Privacy
Policy

Who we are

Onestepcloser SAS ("we", "us", "our") is a strategic design studio registered in France. We provide branding, UX/UI design, and strategy services to clients across Europe. Our registered address is [address], Antibes, 06600, France.

This Privacy Policy describes how we collect, use, and protect information that identifies or can be used to identify you ("personal data") when you visit onestepcloser.fr or contact us directly.

What we collect

Information you give us directly

• Your name and email address when you send us a message or book an intro call
• Your company name, role, and project brief when you enquire about working with us
• Any other information you choose to include in correspondence

Information collected automatically

• Basic server logs (IP address, browser type, page visited, timestamp), retained for 30 days for security purposes
• Aggregate, anonymised analytics data (pages viewed, time on site, referral source) via a privacy-first analytics tool. No personal identifiers are stored

We do not collect sensitive personal data. We do not build advertising profiles. We do not sell or rent any data to third parties.

Why we collect it

Purpose	Data used
Responding to enquiries	Name, email, project brief
Sending a proposal or quote	Name, email, company, brief
Invoicing & contracts	Name, company, address
Improving the website	Anonymised analytics
Security & abuse prevention	Server logs (IP, timestamp)

Legal bases (GDPR)

We process your personal data only where we have a lawful basis to do so under the EU General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés).

• Contractual necessity: to respond to your enquiry and deliver services you have requested
• Legitimate interest: to maintain basic website security logs and understand how our website is used, where this does not override your rights
• Legal obligation: to comply with French accounting and tax requirements for invoicing data

Third parties & transfers

We use a small number of third-party tools to operate our studio. Where these process personal data on our behalf, we have data processing agreements in place.

• Email: Google Workspace (EU data region where possible). Google Privacy Policy →
• Scheduling: Cal.com or Calendly, used if you book an intro call. Their privacy policy applies to data entered on their platform.
• Analytics: Privacy-first tool (no personal data, no cross-site tracking, GDPR-exempt under French guidelines)

We do not transfer personal data outside the EU/EEA except where the recipient provides equivalent protection (Standard Contractual Clauses or adequacy decision).

Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• Access: request a copy of the data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your data where we have no overriding legal obligation to keep it
• Restriction: ask us to pause processing in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on our legitimate interests

To exercise any of these rights, email us at hello@onestepcloser.fr. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.

Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law.

Category	Retention period
Enquiry emails (no engagement)	12 months
Client project data	Duration of project + 5 years (French commercial law)
Invoices & contracts	10 years (French accounting law)
Server security logs	30 days
Anonymised analytics	Indefinitely (no personal data)

Cookies

This website uses a minimal set of cookies strictly necessary for it to function (e.g. storing your display preferences). We do not use advertising cookies or third-party tracking cookies.

Our analytics tool is configured to operate without cookies and without storing personal identifiers, and therefore does not require your consent under French CNIL guidelines for such tools.

You can control cookies through your browser settings at any time. Disabling strictly-necessary cookies may affect how the site functions.

Contact & updates

If you have any questions about this policy or about how we handle your personal data, please contact us:

Onestepcloser SAS
[Address], Antibes, 06600, France
hello@onestepcloser.fr

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top. Material changes will be communicated by email to anyone with whom we have an active relationship.