Privacy Policy

Last updated: 17 July 2026.

This page explains what data we collect when you use the kiwea.pro website, why, how long we keep it, and what your rights are.

1. Data controller

Killian L'Herbette (Kiwea), sole trader, 31 chemin sous les Veiles, 01300 Cuzieu, France. Contact: [email protected].

2. Data we collect

  • Contact form (including the site's modals): your name, your email and, if you add one, your message.
  • Attribution: the page you came from (referrer) and the campaign parameters (UTM) present in the address on arrival.
  • Audience measurement: navigation statistics (page views, events) via Umami. No cookies, no profiling, and never tied to your name or email.

We collect no sensitive data and make no automated decisions about you.

3. Purposes and legal bases

  • Replying to your request and getting back to you: pre-contractual steps and legitimate interest.
  • Understanding where requests come from and measuring the site's audience: legitimate interest.

4. Retention periods

  • Form requests (name, email, message): kept for up to 3 years after our last contact, then deleted.
  • Attribution data (referrer, UTM): stored locally in your browser, for 90 days at most.
  • Audience statistics: kept for 25 months at most, in line with the French data protection authority (CNIL) guidance for audience measurement.

5. Recipients and sub-processors

Your data is never sold or shared for commercial purposes. It may be processed by the following technical providers, strictly to run the website:

  • Cloudflare, Inc. (United States): website hosting, content delivery network, image optimisation and anti-spam protection (Turnstile). Transfer outside the European Union is covered by the Data Privacy Framework and standard contractual clauses.
  • Railway Corp. (US company, servers located in the Netherlands): hosting of our Umami audience-measurement tool. The statistics remain stored within the European Union; the operator's access is covered by standard contractual clauses.
  • Proton AG (Switzerland): receiving our emails, including messages sent through the form. Switzerland benefits from an adequacy decision by the European Commission.

Two useful points: our Umami audience-measurement tool is self-hosted, without cookies or advertising trackers, and the fonts are hosted directly on the site, with no calls to any third-party service (no Google Fonts).

6. Cookies and trackers

The site sets no cookies. Our audience measurement (Umami) runs without cookies or advertising trackers, and the Cloudflare Turnstile anti-spam service, strictly necessary for the site's security, sets no cookie in the configuration used here. No consent banner is therefore required.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, write to [email protected]. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Contact and updates

For any question about this policy: [email protected]. We may update this page; the last-updated date appears at the top of the document.