The Human Pen

Privacy & confidentiality policy

Last updated: [date]

1. Who I am

This website is operated by Magali Fauchet (the "data controller").
Contact: through the contact form on this website.

2. What data I collect

No account is required. This website uses no cookies, no analytics and no tracking tools. Fonts are hosted on this website's own server, so no data is sent to third-party font services.

3. Why I use your data, and on what legal basis (GDPR, Article 6)

PurposeLegal basis
Answering your request and preparing a quoteSteps taken at your request before a contract (Art. 6(1)(b))
Reviewing your content and delivering the servicePerformance of a contract (Art. 6(1)(b))
Invoicing and accountingLegal obligation (Art. 6(1)(c))

4. How long I keep your data

DataRetention
Contact requests with no follow-up[12] months, then deleted
Files and content sent for reviewDeleted within [30] days after delivery, unless you ask otherwise
Invoices and accounting recordsAs long as required by law

5. Who has access to your data

Your data is never sold or shared for marketing purposes. It is only processed by:

6. Transfers outside the European Union

I am based in Tunisia, so your data is processed outside the EU. File transfers go through SwissTransfer, whose servers are in Switzerland, a country recognized by the European Commission as offering an adequate level of data protection. Email messages are handled by Apple, which may process data outside the EU. I apply the safeguards described in this policy to all data I process.

7. Confidentiality of your content

8. Security

This website uses HTTPS encryption. Files are exchanged through password-protected transfers stored in Switzerland, and access to client content is limited to me.

9. Your rights

Under the GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. To exercise these rights, contact me through the contact form or at [contact email]. I will reply within one month.

You also have the right to lodge a complaint with the data protection authority of your EU country, for example the CNIL in France (cnil.fr).

10. Changes to this policy

This policy may be updated. The date at the top shows the latest version.

BACK TO THE WEBSITE