Privacy Policy

This Privacy Policy explains how Tom Durand-Gasselin collects, uses, and protects your personal data when you use this website.

We collect only the minimum data necessary to operate this site and deliver purchased products. We do not sell, rent, or trade your personal information.

We collect the following categories of data:

• Contact information (name, email address) when you submit the contact form.
• Purchase email address when you buy digital products.
• IP address and browser metadata in server access logs.
• Anonymous usage metrics (only with your explicit consent).

Your data is used only for the following purposes:

• Responding to your messages and enquiries.
• Delivering purchased digital products and sending order confirmations.
• Maintaining site security and preventing abuse.

We use the following third-party services that may process your data:

We retain your data for the following periods:

• Contact form data: up to 3 years from last interaction.
• Purchase records: 5 years (French accounting law requirement).
• Server logs: 90 days, then automatically purged.

We implement the following security measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS.
• No plaintext secrets or credentials are stored in this codebase.
• Access to production systems is restricted by least-privilege controls.

You have rights under the GDPR to access, correct, delete, or export your data. To exercise these rights, contact us at: tom.durand-gasselin@outlook.com

This policy was last updated on 2025-06-05. We may update this policy periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

v1.0 — 2025-06-05