Privacy Policy
Last updated:
Introduction
Handmadeflameau is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our IT consulting and audit services.
Information We Collect
We collect information that you provide directly when contacting us, requesting services, or using our website. This may include:
- Personal identification information: name, email address, phone number
- Company information: business name, industry, company size
- Communication data: messages, inquiries, and correspondence
- Service-related information: project details, requirements, and feedback
We also collect certain information automatically when you visit our website, including:
- Technical information: IP address, browser type, device information, operating system
- Usage data: pages visited, time spent, click patterns, and navigation paths
- Location data: approximate geographic location based on IP address
- Cookies and tracking technologies: data collected through cookies and similar tracking mechanisms
How We Use Your Information
We use the information we collect for the following purposes:
- Service delivery: providing, maintaining, and improving our IT consulting and audit services
- Communication: responding to your inquiries, requests, and providing customer support
- Business operations: managing client relationships, processing transactions, and delivering services
- Marketing: sending updates about our services, newsletters, and promotional materials (with your consent)
- Analytics: analyzing website usage, improving user experience, and optimizing our services
- Legal compliance: meeting legal obligations, enforcing our agreements, and protecting our rights
- Security: preventing fraud, protecting against security threats, and ensuring website safety
During IT consulting and audit engagements, we may access and analyze your technology infrastructure, security configurations, and compliance documentation to deliver our services effectively.
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Contract performance: processing necessary to fulfill our contractual obligations and provide services
- Legitimate interests: processing for our legitimate business interests, such as improving services and website functionality
- Consent: processing based on your explicit consent, which you can withdraw at any time
- Legal obligation: processing required to comply with applicable laws and regulations
- Vital interests: processing necessary to protect your or others' vital interests
Information Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:
- Service providers: with trusted third-party service providers who assist us in operating our business, delivering services, and managing our website, subject to strict confidentiality agreements
- Business transfers: in connection with any merger, acquisition, or sale of assets, where personal information may be transferred as part of the transaction
- Legal requirements: when required by law, court order, or governmental authority, or to respond to legal processes
- Protection of rights: to protect our rights, property, or safety, or that of our clients, employees, or others
- With your consent: when you have explicitly authorized us to share your information
Data Protection
We implement comprehensive technical and organizational measures to protect your personal information:
- Encryption: using industry-standard encryption protocols for data transmission and storage
- Access controls: limiting access to personal information to authorized personnel only
- Security monitoring: regular monitoring and assessment of our security systems and practices
- Staff training: ongoing training for employees on data protection and security best practices
- Incident response: procedures in place to detect, respond to, and report security incidents
- Regular audits: periodic reviews and audits of our data protection measures
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.
Your Rights and Options
Depending on your location, you may have the following rights regarding your personal information:
- Right of access: request access to and receive a copy of your personal information
- Right to rectification: request correction of inaccurate or incomplete personal information
- Right to erasure: request deletion of your personal information under certain circumstances
- Right to restrict processing: request limitation of how we process your personal information
- Right to data portability: request transfer of your personal information to another service provider
- Right to object: object to processing of your personal information based on legitimate interests
- Right to withdraw consent: withdraw consent where processing is based on consent
- Right to opt-out: opt out of marketing communications and certain data processing activities
- Right to lodge a complaint: file a complaint with your local data protection authority
To exercise these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal information internationally, we implement appropriate safeguards to ensure your data is protected, including:
- Standard contractual clauses approved by relevant data protection authorities
- Data processing agreements with service providers that include adequate protection measures
- Certification mechanisms such as the EU-US Privacy Shield Framework where applicable
- Other legally recognized transfer mechanisms that provide adequate protection
By using our services, you consent to the transfer of your information to countries outside your jurisdiction, subject to the safeguards described above.
Data Retention Periods
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Service-related data: retained for the duration of our business relationship and for a reasonable period thereafter to comply with legal obligations
- Marketing data: retained until you opt out or withdraw consent, or as otherwise required by applicable law
- Website usage data: typically retained for up to 26 months, unless you request deletion
- Legal requirements: certain information may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements
When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.
Children's Privacy
Our services are not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
Third-Party Services
Our website and services may integrate with third-party services that collect and process your information:
- Google Ads Conversion Tracking: tracks conversions from our advertising campaigns and collects data about your interactions with our ads
- Google Ads Remarketing: enables us to show relevant ads to users who have visited our website
- Google Analytics: analyzes website traffic, user behavior, and provides insights into website performance
- Google Maps API: provides mapping functionality and may collect location and usage data
These third-party services have their own privacy policies and data collection practices. We encourage you to review their privacy policies to understand how they handle your information. We are not responsible for the privacy practices of these third parties.
You can opt out of certain tracking activities through your browser settings or by visiting the privacy settings of these third-party services.
Use of Cookies
We use cookies and similar tracking technologies to collect and store information about your preferences and website usage. Cookies help us:
- Remember your preferences and settings
- Analyze website traffic and user behavior
- Personalize your experience
- Deliver relevant advertising content
- Improve our website functionality and performance
For detailed information about our use of cookies, including types of cookies, their purposes, and how to manage them, please refer to our Cookies Policy.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last updated" date
- Sending an email notification to registered users if changes are significant
- Displaying a notice on our website for a reasonable period
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support-centerY3mxs9K1m
- Phone: +13045582251
We will respond to your inquiries and requests within a reasonable timeframe and in accordance with applicable data protection laws.