Privacy policy

01Data controller

The data controller is GUENDOUZ GROUP, a French SASU (single-shareholder simplified joint-stock company), 28 route de Rouen, 27300 Menneval, France, registered under number 108 544 081 R.C.S. Bernay. GUENDOUZ CREATION is the trading name under which GUENDOUZ GROUP runs its digital agency business.

Contact for privacy matters: abdelali.guendouz@guendouz-group.com, or by post at the address above. We have not appointed a data protection officer; this contact handles all requests.

02Data we collect

We collect the data you send us through our forms, together with a small amount of technical data:

• Contact form: name, email and message (required); company, phone, country, reply language, service of interest, estimated budget and attachment (optional).
• Quote configurator: company name, contact person, email, phone, country, industry, project description, desired launch date, estimated budget and selected options.
• Technical data: IP address, used for a few minutes to limit abusive submissions, and the host’s technical logs.

03Purposes and legal bases

Your data is used for the following purposes:

• Replying to your messages: our legitimate interest in handling the enquiries we receive.
• Preparing a quote at your request: pre-contractual steps taken at your request.
• Protecting the website against abusive submissions: our legitimate interest in keeping it secure.
• We do not use your contact details for marketing, and this website does not measure its audience.

04Recipients and processors

Your data is intended only for authorised people at GUENDOUZ GROUP. It is processed on our behalf by processors: OVH SAS (France), which hosts the website and our mailbox, and Resend, Inc. (United States), which delivers to our mailbox the email containing your request and its attachment.

We do not sell, rent or transfer your data.

05Transfers outside the European Union

Resend, Inc. is established in the United States. This transfer is governed by the European Commission’s standard contractual clauses included in its data processing agreement and, where it applies, by the EU–US Data Privacy Framework. You can obtain a copy by writing to us at the address above.

06Retention

Contact and quote requests are kept for one year from our last exchange, then deleted. If a contract is concluded, the data is kept for the duration of the contractual relationship, then archived for the legal periods, in particular ten years for accounting records.

IP addresses used to limit abusive submissions are kept in memory for a few minutes.

07Your rights

You have the right to access, rectify and erase your data, the right to restrict processing, the right to object to processing based on our legitimate interest and, for data processed with a view to a quote or a contract, the right to data portability. You may also give instructions on what happens to your data after your death. We reply within one month.

Fields marked with an asterisk are needed to handle your request; the others are optional. No decision producing legal effects is made by automated means: the configurator’s estimate is an indicative calculation, reviewed by a person before any quote.

To exercise your rights: abdelali.guendouz@guendouz-group.com, or GUENDOUZ GROUP, 28 route de Rouen, 27300 Menneval, France. You may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), France — www.cnil.fr — or with the data protection authority of your country of residence.

08Security

We apply technical and organisational measures to protect your data: encrypted connections (HTTPS), server-side form validation, restricted access and limited data collection.

09Changes to this policy

This policy may be updated. Last updated: 14 November 2026.