This policy describes what happens to information you entrust to this site, or that the studio holds about you. It covers the bloomwise.studio website. Each of the studio's apps has its own policy, published on its page.
Data controller
Bloomwise SAS, 58 rue de Monceau, CS 48756, 75008 Paris Cedex 08, France, company number (SIREN) 103 497 988, reachable at tanguy@bloomwise.studio. The studio has not appointed a data protection officer; every question goes to this address.
1. Quote requests
Data. Your name and email and, if you give them, your company, your phone number and the address of your current site. Added to that, the scoping details you choose: project type, package, options, budget, timing and your message.
Purpose. Answering your request, drawing up a quote and discussing it with you.
Legal basis. Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Sending this form does not sign you up to any newsletter.
Retention. Three years from the last contact, then deleted. If a contract is signed, the related documents follow the statutory accounting retention periods (ten years).
2. Proposal pages and prospecting
The studio contacts professionals, tradespeople and practitioners whose business it found online, and sometimes shows them a site already built for them on a private page (an address such as bloomwise.studio/en/votre-site/…).
Data. The trading name, the town, the contact's first and last name, their business email and the address of their current site. These come from public sources: the business's website, its business listing, professional directories. If you reply from the page, your email, phone number and message are added, all optional.
Purpose. Presenting an offer related to your professional activity, then following up if you are interested.
Legal basis. The studio's legitimate interest in making its services known to professionals (Article 6(1)(f) GDPR). The page is not indexed by search engines, its address is known only to you, and the preview site it contains is anonymised.
Your right to object. You can object at any time, without giving a reason, with a simple email to tanguy@bloomwise.studio. The page and your data are then deleted, and the studio does not contact you again.
Retention. The page goes offline on the date shown on it. The data is kept for three years from the last contact, then deleted.
3. Booking a call
The calendar on the booking page is provided by Cal.com, Inc. (USA), acting on the studio's behalf. If you book, Cal.com receives your name, your email, the chosen slot and whatever you write in the booking, and sends you the confirmation.
Legal basis. Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). Retention. Three years from the last contact.
This calendar loads only on the booking page. It uses storage strictly needed for it to work (time format, booking tracking, session security) and a technical error-monitoring tool (Sentry). It shows the studio's profile picture from a Google server. No advertising or analytics cookie was found in it.
4. Emails you send us
Messages sent to the studio's address are kept for three years from the last exchange, to follow up the relationship, on the basis of the studio's legitimate interest in answering and keeping a record of its correspondence.
5. Audience measurement
This site uses Vercel Web Analytics to count page views. The tool sets no cookie and writes nothing to your device. Visits are counted from a technical fingerprint renewed every day, which can neither recognise you from one day to the next nor follow you on other sites. Statistics are aggregated. Legal basis: the studio's legitimate interest in knowing how its site is used.
6. Technical logs and security
Like any server, the host records for each request the IP address, the date, the page requested and the browser used. These logs serve security and troubleshooting, and are deleted automatically by Vercel after a short period. If sending a form fails, its content is written to them so that your request is not lost.
The IP address is also used, in memory and without being stored, to limit how often a form can be sent and to keep robots out. Legal basis: the studio's legitimate interest in securing its site.
7. Cookies and trackers
This site sets no analytics, advertising or social media cookie. That is why no consent banner is shown to you.
| Tracker | Set by | Purpose | Duration |
|---|---|---|---|
| No cookie | bloomwise.studio | The site language is carried by the address, not by a cookie | Not applicable |
| Session and preference storage | Cal.com, booking page only | Calendar operation and security | Session, or until you clear your browser |
The work shown in the catalogue is displayed in a frame, from its own address. It is published by the studio and carries no advertising tracker; some of it loads its fonts from Google Fonts, which passes your IP address to Google when it is displayed.
Who has access to your data
You write to the studio, and the studio reads you. Only technical providers are involved, on its behalf:
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. | Site hosting, form handling, audience measurement | USA | EU-US Data Privacy Framework |
| Resend Inc. | Notification emails and acknowledgements | USA | EU-US Data Privacy Framework and standard contractual clauses |
| Cal.com, Inc. | Call booking | USA | Standard contractual clauses or EU-US Data Privacy Framework |
| Stripe | Payment, when a payment link is offered to you | Ireland and USA | Standard contractual clauses and EU-US Data Privacy Framework |
| Hostinger International Ltd. | Studio mailbox | European Union | Not applicable |
No data is sold, rented or passed on for advertising purposes.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. A request to tanguy@bloomwise.studio is enough, and is answered within one month. Proof of identity will only be asked for if there is reasonable doubt about who you are.
If the answer does not satisfy you, you can complain to the French data protection authority, Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr (opens in a new tab).
Updates
This policy may change if the studio's tools change. The version in force is the one published on this page.