Privacy Policy

1. Data Controller

The controller of personal data collected on this website is:

Théo Guérin — Sole trader (KizuCore)

2 rue François Désiré Roulin, 35700 Rennes, France

Phone: +33 7 70 45 40 02

Contact: theo.guerin35000@gmail.com — theo-guerin.fr

2. Data Collected and Purposes

The website processes information for the following purposes:

Contact: name, email address, subject, message and reply language, used to respond and send a receipt. The IP address is used to limit abuse and appears in the notification received by the publisher.

Optional audience measurement: pages and interactions, browser and device characteristics, technical connection information and pseudonymous cookie identifiers. Statistics help understand website traffic. Names, email addresses and form contents are not intentionally sent to Analytics.

Legal basis:

General enquiries and abuse prevention: the publisher’s legitimate interest in communicating with visitors and protecting the service (GDPR Article 6(1)(f)). Requests for quotes or services rely on pre-contractual steps taken at your request (Article 6(1)(b)).

Optional analytics: consent (GDPR Article 6(1)(a)).

Optional anti-bot verification: reCAPTCHA processes technical browser and connection information to assess abuse risks. The token and score validate the submission and are not included in emails. The service runs only with your specific consent.

Hosting and security: Vercel processes requests, IP addresses and technical logs needed to deliver and protect the website.

All four form fields are needed to process a submission. If you do not provide them or consent to anti-bot verification, you can use the email link instead. Refusing analytics does not prevent browsing or contacting the publisher.

Activation of reCAPTCHA and its trackers: separate consent for each submission. Its score may block automatic submission; you can always email the publisher directly for a human response.

3. Google Analytics (GA4)

Google Analytics 4, provided by Google, runs only after you agree. No Analytics script or cookieless measurement runs before acceptance. Advertising features and Google Signals are disabled in the website code. The data is pseudonymised, not described as anonymous.

Details about cookie types, retention period, and consent management are provided in the Cookie Policy page.

4. Data Recipients

Théo Guérin receives and handles enquiries. Vercel hosts the website and executes the contact endpoint. Resend (Plus Five Five, Inc.) delivers notifications and receipts. Recipients’ email providers, including Gmail for the publisher, store correspondence. Google provides Analytics and reCAPTCHA separately when you authorise them. These providers may process the data needed to operate their services.

These services may involve processing outside the European Economic Area, including in the United States. Safeguards depend on each service and contract: standard contractual clauses and, where the recipient and processing are eligible, an adequacy decision. Provider documents are linked below; you may ask the publisher for details of the safeguards applicable to your data.

5. Retention periods

Enquiries that do not lead to a business relationship, and their notifications, are kept for no more than 12 months after the last exchange. Records needed for a contract or legal obligation are kept separately for the period applicable to their purpose. Messages are not stored in a database belonging to this website.

Technical copies held by providers follow their deletion schedules: Resend states 30 days for emails and logs on Free, Pro and Scale plans, with 7-day backups. Hosting and security logs depend on the subscribed services. The website uses the reCAPTCHA token for verification and does not retain it afterwards.

Your analytics choice expires after a maximum of six months. Analytics cookies set by this site expire no later than that date, without automatic renewal on each visit. Google Analytics user data and event data retention are set to 2 months, with no reset of user data retention on new activity. Google deletes expired data during its monthly deletion cycle. This retention period does not apply to standard aggregated reports.

6. Your rights

Subject to the conditions in the GDPR and the legal basis for each processing activity, you may exercise the following rights:

Right of access

Right to rectification

Right to erasure

Right to restriction of processing

Right to object

Portability, for automated processing based on consent or a contract

To exercise your rights, please write to: theo.guerin35000@gmail.com.

You may withdraw analytics consent at any time using “Manage my cookies”, without affecting the lawfulness of previous processing. reCAPTCHA consent is requested for each submission and can be unchecked before verification. The third-party code is unloaded when verification ends. Rights requests normally receive a response within one month; any lawful extension is explained.

If you consider that your rights have not been respected, you may lodge a complaint with the French supervisory authority, CNIL.

7. Security

Appropriate technical and organizational measures are implemented to protect personal data from loss, unauthorized access or disclosure. However, no system is completely secure.

8. Changes

This policy may be updated as the site or regulations evolve. Any significant change will be indicated on this page.

9. Contact & updates

For any question about this policy, please write to: theo.guerin35000@gmail.com.

Last updated: 20/09/2026