Each processing activity rests on a separate legal basis:

  • Responding to your request and preparing a quote: pre-contractual steps taken at your request (Article 6.1.b of the GDPR). By filling in the form, you are asking for an offer: it is this step that grounds the processing, not a separate consent.
  • Client relationship management and invoicing: performance of the contract and compliance with legal accounting obligations (Articles 6.1.b and 6.1.c).
  • Fighting spam: legitimate interest in protecting the site and its mailbox (Article 6.1.f).
  • Anonymous traffic statistics: legitimate interest in knowing the site's audience in order to improve it (Article 6.1.f), within the limits of the exemption provided for by the CNIL.

5. Retention period

  • Prospects: data kept for 3 years at most from the last contact
  • Clients: data kept for 5 years at most after the end of the business relationship (legal obligation)
  • Invoicing data: 10 years in accordance with the French Commercial Code
  • Traffic statistics: 25 months at most

These are maximum periods. In practice, the message received through the form is deleted after 12 months, the IP address after 6 months and the PDF of your estimate after 12 months. A file stays active as long as we are in contact: the period restarts with each exchange.

6. Recipients and processors

I am the only recipient of your data. It does, however, pass through the following technical providers, who act as processors and are not allowed to use it for their own purposes:

  • Infomaniak Network SA: hosting of the site and of my mailbox. Messages sent from the form pass through and are stored with this provider.

Infomaniak's servers are located in Switzerland. The European Commission recognises Switzerland as providing an adequate level of data protection, which allows this transfer without further formalities.

Cal.com is the appointment booking service. It is only contacted if you click "See time slots" after sending your estimate. It then receives your name, your email and the summary of the estimate, pre-filled in the booking form. Booking data is hosted in Europe. Its own privacy policy applies to the booking.

Traffic statistics are processed directly on the site's server, without any external analytics provider.

7. Your rights

In accordance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act (Informatique et Libertés), you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure: ask for your data to be deleted
  • Right to portability: receive your data in a readable format
  • Right to object: object to a processing activity
  • Right to restriction: temporarily suspend a processing activity

To exercise your rights, contact me at: contact@leo-lebreton.fr. I reply within one month.

You also have the right to lodge a complaint with the CNIL: www.cnil.fr

8. Cookies and audience measurement

This site sets no audience measurement, advertising or profiling cookies. This is why no consent banner is displayed.

Traffic is measured with Burst Statistics, installed directly on the site's server. No data is sent to Google or to any other analytics service. The tool works without cookies and without technical fingerprinting: each visit is tied to an anonymous value recalculated every day, which cannot be used to recognise you from one day to the next or from one site to another. If your browser sends the "Do Not Track" signal, your visit is not counted.

This processing meets the four cumulative criteria set by the CNIL to be exempt from consent. Details are in my cookie policy.

9. Security

I apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure: encryption of exchanges with an SSL certificate (HTTPS), access to the site's administration protected by strong authentication, regular backups and monitored security updates.

10. Changes

This policy may be updated at any time. The date of the last update is shown at the bottom of the page. I encourage you to check it regularly.

Last updated: September 2026