Privacy Policy

1. Who we are

The site bytoya.com is published by Stéphanie Caumont, sole proprietorship (micro-entreprise).
Address: Lahontan, 64270, France
Email: hello@bytoya.com
Site: https://bytoya.com

2. Data collected and purposes

Contact form

When you fill in the contact form, we collect: first name, last name, email, subject and message, as well as where your visit came from (referring site, first page viewed, form page). This data is used only to answer and follow up on your request. It is sent by email via Resend and stored in our Supabase database, accessible only to the site owner.

Newsletter

If you subscribe, we store your email address, your language and the date you subscribed (double opt-in by email). We measure email opens and clicks on their links, via our email provider Resend, to improve our content. This information is linked to your email address. You can unsubscribe at any time using the link in every email.

Audience measurement

This site uses Umami Analytics, Vercel Analytics and Vercel Speed Insights, cookie-free audience and performance tools, as well as an internal read counter. The data collected (page views, referring site, performance) is anonymous and aggregated: no full IP address is kept and no data is shared with third parties for advertising.

Booking a call

The "Book a call" buttons link to Calendly, an external service. No Calendly widget is embedded on this site: the information you enter when booking (name, email, answers) is collected by Calendly under its own privacy policy, and is used by us only to prepare the call.

Bot protection

The contact form is protected by Cloudflare Turnstile, which checks that the submission comes from a human. This check is necessary for the security of the form.

Availability banner

The availability banner reads configuration data from Supabase. No personal data is collected in the process.

3. Cookies and local storage

This site does not set any cookies on visitors' devices, neither for advertising nor for audience measurement. This is why no consent banner is displayed.
The site uses your browser's storage only to:

• remember your preferences (light/dark theme, language, banner dismissal): localStorage;
• know which site your visit came from, for our internal statistics: sessionStorage, deleted automatically when you close the tab.

This data stays on your device, except the origin of the visit, which is sent with the contact form if you submit it. You can clear it at any time from your browser settings.

4. Hosting

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel may collect technical log data (IP address, browser, pages visited) for security and performance purposes. Learn more: vercel.com/legal/privacy-policy

5. Your rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to object: object to the processing of your data

To exercise these rights, contact us at: hello@bytoya.com
You may also lodge a complaint with the French data protection authority, the CNIL.

6. Retention period

• Contact requests: 3 years after the last exchange, then deleted automatically.
• Newsletter statistics (opens, clicks): 12 months, then deleted automatically.
• Newsletter subscribers: until you unsubscribe. Unsubscribed addresses are deleted after 12 months, unconfirmed sign-ups after 30 days.
• Audience measurement: anonymous, aggregated data.

7. Changes

This privacy policy may be updated at any time. The last update date is shown at the top of this page.