Privacy policy

In short: this website does not set any cookie, does not resell any data and only collects what I need to reply to your request. This page describes what the website really does, leaving nothing out.

Data controller

The data controller is the publisher of the website, Domera. Its full identity is in the legal notice. Contact for any question about your data: dorianmandy262@gmail.com.

The order form

When you fill in the form on the Contact page, I receive:

• your business name, your trade and your town;
• your phone number and your email address;
• the package chosen, the options (hosting, monthly follow-up) and, where applicable, the description of your custom website;
• your business: services, areas you cover and, if you give them, opening hours, years in business, labels and insurance, what sets you apart;
• your future website: the style and colours you want, domain name, the address of your current website and the score measured by the test tool, link to your Google profile, link to your photos, message;
• proof that you accepted the terms and conditions of sale: the version accepted, the date and time (server time), your request for the work to start immediately (linked to the right of withdrawal) and your choice whether or not to allow your website to be cited as a reference.

The form does not collect any file. If you give a link to your photos, I only look at them to build your website; otherwise, I ask you for them by email after the deposit.

Why? To process your order, give you the means to pay the deposit, then build your website, and to keep proof that you accepted the terms of sale. Legal basis: performance of the contract (or of pre-contractual steps taken at your request), your consent (the tick box on the form) and my legitimate interest in keeping this proof.

For how long? Requests that go no further are deleted at the latest 3 years after the last exchange. Client data is kept for the duration of the relationship, then archived for the time required by accounting obligations (10 years for invoices).

Who has access? Only me, and the technical providers listed below, who do not use your data for their own purposes. Your data is never sold or passed on.

To prevent repeated submissions, a temporary Cloudflare counter limits the number of orders sent with the same email address (one per minute). It does not keep the content of your order. Likewise, the number of transfer notifications is limited per IP address (ten per minute) with an equally temporary counter.

The “Test my website” tool

When you run a test on the Test my website page, the address you enter is sent to my order server (hosted by Cloudflare), which passes it to Google PageSpeed Insights to analyse the page. The address analysed is therefore passed on to Google.

My server keeps the result of the analysis for 24 h, with the address analysed, so as not to repeat it needlessly. To limit the number of analyses per day and per visitor (10 at most), it also keeps, for 24 h, a counter linked to your IP address. After this time, this information is deleted. I do not keep these addresses to contact you for sales: if you then fill in the order form, the address of your website and its score are added to your request.

Technical providers

To work, the website relies on providers that act as processors:

• Cloudflare: hosting of the website, receipt of the order form and running of the test tool (IP addresses processed for security and operation);
• GitHub: recording of each order in a private space, to which only I have access;
• Telegram: notification on my phone. The messages (new order, deposit paid, reminder if the deposit is late) contain the order number, the package, the deposit amount, your company name and, for the new order and the reminder, your phone number. Your email appears only if a Stripe payment cannot be matched to an order (an alert to help me trace it);
• Google (PageSpeed Insights): analysis of the addresses entered in the test tool;
• Stripe: payment of the deposit and the monthly follow-up (bank card, Apple Pay, Google Pay). Your email address and your order number are passed to it to pre-fill the payment page; in return, Stripe tells me that the payment has been received (order number, amount). I never see your card details.

Some providers are located outside the European Union, notably in the United States: these transfers are covered by the safeguards provided by the GDPR (standard contractual clauses or adequacy decision, depending on the provider).

Visit statistics

No statistics tool is active on this website at the moment. If one is used one day, it will be a cookie-free tool, and this page will be updated.

Cookies and browser storage

This website does not set any cookie. The only thing stored in your browser is your choice of language (key “langue” in local storage), and only if you use the FR | EN language selector: it contains no personal data, is not used for any tracking and is never sent anywhere. When you arrive on the website, your browser's preferred language is read on your device to open the French or English version: it is neither saved nor sent anywhere. After an order is sent, the order number is kept in the tab’s session storage (key “commande”) until the tab is closed, to display the thank-you page after payment: it is never sent anywhere or used for tracking. That is why it does not display a cookie banner. The websites it links to (Google Maps, Stripe, WhatsApp…) have their own rules: they apply when you open them.

WhatsApp and phone

If you write to me with the WhatsApp button, the conversation takes place in WhatsApp, whose rules apply. If you write to me by e-mail, your message is handled in my mailbox. I only use your number and your address to reply to you.

Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, États-Unis — cloudflare.com. Like any host, it may technically process visitors’ IP addresses to ensure the security and proper operation of the service.

Your rights

You can at any time ask for access to your data, its correction, deletion, restriction or portability, or object to its processing, by writing to dorianmandy262@gmail.com. I reply within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr).