Data protection
Last updated: 6 September 2026

Privacy policy.

Our personal data protection policy, under the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French Data Protection Act.

This is a courtesy translation. In the event of any discrepancy, the French version prevails.

01Purpose

This privacy policy sets out how the personal data of users of agence-dubois.fr is collected, processed and protected, under the General Data Protection Regulation (GDPR) and applicable French law.

By using this site, you accept the practices described below.

02Data controller

Dylan Dubois, as publisher of the site, is the controller of the personal data collected through agence-dubois.fr.

Contact · hello@agencedubois.com

03Data collected

The site collects only the data needed for it to work properly and to handle enquiries.

Data collected through the contact form

  • · First and last name
  • · Email address
  • · Phone number (optional)
  • · Business name
  • · Type of activity
  • · Town or city
  • · Subject of the enquiry
  • · Approximate budget (optional)
  • · Free-text message

Data collected automatically (by our host, Vercel)

  • · IP address
  • · Browser and device type
  • · Technical browsing data (server logs)

No sensitive data is collected.

04Purposes of processing

Your data is collected for the following purposes:

  • · Replying to enquiries sent through the contact form
  • · Preparing quotes for the services offered
  • · Maintaining the technical security of the site (server logs)
  • · Improving how the site works and performs

Your data is never used for commercial purposes without your explicit consent, nor passed to third parties for marketing.

05Legal basis

Processing rests on:

  • · Your consent: voluntary submission of the contact form
  • · Legitimate interest of the site owner: security, technical operation
  • · Legal obligation: retention of technical logs
06Retention periods

Contact form · 36 months after the last exchange

Technical logs · 12 months maximum

Accounting records · 10 years where an assignment was carried out, as required by law

Your data is not kept longer than is strictly necessary.

07Processors and recipients

The data collected may be passed to the following technical processors, strictly within the purposes described above:

a) Vercel Inc. · site hosting

Address · 440 N Barranca Avenue #4133, Covina, CA 91723, United States

Website · vercel.com

Transfer governed by the standard contractual clauses and certification under the EU-US Data Privacy Framework.

b) Resend · sending the contact form emails

Website · resend.com

Resend receives and forwards by email the messages sent through the site's contact form. Transfer governed by Resend's terms and standard data protection clauses.

Data is never sold, exchanged or transferred to third parties for commercial purposes.

08Your rights

Under the GDPR, you have the following rights over your personal data:

  • · Right of access: to know what data is held about you
  • · Right to rectification: to correct inaccurate data
  • · Right to erasure: to request deletion of your data
  • · Right to object: to refuse a specific processing operation
  • · Right to restriction: to limit certain processing
  • · Right to portability: to receive your data in a usable format
  • · Right to withdraw: to withdraw your consent at any time

To exercise these rights, write to hello@agencedubois.com. You will receive a reply within one month at most.

If a disagreement persists, you have the right to lodge a complaint with the CNIL, the French data protection authority.

09Security

Agence Dubois puts in place reasonable technical and organisational measures to protect your data against unauthorised access, loss, alteration or accidental disclosure. In particular:

  • · Hosting on Vercel infrastructure (SOC 2 Type II, ISO 27001 certified)
  • · Secure HTTPS connection across the whole site
  • · Restricted access to contact form data

That said, no transmission of data over the internet can be guaranteed 100 % secure.

10Cookies

The site uses only technical cookies that are strictly necessary for it to function (for example: preserving the scrolling mode, briefly storing technical settings).

No advertising cookies, no third-party analytics cookies (Google Analytics, Meta Pixel and the like) and no social sharing cookies are placed on your device.

As a result, no consent banner is shown on the site, in line with CNIL guidance: cookies strictly necessary for the site to work do not require consent.

Full details are set out in our cookie policy. You can delete technical cookies at any time through your browser's settings (Chrome, Firefox, Safari, Edge).

11Changes

This privacy policy may be updated at any time, in particular to reflect changes in our practices or in applicable regulation. The date of the last update is shown at the top of this page.

Facial massage in a salon, hands resting on the temples of a reclining client

Ready to give your brand
the image it deserves?

Thirty minutes, free of charge, no strings attached. We talk through your project and tell you honestly whether we are the right partner.