Privacy policy
This policy explains how personal data is processed through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act No. 78-17 of 6 January 1978.
1. Controller
Ivette Guadalupe Palacios Giffard (Ivy Interior Design)
[TO BE COMPLETED: STREET]
49000 Angers
France
Email: [TO BE COMPLETED: EMAIL]
No data protection officer has been appointed (not required under Art. 37 GDPR).
2. In short: no cookies, no tracking
This website sets no cookies and uses no tracking, analytics, advertising, external web fonts, embedded maps or embedded social media content. A consent banner is therefore not required (Art. 5(3) Directive 2002/58/EC). All resources, including fonts, are served from our own server.
3. Hosting and server logs
Each visit automatically logs: IP address, date and time, requested page, status code, data transferred, referring page, browser and operating system.
- Purpose: delivering the website, security, detecting and preventing abuse.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure, functional website.
- Retention: [TO BE COMPLETED: LOG_RETENTION_DAYS] days, then deleted or anonymised.
- Processor: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland / Allemagne / Germany / Alemania, under a data processing agreement pursuant to Art. 28 GDPR. Data is hosted within the European Union.
4. Contact form and email
When you contact us, we process the data you provide: name, email address, phone number (optional), project type and message.
- Purpose: answering your enquiry and, where relevant, preparing a quote.
- Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR); otherwise our legitimate interest in replying to messages (Art. 6(1)(f)).
- Retention: 3 years from the last contact if no contract follows; if a contract is concluded, for its duration and then statutory retention periods (e.g. 10 years for accounting records under French law).
- Recipients: only Ivette Palacios Giffard and the email hosting provider as processor. Data is never sold or used for advertising.
Fields marked with an asterisk are needed to reply to you. The form stores nothing in a database: your message is forwarded by email and not kept on the web server.
Project request
The project request form also sends: project type, package considered, area, room(s), floor area, indicative overall budget and desired start date, for the same purposes, on the basis of pre-contractual steps (Art. 6(1)(b) GDPR). If you arrive via an Instagram link, the link source (“utm” parameters, e.g. “instagram / bio”) is attached to your request, without cookies or trackers.
5. Links to social networks
The LinkedIn and Instagram links are plain hyperlinks: no data is sent to these platforms unless you click. Their own privacy policies then apply.
6. Transfers outside the EU
This website does not transfer data to third countries.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and data portability (Arts. 15–21 GDPR), and under French law the right to set instructions regarding your data after your death (Art. 85 French Data Protection Act). To exercise them, email [TO BE COMPLETED: EMAIL]. We will reply within one month.
There is no automated decision-making or profiling (Art. 22 GDPR).
8. Complaints
You may lodge a complaint with the French data protection authority CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr, or with the supervisory authority where you live (Art. 77 GDPR).
9. Security
The website is served exclusively over HTTPS (TLS, HSTS) with strict security headers. Access to messages is limited to the publisher.