Personal data

Privacy policy

How your information is used when you visit this website or write to me. Here is a plain explanation, in accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés).

Courtesy translation. The French version is the only legally binding version and prevails in case of any discrepancy: French version.

Data controller

The data controller is Sakura Baudouin, sole proprietor (entrepreneur individuel, EI) trading as SB.agency (SIREN 131209983). Contact for any question about your data: hello@sakurabdn-agency.com.

What I collect, and why

1. The contact form. When you write to me through the form, I collect your name, your email address, the type of request and the content of your message.

  • Purpose: to answer your request, prepare a quote and communicate with you.
  • Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) of the General Data Protection Regulation, GDPR – RGPD in French) and my legitimate interest in responding to business enquiries (Art. 6(1)(f)).
  • Required fields: name, email and message. Without them, I cannot process your request.

2. Your exchanges by email or phone. If you write to me directly or call me, I use the information you give me for the same purposes.

3. Clients. If we work together, I keep the information needed to perform the contract, for invoicing and to meet my accounting and legal obligations (legal basis: performance of the contract and legal obligation).

4. Technical data. To deliver the pages and protect the website against attacks, the host (Cloudflare) technically processes your IP address and connection information (browser, date and time). I have no access to this data on a named basis and I do not use it.

I do not ask you for any sensitive data, and I do not make any automated decisions or carry out any profiling concerning you.

Cookies and trackers

This website sets no advertising cookies, uses no audience measurement trackers and includes no third-party tracking tools (no Google Analytics, no social media pixel). The typefaces and the video are hosted on this website: no request is sent to Google or any other service to load them. No consent banner is therefore required. Technical mechanisms strictly necessary for security and operation may be used by the host.

Who receives your data

  • Me, as the sole recipient of the messages received.
  • Formspree, Inc. (United States), the provider that forwards contact form messages by email. It acts as a processor, stores the messages received in the form management dashboard, displays a confirmation page after submission and uses an internal spam filter, with no third-party verification service such as a CAPTCHA. More information: Formspree privacy policy.
  • My email provider, which hosts the emails exchanged.
  • Cloudflare, Inc. (United States), the website host.
  • Public authorities and administrations where required by law (for example, accounting and tax obligations).

I do not sell or rent your data, and I do not use it for direct marketing without your consent.

Transfers outside the European Union

Formspree and Cloudflare are established in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it or, failing that, on the European Commission’s standard contractual clauses. You can obtain a copy by writing to hello@sakurabdn-agency.com.

How long I keep it

  • Enquiries not followed up: 3 years maximum from the last contact, then deletion (including the copy kept in the form management dashboard and in my mailbox).
  • Quotes, contracts and client correspondence: for the duration of the contractual relationship, then 5 years (civil and commercial limitation period).
  • Invoices and accounting records: 10 years (legal obligation).

Your rights

You have the following rights over your data: access, rectification, erasure, restriction of processing, objection and portability, as well as the right to give instructions on what happens to your data after your death. To exercise them, write to hello@sakurabdn-agency.com. Proof of identity may be requested if there is reasonable doubt. I respond within one month.

If, after contacting me, you consider that your rights have not been respected, you may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority): www.cnil.fr/fr/plaintes (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).

Security

The website is served over HTTPS. Messages can only be accessed from my mailbox and the form management dashboard, both protected by authentication. No password or payment details are requested on this website.

Updates to this policy

This policy may change, for example if I add a tool to this website. The date of the last update is shown below.

Last updated: October 2026