Privacy policy
How Kimo Studio collects, uses and protects your personal data, in accordance with the GDPR.
To check before going live
- Remove the Formspree paragraph if you do not use it
- Add an analytics section if you install a statistics tool; a cookieless tool avoids the consent banner
- Self-host the fonts to remove the Google Fonts request
This policy reflects how the site actually works as delivered. Update it if you add a third-party service.
1. Data controller
Kimo Studio, a sole trader established in the Alpes-Maritimes (France), is the controller for the processing described below. For any question regarding your data: contact@kimostudio.fr.
2. Data collected
We only collect the data you voluntarily provide, plus the technical data required to run the website.
- Contact form: full name, business name, email address, phone number (optional), current website address (optional), type of business and the content of your message.
- Server logs: IP address, date and time of visit, pages viewed and browser type, automatically recorded by our host for security purposes.
3. Purposes and legal bases
- Answering your enquiry and sending you a proposal — legal basis: pre-contractual measures taken at your request (article 6.1.b GDPR).
- Keeping the site secure and operational — legal basis: legitimate interest (article 6.1.f GDPR).
Your data is never used for automated marketing, and is never sold or transferred to third parties.
4. Recipients
- Kimo Studio, sole recipient of the messages received.
- Hostinger International Ltd (Cyprus, European Union), host of the website and mailboxes, acting as a processor.
- Formspree Inc. (United States), if the contact form is connected to that service: the transfer then relies on the European Commission’s standard contractual clauses. Remove this line if you do not use Formspree.
5. Retention periods
- Enquiries with no follow-up: three years from the last exchange.
- Client data: for the duration of the contract, then ten years for accounting records, as required by French commercial law.
- Server logs: twelve months maximum.
6. Cookies and analytics
This website sets no cookies and uses no analytics tool. No consent banner is therefore required.
Fonts are however loaded from Google Fonts, which transmits your IP address to Google LLC. This dependency can be removed by self-hosting the font files.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data. You may exercise these rights at any time by writing to contact@kimostudio.fr. You will receive a reply within one month.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French data protection authority: www.cnil.fr.
8. Security
The website is served entirely over HTTPS. Messages received are stored in password-protected accounts and backed up daily.