Privacy notice
Here, in plain terms, is what reaches me when you contact this site, what I do with it, and the say you keep over it. I work alone. There is no newsletter, no sales desk, and no office inbox passing your details around.
Who is accountable
This site belongs to Noa Virelane, who advises French service businesses on wording that answer engines can read. Under the General Data Protection Regulation (GDPR) and comparable laws, the person answerable for the information described here is the operator of aeofrance.com. For a privacy question, or to use one of your rights, write to hello@aeofrance.com.
What reaches me
When you submit the form, this is what lands in my inbox:
- Your name and email address, so I can reply and address you properly.
- A second contact route, if you add one (phone, LinkedIn, Signal), for when email is not your preference.
- Whatever you write about the request: the page, the service area, and the wording problem to look at. Only name and email are required; everything else is yours to share or hold back.
I use these details for one purpose: to answer the request you sent. No list is built, your details go to nobody else, and nothing is harvested or mined beyond our own exchange. Stored alongside the message are the moment it was sent and a salted SHA-256 hash of your IP address, which is what keeps automated abuse out. The raw IP is never written down, and neither are browser fingerprints or device traits.
What I do not touch
- No tracking cookies. The analytics I use is cookie-free and keeps no per-visitor identifier.
- No retargeting pixels, no marketing-automation tags, and no ad-network trackers anywhere on the site.
- No automated profiling, and no automated decisions that carry a legal effect for you.
- No selling or sharing of personal information with commercial partners. That is simply not how this practice earns a living.
The legal basis I rely on
Form messages are handled under GDPR art. 6(1)(b), as steps taken at your request before any possible engagement. The IP hash that shields the form from abuse rests on GDPR art. 6(1)(f), a legitimate interest in keeping the form usable. Where payment-outcome data exists, it is processed on the contractual basis.
How long I keep it
- Form messages: kept through the engagement and for 24 months after, so the record of the work stays whole, then removed. Requests that never become work are kept for 12 months, then removed.
- Payment records: kept for as long as tax and accounting law demands (commonly 5–6 years), then removed.
- IP hashes: kept for 90 days, enough for abuse protection, then removed.
- Email threads: kept while we work together, or for 24 months after our last contact, whichever is longer.
Your rights
Under GDPR and comparable laws you can ask to see your information, correct it, delete it, move it elsewhere, restrict how it is used, or object to its use. For any of these, write to hello@aeofrance.com and I will respond within 30 days. If you believe the law has been broken, you may complain to your data-protection authority (in France, the CNIL).
Where the data lives
The servers behind this site sit in European Union (Germany). If any further processors (email provider) happen to operate outside the European Union, those transfers rely on standard contractual clauses together with the safeguards each one publishes.
Changes to this notice
I update this notice whenever the way I handle information changes in a way that matters. The "Updated" date at the top marks the current version. When a change is significant, I flag it on the home page for 30 days so returning readers notice it.