Last updated: April 2026 — Compliant with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act.
1. Data controller
Clo'évasion — Chloé Peyrache, sole proprietorship. Contact: chloe@cloevasion.com.
2. Data collected
Through your use of the site and the services, the following data may be collected:
- Contact form: name, email, subject, message.
- Calendly discovery call: name, email, phone (optional), message.
- Newsletter sign-up: email only.
- Subscription to an offer: name, email, phone, postal address, payment information (processed directly by Stripe, not stored by Clo'évasion).
- Browsing data: via strictly necessary cookies and anonymised analytics (see section 8).
3. Purposes of processing
- To respond to your contact requests.
- To organise discovery calls.
- To deliver the services you have subscribed to.
- To send you the newsletter (with your explicit consent).
- To issue invoices and meet our accounting obligations.
- To improve the site (anonymised analytics).
4. Legal basis
Processing is based on:
- The performance of the contract (subscribed services, quotes, travel guides).
- Your consent (newsletter, non-essential cookies).
- Our legal obligations (accounting, taxation).
- Our legitimate interest (client follow-up, security).
5. Retention period
- Client data: 3 years after the end of the service.
- Accounting data: 10 years (legal obligation).
- Prospects (contacts without follow-up): 3 years after the last exchange.
- Newsletter: until you unsubscribe.
6. Recipients
Your data is never sold, rented or transferred to third parties for commercial purposes. It may be transmitted only to the strictly necessary technical sub-processors:
- O2Switch: hosting (France).
- Stripe: secure payment processing.
- Calendly: management of discovery calls.
- MailerLite: newsletter delivery.
All our sub-processors comply with the GDPR and have signed a data-protection agreement.
7. Your rights
Under the GDPR, you have the following rights:
- Right of access — obtain a copy of your data.
- Right to rectification — correct inaccurate information.
- Right to erasure — request deletion.
- Right to object — refuse processing.
- Right to data portability — receive your data in a readable format.
- Right to restriction — suspend processing.
To exercise these rights, write to chloe@cloevasion.com. I respond within 30 days at most. You may also lodge a complaint with the French data protection authority (CNIL — cnil.fr).
8. Cookies
The site uses only:
- Strictly necessary cookies: session, browsing preferences. No consent required.
- Analytics cookies (e.g. Plausible or Matomo, anonymised): audience measurement without individual profiling. You can decline them via the consent banner.
No advertising or third-party tracking cookies are placed on this site.
9. Security
The site uses an SSL certificate (HTTPS). Sensitive data (payments) is processed directly by Stripe, PCI-DSS certified. Hosting is located in France (O2Switch), guaranteeing that your data is not transferred outside the EU.
10. DPO contact
For any question regarding your personal data: chloe@cloevasion.com.
