Privacy policy

Data controller

The data controller is STAND UP CONCEPTION (SAS), 26 ter rue du Docteur Hénouille, 94230 Cachan, France. For any question about your data: [email protected].

Data we collect

Through the “Let's talk about your project” form we collect:

• your name and email address
• your company and phone (optional)
• the project type, timeline and budget you select (optional)
• your project description and any files you attach
• technical data sent automatically when you submit (IP address and information about your browser and device), used only to secure the form and prevent abuse

We collect no browsing data for advertising or audience-measurement purposes (see the Cookies page).

Purposes and legal bases

Your data is used only to answer your request, study your project and prepare a possible collaboration. Legal basis: pre-contractual measures and legitimate interest. We do not use your data for marketing without your agreement.

Recipients and sub-processors

Form data is received and stored on STAND UP CONCEPTION's own server, then notified to us by email through our mail provider OVH (established in the European Union); no third-party form-collection service is used. Site delivery relies on our host / CDN Cloudflare, Inc. (United States). If you choose to load the Facebook post embedded on the “Project” page (it only loads after you click), your browser then contacts Meta Platforms, Inc. (United States), which may act as a recipient at that point. Your data is handled by the STAND UP CONCEPTION team; we never sell or rent it to third parties.

Transfers outside the European Union

We use no audience-measurement tool and typefaces are hosted directly on the site. Two providers are, however, established in the United States: our host / CDN Cloudflare, Inc., through which site traffic transits, and — only if you click to load the embedded Facebook post — Meta Platforms, Inc. These transfers are governed by the European Commission's Standard Contractual Clauses and/or membership of the EU-US Data Privacy Framework. Apart from these cases, no data is transferred outside the European Union.

Retention periods

• Form (prospect) data: 3 years from our last contact.
• Client data: 3 years from the end of the relationship, excluding accounting obligations (10 years).
• Technical security data (IP address): 12 months maximum.
• Proof of consent: about 6 months.

Your rights

Under the GDPR you have the following rights over your data:

• right of access and rectification
• right to erasure
• right to restriction of processing
• right to object
• right to data portability
• right to withdraw your consent

To exercise these rights, write to [email protected]. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.