Privacy Policy

1. Who We Are

Aldahie Studio is an independent digital studio based in France. We operate aldahie.studio and provide web development, software, hosting, digital services, translation, and related professional services.

For the purposes of applicable data protection laws, Aldahie Studio acts as the data controller for personal data collected through this website and through our direct business relationships.

For privacy-related enquiries, you may contact us at: [email protected]

Additional legal information concerning the operator of Aldahie Studio is available in our Legal Notice.

2. Personal Data We Collect

Depending on how you interact with Aldahie Studio, we may collect the following categories of personal data.

When you contact us through a form, email, or other communication channel, we may collect:

• your name;

• email address;

• company name;

• telephone number, where provided;

• the content of your message;

• information relating to your project or request.

Where you use a service or platform provided by Aldahie Studio, we may process:

• your name and professional contact details;

• account credentials and settings;

• billing and payment information;

• project information and preferences;

• domain and technical configuration information;

• communication history with Aldahie Studio;

• information necessary to provide, support, and maintain the service.

Passwords are stored using secure cryptographic hashing mechanisms and are not stored in plain text.

When you visit our website or use our services, certain technical information may be collected automatically, including:

• IP address;

• browser and device information;

• operating system;

• date and time of access;

• pages or features accessed;

• technical logs;

• session and security information.

This information may be processed for security, fraud prevention, diagnostics, and service operation.

Payments may be processed through third-party payment providers such as Stripe.

Aldahie Studio does not normally store complete payment card details. Payment information is handled directly by the relevant payment provider in accordance with its own security and privacy obligations.

3. How We Use Personal Data

We may process personal data for the following purposes:

• responding to enquiries and project requests;

• preparing quotations and discussing potential services;

• creating and administering client accounts;

• providing contracted services;

• processing billing and payments;

• providing customer support;

• sending transactional and service-related communications;

• maintaining the security and integrity of our website and services;

• detecting abuse, fraudulent activity, or technical incidents;

• monitoring and improving the performance and usability of our services;

• complying with legal, accounting, and regulatory obligations.

We do not sell personal data.

We do not use personal data collected through this website for third-party advertising purposes.

4. Legal Bases for Processing

Depending on the circumstances, personal data may be processed on one or more of the following legal bases under the GDPR.

We process information where necessary to provide a service you have requested or to take steps at your request before entering into a contract.

We may process information where necessary for our legitimate interests, including:

• protecting our services and infrastructure;

• preventing fraud and abuse;

• responding to professional enquiries;

• maintaining and improving our services;

• managing our business relationships.

Where we rely on legitimate interests, we consider the impact of the processing on your rights and interests.

Certain information may be retained or processed where required by applicable law, including accounting, tax, and regulatory requirements.

Where consent is legally required, including for certain cookies, analytics technologies, or marketing communications, we process data only after obtaining that consent.

You may withdraw your consent at any time.

5. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal obligations.

Typical retention periods include:

• contact and project enquiries: up to 12 months after the last meaningful interaction, unless a business relationship begins;

• client and contractual information: for the duration of the business relationship and for any additional period required by law;

• invoices and accounting records: for the applicable statutory retention period;

• technical and security logs: for a limited period appropriate to security and operational requirements;

• account data: while the relevant account or service remains active, followed by an appropriate deletion or archival period.

Specific retention periods may vary where necessary to establish, exercise, or defend legal claims.

6. Service Providers and Data Recipients

We may use trusted third-party service providers to operate our website and deliver our services.

Depending on the services used, these may include:

• Heroku / Salesforce, for cloud infrastructure and application hosting;

• Cloudflare, for content delivery, network security, and DDoS protection;

• Stripe, for payment processing;

• email and communication providers;

• monitoring, logging, and infrastructure providers;

• Microsoft Clarity and Google Analytics, where enabled and subject to the applicable consent requirements.

These providers may process personal data only where necessary to provide their respective services.

Where required, Aldahie Studio enters into appropriate data-processing arrangements with service providers.

7. International Data Transfers

Some service providers used by Aldahie Studio may process or store information outside the European Economic Area.

Where personal data is transferred outside the EEA, we take reasonable steps to ensure that an appropriate legal transfer mechanism is in place, such as:

• an adequacy decision adopted by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• another lawful safeguard permitted under the GDPR.

8. Cookies and Similar Technologies

Our website may use cookies or similar technologies.

Certain cookies are strictly necessary for the website or service to function correctly, including cookies used for:

• Session management and authentication;

• Security and fraud prevention;

• User preferences and settings.

These cookies do not require consent where they are strictly necessary to provide a service requested by the user.

We may use analytics technologies to understand how our website and services are used and to improve their usability and performance.

Where an analytics or tracking technology requires consent under applicable law, it will not be activated before that consent is obtained.

Users can withdraw or modify their consent through the cookie settings made available on the website.

9. Microsoft Clarity

Where enabled, Aldahie Studio may use Microsoft Clarity to better understand how visitors interact with certain pages and interfaces.

Clarity may process information relating to user interactions, device characteristics, browsing activity, and session behaviour.

Where its use requires consent under applicable French or European rules, Clarity will only be activated after the user has provided that consent.

You may subsequently withdraw your consent through our cookie settings.

10. Your Rights

Subject to the conditions provided by applicable law, you may have the right to:

• Access your personal data;

• Rectify inaccurate or incomplete data;

• Request the deletion of your data;

• Object to certain processing activities;

• Request restriction of processing;

• Receive certain personal data in a portable format;

• Withdraw your consent at any time where processing is based on consent;

• Lodge a complaint with a competent data protection authority.

In France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL).

To exercise your rights, contact:

We may need to verify your identity before processing certain requests. We will respond within the timeframe required by applicable data protection law.

11. Security

We implement appropriate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

These measures may include encrypted communications, access controls, secure authentication, infrastructure monitoring, backups, and other appropriate security safeguards.

No online service can guarantee absolute security, but we regularly review our technical and organisational safeguards.

12. Data Processed on Behalf of Our Clients

Certain services provided by Aldahie Studio may involve processing personal data on behalf of a client.

In these situations, the client generally acts as the data controller and Aldahie Studio acts as a data processor.

The processing of such information is governed by the relevant client agreement and, where required, an appropriate data processing agreement.

Individuals wishing to exercise rights concerning data controlled by one of our clients should normally contact that client directly.

13. Automated Decision-Making

Aldahie Studio does not currently use personal data collected through this website to make decisions producing legal or similarly significant effects based solely on automated processing.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, legal obligations, or data-processing practices change.

The latest version will always be published on this page together with the date of the most recent update.

Where a change materially affects how personal data is processed, we will provide additional information or obtain consent where required by law.

15. Contact

For questions concerning this Privacy Policy, the processing of personal data, or the exercise of your rights, please contact: [email protected]

Legal and business identification information is available in our Legal Notice.