Privacy Policy
Last updated: 1 July 2026
1. Controller identity
Webcraft Labs ("we", "us", "our")
19 Rue des Chèvrefeuilles, 95100 Argenteuil, France
SIREN: 912 345 678
Email: support@webcraft-labs.com
2. Data we collect and why
2.1 Data you provide directly
- Contact form: name, email, company name, phone (optional), message. Purpose: responding to your inquiry.
- Checkout (via Stripe): name, email, billing country, VAT number (optional). Purpose: payment processing and invoicing.
- Project correspondence: any content shared in connection with a project. Purpose: contract performance.
2.2 Data collected automatically
- Essential cookies: session, language preference, cart state. Always active — necessary for the site to function.
- Google Analytics 4 (optional): anonymised usage data (pages viewed, session duration, country). Loaded only after your explicit consent. See our Cookie Policy.
3. Legal basis for processing (GDPR)
- Contract performance (Art. 6(1)(b) GDPR): payment processing, project delivery.
- Legitimate interests (Art. 6(1)(f) GDPR): site security, service improvement.
- Consent (Art. 6(1)(a) GDPR): GA4 analytics cookies.
- Legal obligation (Art. 6(1)(c) GDPR): invoice retention (10 years, French law).
4. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe Inc. | Payment processing | United States (standard contractual clauses) |
| Vercel Inc. | Website hosting | United States (standard contractual clauses) |
| Google LLC (GA4) | Analytics — consent required | United States (standard contractual clauses) |
5. Retention periods
- Contact data: up to 3 years from the last business contact.
- Billing data: 10 years (French legal obligation).
- Analytics data (GA4): 14 months (GA4 default setting).
6. Your rights
Under GDPR you have the following rights:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to lodge a complaint with the CNIL (www.cnil.fr)
To exercise your rights: support@webcraft-labs.com. We will respond within 30 days.
7. International transfers
Stripe, Vercel, and Google operate from the United States. These transfers are governed by standard contractual clauses approved by the European Commission, pursuant to Art. 46 GDPR.
8. Cookies
See our Cookie Policy for the full list of cookies, their purposes, and lifetimes.
9. Changes
We may update this policy. The date at the top of this page reflects the current version. For material changes, we will notify you by email if you are a client.
10. Contact
Webcraft Labs — Privacy contact
19 Rue des Chèvrefeuilles, 95100 Argenteuil
support@webcraft-labs.com