Privacy Policy

Last updated: 26/10/2026

Charles Paris is committed to protecting your personal data. This policy explains what data we collect on www.charles.fr, why we collect it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

I. Data controller

Charles Paris, 124 rue Henri Barbusse, 93300 Aubervilliers, France.
Contact: contact@charles-paris.com

II. Data we collect

We only collect data that you provide voluntarily or that is necessary for the website to function:

  • Contact form and product enquiries: title, last name, first name, email, phone number, profile (private individual, professional…), business activity, postal address, project type and date, message and, where applicable, product reference.
  • Newsletter: email address and, where applicable, first and last name.
  • Browsing data: subject to your consent, audience measurement data (pages viewed, visit duration, device and browser type, approximate location).
  • Search: the terms entered in the website's search engine.

III. Purposes and legal bases

  • Responding to your requests for information, quotes or appointments — legal basis: pre-contractual measures taken at your request and your consent.
  • Sending you our newsletter — legal basis: your consent, which you may withdraw at any time via the unsubscribe link in every email.
  • Measuring audience and improving the website — legal basis: your consent (cookies).
  • Ensuring the proper operation and security of the website — legal basis: our legitimate interest.

IV. Recipients

Your data is intended for authorised Charles Paris staff. It may be shared with our technical service providers, acting on our behalf and under our instructions:

  • Vercel (website hosting);
  • Cloudflare (content delivery and security);
  • Pipedrive (customer relationship and newsletter management);
  • contact@charles-paris.com (sending emails from the contact form);
  • Algolia (website search engine);
  • Google (Google Analytics / Google Tag Manager, audience measurement, only with your consent).

Your data is never sold or transferred to third parties for marketing purposes.

V. Transfers outside the European Union

Some of these providers are located outside the European Union, notably in the United States. Such transfers are governed by appropriate safeguards: an adequacy decision (EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

VI. Retention periods

  • Contact requests: 3 years from our last exchange.
  • Newsletter: until you unsubscribe, or 3 years without any interaction on your part.
  • Audience measurement cookies: 13 months maximum; associated data is kept for a maximum of 25 months.

VII. Cookies

When you visit the website, cookies may be stored on your device:

  • Strictly necessary cookies (no consent required): remembering your language and your cookie preferences.
  • Audience measurement cookies (subject to your consent): Google Analytics (_ga, ga*), to understand how the website is used.

You can accept or refuse these cookies via the banner displayed on your first visit.

VIII. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions regarding the handling of your data after your death.

To exercise these rights, please email us at [email address] or write to us at the address above, providing proof of identity if necessary. We will respond within one month.

If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

IX. Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure (encrypted HTTPS connection, restricted access to data).

X. Changes to this policy

This policy may be updated at any time. The date of the last update is shown at the top of this page.