Privacy policy

01Data controller

Business

Kuroflow, sole trader Khamis BOUCHKARA

Address

10 rue du Rail, 69120 Vaulx-en-Velin, France

Contact

contact@kuroflow.com

02No cookies, no analytics

The site sets no cookies, technical, analytical or advertising. No statistics tool is installed. The fonts are hosted on our own server and trigger no call to an outside service.

Your IP address is processed only in the host’s technical logs, for security and operational purposes.

03The brief form

The form on the contact page sends nothing to a server. What you type stays in your browser, and the send button simply opens your mail app or WhatsApp with the message already written. You stay in control of sending it, and you can edit or cancel the message before it goes out.

Once the message is sent, the data it carries, that is your agency name, email address, the disciplines concerned and the description of the need, is processed under our legitimate interest in answering a business enquiry and qualifying your project.

If you choose to send through WhatsApp, the message passes through Meta’s servers under that service’s own terms.

04Booking a call

The call booking link opens Cal.com, a third-party service. If you click and book a slot, Cal.com collects your name, your email address and the time you picked, under its own privacy policy. That processing is necessary to arrange the meeting.

As long as you do not click, no data reaches Cal.com.

05How long data is kept

• Business exchanges and briefs received: 3 years at most from the last contact.
• Contracts and accounting records: 10 years, as required by law.
• The host’s technical logs: according to the retention policy of Namecheap, Inc.

06Recipients and processors

Your data is never sold, rented or passed on for advertising. It is processed by Kuroflow and, where relevant, by the following providers:

• Namecheap, Inc. for hosting the site.
• Cal.com for booking calls, only if you use that channel.
• Meta for WhatsApp, only if you choose to send through it.

As these providers are established in the United States, any transfers are governed by standard contractual clauses and the additional safeguards set out in the GDPR.

07Confidentiality of our partners’ projects

Kuroflow works white-label for agencies. Information about their end clients is covered by confidentiality agreements, is never published, is never used for prospecting, and never travels from one file to another.

08Your rights

You have the right to access, correct, erase, object to, restrict and port your data. To exercise it, write to contact@kuroflow.com. You will receive an answer within one month at most.

If the answer does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, 75007 Paris.