Privacy Policy

Last updated: July 16, 2026

Data controller

The data controller is Eravya, DATADOIT CONSEIL, 27 Rue Paul Ramadier, LILLE. For any questions: contact@eravya.fr.

Data collected

When you fill out our contact form or book a call, we collect your first name, last name, email address, phone number, company name, current website URL, and any details you share about your project.

We also collect your IP address through our spam protection provider Cloudflare Turnstile, and anonymised browsing data through Vercel Analytics (no cookies).

Legal basis for processing

We process your data based on your consent (Article 6.1.a of the GDPR), which you give through the consent checkbox on our contact form. You may withdraw your consent at any time by contacting us.

Purpose of processing

We use your information solely to: respond to your enquiry, provide a quote or consultation, and if you become a client, manage your project. We do not sell, rent, or share your data with third parties for marketing purposes.

Data processors

We use the following sub-processors to handle your data:

• HubSpot (CRM) — HubSpot Privacy Policy — Data processed: name, email, phone, company, message. HubSpot is Privacy Shield certified and GDPR compliant.
• Cloudflare Inc. (Turnstile anti-spam) — Cloudflare Privacy Policy — Data processed: IP address, user-agent. Cloudflare is Privacy Shield certified.
• Vercel Inc. (hosting and analytics) — Vercel Privacy Policy — Data processed: anonymised browsing data (no cookies).

Cookies

This site uses no tracking cookies and no third-party analytics. We do not use Google Analytics, Meta Pixel, or any similar service.

Cloudflare Turnstile may set a cf_clearance cookie strictly necessary for anti-spam verification. This cookie is exempt from consent as it is essential for the form to function. No personal data is stored in this cookie.

Data retention

We keep your contact information for as long as our business relationship is active, and for a maximum of 3 years after the last contact without follow-up. After that, your data is deleted or anonymised.

Your rights

Under the GDPR, you have the following rights:

• Right of access (to know what data we hold)
• Right to rectification (to correct inaccurate data)
• Right to erasure (deletion of your data)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time

To exercise your rights, email us at contact@eravya.fr. We will respond within 7 days. If you believe your rights have not been respected, you can file a complaint with your local data protection authority.

Security

All data is transmitted over HTTPS. We do not store payment information. Any transactions are handled directly by our payment processor.

International transfers

Your data may be transferred to the United States (HubSpot, Vercel, Cloudflare). These transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) and/or the Data Privacy Framework certification.

Legal notice

See our Legal Notice.

Contact

Questions about this policy? Reach us at contact@eravya.fr.