Privacy policy
Information given under articles 13 and 14 of the General Data Protection Regulation.
Controller
Sloop Studio is the controller for the processing described below. For any question, write to margot@sloop.studio. When we automate a client's work we act on their behalf as a processor, on the terms of article 28 of the Regulation.
What we process
Audience measurement
Counting visits and seeing which pages are read, only if you accept. You can change your mind at any time from the Cookies page.
Lawful basis: your consent.
Data: pages viewed.
Kept for: 13 months.
Recipients: Google Analytics (Google LLC).
Booking a call
Arranging the call you book, and sending you the confirmation and the reminder.
Lawful basis: performing the contract, or steps taken before it.
Data: identity, contact details, the content of your messages.
Kept for: 1 years.
Recipients: Vercel, Supabase, Google Workspace.
Online estimate
Giving you a price range and, if you want it, getting back to you.
Lawful basis: performing the contract, or steps taken before it.
Data: identity, contact details, questionnaire answers.
Kept for: 1 years.
Recipients: Vercel, Supabase.
Business prospecting
Finding businesses our services could help, from the public register and public sources, and writing to them. Every message carries a way to opt out.
Lawful basis: our legitimate interest in telling businesses about our services.
Data: identity, contact details, company information, public information about the company.
Kept for: 3 years.
Recipients: Vercel, Supabase, Google Workspace, Notion, Anthropic.
Client records
Managing the relationship with our clients and the people who work there.
Lawful basis: performing the contract, or steps taken before it.
Data: identity, contact details, company information.
Kept for: 5 years.
Recipients: Vercel, Supabase, Google Workspace.
Support
Handling the requests we receive and keeping their history.
Lawful basis: performing the contract, or steps taken before it.
Data: identity, contact details, the content of your messages.
Kept for: 5 years.
Recipients: Vercel, Supabase, Google Workspace, Anthropic.
Contracts
Drawing up, signing and keeping contracts, with the evidence of their signature.
Lawful basis: a legal obligation.
Data: identity, contact details, company information, signature evidence.
Kept for: 10 years.
Recipients: Vercel, Supabase, Google Workspace.
Invoicing
Issuing and keeping invoices, as the law requires.
Lawful basis: a legal obligation.
Data: identity, company information, invoiced amounts.
Kept for: 10 years.
Recipients: Vercel, Supabase.
Sub-processors
We use the following providers. The list is kept current; a change is notified to our clients thirty days before it takes effect.
- Vercel, DE
- Supabase, DE
- Neon, DE
- Google Workspace, IE
- Resend, US (EU-US Data Privacy Framework)
- Anthropic, US (standard contractual clauses)
- Notion, US (EU-US Data Privacy Framework)
- GitHub, US (EU-US Data Privacy Framework)
- Google Analytics (Google LLC), US (EU-US Data Privacy Framework)
Artificial intelligence
Some work is prepared by a language model (Anthropic). A person reviews it before anything is sent, no decision with a legal effect is automated, and your data is never used to train a model.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Write to margot@sloop.studio: we answer within fifteen days, and at the latest within the month the Regulation allows.
You may also complain to the CNIL, 3 place de Fontenoy, 75007 Paris, www.cnil.fr.