Privacy Policy

This is an English translation of our privacy policy, provided for convenience. In case of discrepancy, the French version prevails.

This privacy policy explains to users of the Quêtes et Racines website how their personal data is collected, used and protected, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The controller of personal data is:

  • Name: Stéphanie PERRIN
  • Legal status: sole proprietorship (« Entrepreneur Individuel » under French law)
  • Address: 23 rue Principale – 57420 COIN-LES-CUVRY, France
  • Contact email: stephanie@quetesetracines.com

2. Personal data collected

The Quêtes et Racines website may collect the following personal data:

  • First and last name
  • Email address
  • Phone number (if provided in the form)
  • IP address
  • Browsing data (pages viewed, length of visit, referral source)

This data is collected through:

  • The contact form
  • Audience measurement tools
  • Cookies and trackers

3. Purposes of data collection

Personal data is collected for the following purposes:

  • Replying to messages sent through the contact form
  • Ensuring the website works properly
  • Analysing website traffic and improving its content
  • Sending up to 5 emails with research tips, only to people who have ticked the dedicated box in the form
  • Sending a single follow-up email after a quote has been sent or after a research report has been delivered
  • Ensuring the security of the website

4. Legal basis for processing

Data processing is based on:

  • The performance of pre-contractual measures taken at the user’s request (replying to requests sent through the contact form, preparing a quote and following up on it) — Article 6(1)(b) GDPR
  • The user’s consent (non-essential cookies and trackers, audience measurement, Google Maps, research tips by email)
  • The legitimate interest of the website owner (website security, protection against automated submissions, a single follow-up email sent to a client after their report has been delivered)
  • Applicable legal obligations

5. Data retention

Personal data is kept for the following periods:

  • Data from a contact or quote request not followed by an order: 3 years after the last exchange
  • Client file data and documents: 5 years after the end of the service (French limitation period, Civil Code art. 2224), then deleted; invoices and accounting records (including accepted quotes) are kept for 10 years (Commercial Code art. L123-22)
  • Statistical data (Google Analytics): 14 months maximum
  • Research tips by email: until you unsubscribe (link in every email), then your address is deleted from the emailing tool
  • Cookies: for the duration set out in the cookie policy

6. Third-party tools and services

Google Analytics

The website uses Google Analytics to measure its audience. The data collected is anonymised as far as possible. Google Analytics is activated only after the user has given consent through the cookie banner.

Google Fonts

The website uses Google Fonts. When fonts are loaded from Google’s servers, technical data (IP address) may be transmitted.

Google Maps

Some pages of the website (quote request, contact) include a Google Maps map, provided by Google Ireland Limited. When it is displayed, technical data (IP address, browsing data) may be transmitted to Google, including outside the European Union. The map is loaded only after the user has given consent through the cookie banner; otherwise, a placeholder is displayed instead.

Cloudflare Turnstile

The website’s forms are protected against automated submissions (spam) by the Cloudflare Turnstile service, provided by Cloudflare, Inc. (United States). When a form is displayed, technical browsing data (IP address, browser characteristics) is analysed to check that the submission comes from a person and not a robot. This processing is based on the website owner’s legitimate interest in keeping the website secure. Some data may be transferred outside the European Union; such transfers are covered by appropriate safeguards within the meaning of the GDPR.

Brevo

If you tick the box in the form, your name and email address are sent to Brevo (France), the emailing service used to send you up to 5 emails with research tips. You can withdraw your consent at any time with the unsubscribe link in each email or by writing to stephanie@quetesetracines.com.

Brevo is also used to send a single follow-up email after a quote has been sent or a report has been delivered. Only your name and email address are stored there; the content of your file is never sent to Brevo. You can object at any time by writing to stephanie@quetesetracines.com.

7. Data sharing

Personal data is neither sold nor rented.

It may be shared with technical service providers strictly necessary for the operation of the website, in particular:

  • The website and business email host: o2switch (Clermont-Ferrand, France)
  • The payment service Wise, for clients who choose this payment method
  • The emailing service Brevo (France), for research tips (people who agreed to receive them) and for follow-up emails after a quote or a report
  • Audience measurement tools
  • The digital tools used to handle requests and manage files (email, online spreadsheet, writing-assistance tools, including artificial intelligence)

These providers are bound by a duty of confidentiality.

8. Users’ rights

Under applicable regulations, users have the following rights:

  • Right of access to their data
  • Right to rectification
  • Right to erasure
  • Right to object
  • Right to restriction of processing
  • Right to data portability
  • Right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr)

To exercise these rights, users may contact:
📧 stephanie@quetesetracines.com

9. Cookies

The website uses cookies that are necessary for it to work and for audience measurement.

A consent banner allows users to accept or refuse non-essential cookies on their first visit.

Cookie management is detailed in the cookie policy, available at any time from the website.

10. Data security

The website owner implements all necessary technical and organisational measures to protect personal data against unauthorised access, loss or alteration.

11. Changes to this privacy policy

This privacy policy may be amended at any time to remain compliant with legal and regulatory changes.

Last updated: 22 October 2026.

Scroll to Top