Privacy Policy

Draft of 22 September 2026

Draft. This text has not been reviewed by a lawyer. Every highlighted blank needs a real value, and the facts below need checking against the services actually in use, before the site is published. Search the file for todo to find the blanks.

This page explains what happens to personal data when you visit this site or get in touch with us, and what you can ask us to do about it. We keep it short because the site collects very little.

Who is responsible

[legal name], [legal form, e.g. SAS], registered at [registered address], France, is the data controller for this site. Reach us at [contact email].

[If a data protection officer has been appointed, give their contact here; otherwise delete this sentence.]

What this site does

The site is a single public page describing our work, plus these legal pages. There is no account to create, no newsletter, and no form hosted on the site itself. The two ways to reach us — the booking link and our email address — both hand you over to another service, described below.

What we collect, and why

When you visit the site

DataIP address, date and time of the request, page requested, browser and operating system, referring page

Where it comes fromThe web server's own logs, kept by our host

WhyTo keep the site running, diagnose faults, and detect abuse

Legal basisOur legitimate interest in a working, secure site (GDPR Article 6(1)(f))

Kept for[confirm the retention period applied by the host]

When you book a call

DataYour name, email address, the slot you pick, and anything you write in the booking form — plus whatever else [scheduling tool, e.g. Calendly] asks for

Where it comes fromYou, on the scheduling page the "Book a call" button opens

WhyTo arrange and hold the meeting you asked for

Legal basisSteps taken at your request before entering into a contract (Article 6(1)(b))

Kept for[e.g. 3 years after our last contact]

When you email us

DataYour address, your message, and anything you attach

WhyTo answer you, and to keep a record of what was agreed

Legal basisOur legitimate interest in replying, or the contract if you become a client

Kept for[e.g. 3 years after our last contact]

Cookies

This site sets no cookies and runs no analytics. See the cookie page for the detail.

Who else sees it

We do not sell personal data and we do not use it for advertising. The only companies involved are the ones that run the site and our tools:

[hosting provider, e.g. Hostinger International Ltd] — hosts the site and keeps the server logs. Servers in [country].
[scheduling tool, e.g. Calendly LLC] — runs the booking page and stores what you enter there.
[email provider, e.g. Google Workspace or Microsoft 365] — carries and stores our mailbox.

We may also share data with our accountants or lawyers where we have to, and with any authority that is legally entitled to ask for it.

Data leaving the EU

[scheduling tool] is based in the United States, so some data reaches servers outside the EU. Those transfers rely on [confirm per provider: EU-US Data Privacy Framework certification, or standard contractual clauses]. You can ask us for a copy of the safeguards in place.

Your rights

Under the GDPR you can ask us to:

give you a copy of the data we hold about you;
correct it if it is wrong;
delete it;
restrict what we do with it, or object to it — including any use we base on legitimate interest;
hand it to you, or to someone else, in a portable format;
withdraw your consent, wherever we relied on it.

French law also lets you tell us what should happen to your data after your death.

Write to [contact email] and we will answer within one month. We may ask you to prove who you are first. If our answer does not satisfy you, you can complain to the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or cnil.fr.

How we protect it

The site is served over HTTPS. It holds no database of its own: apart from the server logs, everything described above sits in the accounts of the providers listed, protected by their security and by access limited to the people at Mediplus Advisory who need it.

Children

This site is meant for professionals. We do not knowingly collect data about anyone under 15.

Changes

If this policy changes, the date at the top of the page changes with it. [Say here if you will also notify clients directly.]