Privacy Policy

Template wording aligned with the EU GDPR and French law. Review and complete the [bracketed] details with qualified counsel before launch.

Paris Talents (“we”, “us”) respects your privacy. This policy explains how we collect, use, disclose and protect personal data when you use this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the French Data Protection Act (Loi n° 78-17 “Informatique et Libertés”).

The data controller is Paris Talents — Fardokht Gorouhi, [legal form], [registered address], Paris, France. For any privacy request, contact [privacy@your-domain] (or studio@paris-talents.example).

Data you provide: when you use our enquiry or contact forms we collect your name, email address, and — if you choose to give them — your phone number, city/country and the content of your message. If you subscribe to updates we collect your email address.

Payment data: payments are processed entirely by Stripe on Stripe-hosted pages. We never receive or store your card details.

Booking data: advisory appointments are scheduled and paid through Cal.com, which collects the data necessary to manage your booking.

Technical data: we set only strictly necessary cookies (see our Cookie Policy). We do not collect analytics or advertising data unless you consent.

We process your data to: (a) respond to your enquiries and provide requested information — on the basis of our legitimate interest and/or steps taken at your request prior to a contract (Art. 6(1)(b) and (f) GDPR); (b) conclude and perform sales and advisory services — performance of a contract (Art. 6(1)(b)); (c) send you updates where you have opted in — your consent, which you may withdraw at any time (Art. 6(1)(a)); and (d) ensure security and comply with our legal and accounting obligations — legal obligation and legitimate interest (Art. 6(1)(c) and (f)).

We share data only with service providers acting as processors on our behalf, under written data-processing agreements: Stripe (payments), Cal.com (scheduling), and Amazon Web Services, including AWS SES (hosting and transactional email). We do not sell your personal data or use it for third-party advertising.

Where a processor transfers personal data outside the European Economic Area, the transfer is governed by appropriate safeguards under Chapter V GDPR, such as the European Commission’s Standard Contractual Clauses.

We keep personal data only for as long as necessary for the purposes set out above and to meet legal, tax and accounting obligations. Enquiry correspondence is typically retained for up to [24/36] months and then deleted or anonymised; transaction records are retained for the period required by law.

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting prior processing. To exercise these rights, contact us at the address above; we may need to verify your identity. You also have the right to lodge a complaint with the CNIL, the French supervisory authority (www.cnil.fr).

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No transmission over the internet is, however, completely secure.

We may update this policy from time to time. The version in force is the one published on this page. Last updated: [date].