Here’s a clear overview of what data I collect when you use this website, why, how long I keep it, and the rights you have.

1. Who is responsible for your data

The data controller is:

Cécile Bareyt, sole proprietor (French micro-entreprise) Address: 66 avenue des Champs-Élysées, 75008 Paris, France SIRET: 979 041 084 00018 Email: hello@cecilebareyt.com

I am committed to processing your data in compliance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

2. What data I collect

I only collect the data I need, and only what you share with me or what is generated as you browse the site.

When you sign up for my newsletter or a free resource: your first name and email address.

When you contact me: your name, your email address and the content of your message.

When you buy a product: your name, your email address and the information related to your order. Payments are processed by Stripe: your banking details never pass through my servers and I have no access to them.

When you browse the site: technical and browsing data collected through cookies (see the dedicated section below).

3. Why I collect this data

Each piece of data serves a specific purpose and relies on a legal basis provided by the GDPR:

Sending you my newsletter and free resources — legal basis: your consent. Responding to your messages and requests — legal basis: your consent / my legitimate interest in replying to you. Processing your orders and giving you access to your products — legal basis: performance of a contract. Meeting my accounting and legal obligations — legal basis: a legal obligation. Measuring site traffic and improving the website — legal basis: your consent (cookies).

4. How long I keep it

Newsletter data: as long as you remain subscribed. You can unsubscribe at any time, and your data is then deleted or archived. Contact requests: for as long as it takes to handle your request, then up to 3 years for follow-up purposes. Order data: for the duration of our customer relationship, then for the legal retention period required by my accounting obligations (up to 10 years for accounting records). Cookies: depending on their type, for a maximum of 13 months.

5. Who I share your data with

I never sell your data. I only share it with the service providers needed to run my business, who act as data processors:

Systeme.io — managing my forms and newsletter, and hosting my resource pages. Stripe — secure payment processing. Google Analytics — traffic measurement and website statistics. Meta (Facebook pixel) — performance measurement and delivery of my ads.

These providers only use your data for the services I entrust to them.

6. Transfers outside the European Union

Some of my providers (such as Stripe, Google and Meta) may process data outside the European Union, particularly in the United States. In that case, these transfers are governed by appropriate safeguards under the GDPR, including the European Commission’s standard contractual clauses.

7. Cookies

A cookie is a small file placed on your device when you visit a website. This site uses:

Technical cookies, required for the website to function properly (no consent needed). Analytics cookies, through Google Analytics, to understand how the site is used and improve it. Advertising cookies, through the Facebook pixel (Meta), to measure the performance of my ads and show you relevant content.

Cookies that are not strictly necessary are only placed with your consent, which you can withdraw at any time. You can also set your browser to block or delete cookies.

8. Your rights

Under the GDPR, you have the following rights over your data at any time:

Right of access and rectification Right to erasure of your data Right to object and to restrict processing Right to data portability Right to withdraw your consent at any time

To exercise these rights, simply email me at hello@cecilebareyt.com. I will get back to you as soon as possible, and within one month at the latest.

9. Data security

I take reasonable measures to protect your data against loss, unauthorized access or disclosure. My service providers are also required to maintain a level of security that complies with the GDPR.

10. Complaints

If you believe your rights are not being respected, you can file a complaint with the CNIL (the French data protection authority): www.cnil.fr.

11. Updates to this policy

I may update this privacy policy to stay compliant with regulations or to reflect changes in the tools I use. The date of the last update is shown at the top of this page.