Privacy Policy

The data controller is Florian Lepage (FLORIAN LEPAGE KYN STUDIO). For any privacy request: contact@kynstudio.com.

Through the contact form we collect your name and email address, and — where you choose to provide them — your phone number, project details, message, and the email addresses of any guests you add to a meeting invitation. If you book an intro call, we also process your chosen date and time. We do not collect any special-category (sensitive) data.

We use this data solely to respond to your enquiry and to organise a requested intro call or meeting. The legal basis is your consent and the taking of steps at your request prior to entering into a contract (Article 6(1)(a) and (b) GDPR).

Your data is only accessible to KYN Studio. It is processed on our behalf by the following sub-processors: Amazon Web Services (static website hosting and content delivery) and Google (Google Calendar / Google Meet) when you book a call. We never sell or rent your personal data.

Contact and booking data is kept for the time needed to handle your request and our business relationship, and for at most 3 years from our last contact, after which it is deleted or anonymised.

With your consent, KYN Studio uses self-hosted Umami at analytics.kynstudio.com to measure visits to public pages and contact actions (project enquiries, opening the call scheduler, confirmed enquiry submissions, email and phone link clicks). Opening the scheduler does not mean a booking was completed. Analytics is disabled until acceptance. Refuse or withdraw at any time using “Privacy preferences”; withdrawal stops subsequent collection. Umami does not use tracking cookies. We send public page paths, the site language (en or fr), interaction identifiers, linked public paths or external hostnames, section visibility, active viewing time, scroll depth and completion time, and form progress and outcomes. Active time excludes hidden tabs and pauses after 30 seconds without interaction; visibility does not prove reading. No form values or clicked email and phone destinations are sent. We exclude query strings, URL fragments, referrers, page titles and form contents. We do not enable session replay, heatmaps or user identification. Requests necessarily reach the analytics server with network information such as the IP address and browser headers; server logging and retention settings require confirmation by the studio.

The browser stores your analytics choice in local storage under kyn-analytics-consent (accepted or rejected), shared across both languages, with no programmed expiry; it remains until changed or browser storage is cleared. The previous kyn-privacy-ack acknowledgement may remain in storage but is neither read nor treated as consent. If browser storage is unavailable, the choice applies only to the current document. The contact form can read an existing kyn-cur currency cookie; this static site does not set it and otherwise derives currency from the browser locale. Its origin and expiry, if present, require confirmation. Embedded project websites and the separate client application have their own privacy practices.

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. You may exercise these rights at any time by emailing contact@kynstudio.com. You also have the right to lodge a complaint with the CNIL (cnil.fr).

We apply appropriate technical and organisational measures to protect your data. AWS content delivery infrastructure and Google services may process technical or meeting data outside the European Union. The hosting location for Umami, applicable transfer arrangements and contractual safeguards require confirmation by the studio.