At Brand Elevate, we take your privacy seriously. This policy explains what personal data we collect when you visit our website, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and the French loi Informatique et Libertés.

This website is operated by Marine Lavaupot, trading as Brand Elevate, a micro-entreprise registered in France (SIRET : 820 893 188 00020). Marine Lavaupot is the data controller responsible for your personal data.

1. What data we collect

1.1 Contact form submissions

When you use our contact form, we collect the information you provide directly — typically your name, email address, and the content of your message. This data is used solely to respond to your enquiry and is never used for marketing purposes without your separate consent.

1.2 Analytics data

We use Google Analytics to understand how visitors interact with our website. This service collects information such as:

Pages visited and time spent on each page
Your approximate geographic location (country or region)
The type of device and browser you are using
How you arrived at our website (e.g. via a search engine, social media, or direct link)

This data is anonymised and aggregated. We cannot identify you personally through analytics data. Google Analytics anonymises IP addresses before any data is stored or processed.

1.3 Cookies and tracking technologies

Our website uses cookies — small text files stored on your device. We use the following types:

Essential cookies: required for the website to function correctly. These do not require your consent.
Analytics cookies: placed by Google Analytics to collect the data described above. These are only activated after you give your explicit consent via our cookie banner.

When you first visit our website, you will be asked to accept or decline non-essential cookies. You may withdraw or change your consent at any time by adjusting your browser settings or contacting us at marine@brand-elevate.com.

2. Legal basis for processing

Under GDPR (Article 6), we must have a lawful basis for processing your personal data. The bases we rely on are:

Consent (Art. 6(1)(a)): for analytics cookies, which are only activated after you explicitly accept them.
Contractual necessity (Art. 6(1)(b)): when you contact us with a service enquiry, processing your data is necessary to respond.
Legitimate interest (Art. 6(1)(f)): for understanding how our website is used and improving it, where this does not override your rights and freedoms.

3. How long we keep your data

Contact form enquiries: retained for up to 2 years from the date of last contact, or until the matter is resolved.
Analytics data: retained in Google Analytics for 14 months, in line with Google's recommended settings.
Cookie consent records: retained for 12 months, after which your consent will be requested again.

4. Who we share your data with

We do not sell, rent, or trade your personal data to any third party. We share data only with the following trusted service provider, and only to the extent necessary to operate this website:

Google LLC — Google Analytics: for website analytics processing. Google acts as a data processor on our behalf under a Data Processing Agreement.

No other third parties have access to your personal data unless we are required to disclose it by law or court order.

5. International data transfers

Google Analytics is operated by Google LLC, headquartered in the United States. Transfers of personal data outside the European Economic Area (EEA) are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, in compliance with GDPR Chapter V.

For further information on how Google processes your data, please refer to Google's Privacy Policy at policies.google.com/privacy.

6. Your rights under GDPR

As a data subject under GDPR, you have the following rights:

Right of access (Art. 15): request a copy of the personal data we hold about you.
Right to rectification (Art. 16): ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17): request deletion of your data, subject to certain legal conditions.
Right to restriction of processing (Art. 18): ask us to limit how we process your data in certain circumstances.
Right to object (Art. 21): object to processing carried out on the basis of legitimate interest.
Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
Right to withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact Marine Lavaupot at marine@brand-elevate.com. We will respond within 30 days, in line with GDPR Article 12.

You also have the right to lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), at cnil.fr.

7. Photography and third-party content

Certain photographs used on this website are sourced from Pexels (pexels.com) and are the copyright of their respective photographers. These images are used under the Pexels Licence, which permits free commercial and personal use. They remain the intellectual property of their creators, and Brand Elevate makes no claim of ownership over them.

If you are a photographer and believe your work has been used incorrectly or without appropriate credit, please contact us at marine@brand-elevate.com.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and, where required, inform you directly.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the date at the top of this page. We encourage you to review this page periodically.

10. Contact

For any questions about this Privacy Policy, to exercise your rights, or to raise a concern, please contact:

Marine Lavaupot

Brand Elevate — Micro-entreprise

4 rue de la Mariette, 72000 Le Mans, France

Email : marine@brand-elevate.com

SIRET : 820 893 188 00020 · VAT : FR23820893188

This Privacy Policy was prepared in good faith and is intended to comply with GDPR (EU 2016/679) and French data protection law. It does not constitute legal advice. Brand Elevate recommends seeking independent legal counsel to confirm compliance with all applicable regulations.