Privacy
What happens to your information.
Private draft: the public hosting configuration and provider transfer arrangements remain to be confirmed.
Who is responsible?
Juliette Nothelier — EI, trading as Chromarty, 367 chemin du Moulin, 32480 Gazaupouy, France. Contact: juliettenothelier@gmail.com.
When you send a request
The form transmits your name, business, email, website, message and relevant project answers to the studio’s Supabase database. Juliette reads these requests in her authenticated administration area. Your website is required for a redesign request. You can also choose to contact her directly by email.
If you send the email
Your name, professional contact details, website and message are used to respond to you and, if requested, prepare a proposal. Handling enquiries is based on a legitimate interest in answering them; requested pre-contractual steps are based on those steps. Juliette handles the correspondence, which also passes through the relevant email providers, including Gmail (Google).
Professional prospecting
Professional contact details may be recorded from a business website, a public directory or a direct exchange to assess a website project and follow up a proposal. This is based on a legitimate interest in contacting businesses about services relevant to their activity. You may object at any time by replying to the email. Source details can be requested using the contact address above.
Retention
Contact enquiries are kept for up to 12 months after they are closed, unless they lead to a business relationship or justified retention. Prospecting records are kept for up to three years from collection or the last contact initiated by the prospect; sending a reminder does not restart that period. Data needed to honour an objection may be kept separately for at least three years. Contract and accounting records follow their applicable retention requirements.
Hosting, providers and international processing
Hosting infrastructure may process technical connection logs for delivery and security. The actual public host, its log retention and any transfers must be documented when deployment is configured. Supabase stores form submissions; its project region and transfer safeguards must be documented before public launch. Gmail may involve processing outside the European Economic Area; applicable provider arrangements and safeguards remain to be documented before public launch.
Cookies and local storage
The public website code adds no advertising or analytics tools, and no tracking cookies. It loads no external fonts. Private preview hosting may use its own technical authentication mechanisms. The separate local prospecting tool stores records in the operator’s browser; it is excluded from the prepared Vercel public output.
Your rights
You may request access, correction, erasure or restriction, object to relevant processing, and request portability where applicable. Contact juliettenothelier@gmail.com. You can also lodge a complaint with the CNIL.