This policy describes how your personal data is collected, used and protected when you use opaza.studio. It complies with EU Regulation 2016/679 of 27 April 2016 (GDPR) and French Law n° 78-17 of 6 January 1978 as amended.
Data controller
Ethan Huot — opaza.studio. Full contact details in the legal notice. Preferred contact: ethan@opaza.studio.
Data collected
The site only collects data that you voluntarily provide through the contact form:
- your name (or alias)
- your email address
- the content of your message
- your indicative budget range (if filled in)
No other data is collected. The site uses no cookies, no analytics tools, and no third-party trackers.
Purpose and legal basis
Form data is processed solely to respond to your contact request and, where applicable, to establish a business relationship at your initiative. The legal basis is your consent (GDPR art. 6.1.a), formalised by submitting the form.
Recipients and processors
Your data is never shared with third parties for commercial purposes. The following technical processors are involved:
- Vercel Inc. (host, United States) — site delivery. Covered by the European Commission's Standard Contractual Clauses and the Data Privacy Framework.
- Resend Inc. (transactional email, United States) — routes form messages to the publisher's mailbox. Covered by the Standard Contractual Clauses and the Data Privacy Framework.
Retention period
Your data is kept for three (3) years from our last interaction, in line with CNIL recommendations for commercial prospecting. After this period it is deleted, unless you previously request earlier deletion.
Your rights
Under articles 15 to 22 GDPR, you have the following rights over your data:
- right of access and copy
- right of rectification
- right to erasure ("right to be forgotten")
- right to restrict processing
- right to object
- right to portability
- right to withdraw consent at any time
- right to set instructions about your data after death
To exercise these rights, write to ethan@opaza.studio. A reply will be provided within one month, extendable by two months in case of complexity.
You also have the right to lodge a complaint with the French data protection authority (CNIL) if you consider that processing of your data is not compliant: cnil.fr/fr/plaintes.
Cookies and trackers
opaza.studio uses no cookies, no trackers, no audience analytics (Google Analytics, Plausible, etc.), no advertising pixels, and no social network embeds. No information is stored on your device by the site, beyond your browser's standard technical caches.
Security
The site is served exclusively over HTTPS. Form data transits encrypted (TLS) and is only stored within the publisher's email inbox, since it is received as email.
Transfers outside the EU
Technical processors (Vercel, Resend) are established in the United States. Data transfers to that country are governed by the Standard Contractual Clauses adopted by the European Commission and by these processors' adherence to the Data Privacy Framework.
Changes
This policy may be updated to reflect legal, technical or organisational changes. The last-updated date appears at the bottom of this page. Material changes will be communicated by appropriate means.