Privacy policy
01In short
This site runs no analytics and sets no advertising or tracking cookies. The contact form transmits nothing on its own: it opens a draft in your own email application, and nothing reaches us until you send it yourself. The only unavoidable processing is by the company that serves the pages, described in section 08.
02Data controller
The controller for any personal data you choose to send is Richard MENDY, trading as Kessaku Studio, 10 rue de Penthièvre, 75008 Paris, France, reachable at richard.m@kessaku-studioteam.com.
03What the contact form does
The "Book a call" form asks for your name, your company, your work email and your message. When you press Send, the site assembles those fields into a draft email in the mail application on your own device, addressed to richard.m@kessaku-studioteam.com.
The site has no server and no database. It does not store, transmit or receive your entries. Until you send that draft yourself, the information never leaves your device, and if you close the draft nothing reaches us at all.
04Purpose and legal basis
Once you send the email, we process the data it contains in order to answer your enquiry, arrange a call, and if it goes further, to prepare a proposal.
The legal basis is our legitimate interest in responding to a business enquiry addressed to us (Article 6(1)(f) GDPR), and, where a contract follows, the performance of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
05Retention
Enquiry emails are kept for three years from the last contact, in line with CNIL guidance on business prospecting records. Where an enquiry becomes a client relationship, the data is kept for the duration of that relationship and for the legal periods that follow.
06Who else sees it
Your email is received in a mailbox operated by Google (Google Workspace), which acts as a processor on our behalf. It is not sold, rented or shared for marketing purposes.
No CRM, automation or prospecting tool receives enquiry data. Nothing is copied out of the mailbox into another system.
07Cookies and browser storage
This site sets no cookies, runs no analytics or advertising scripts, and stores nothing in your browser. There is no consent banner because there is nothing to consent to.
Your choice of English or French is carried by the address of the page you are reading, not by anything saved on your device: the English pages live under kessaku-studio.com and the French pages under kessaku-studio.com/fr/.
Typefaces are served by Bunny Fonts, operated by BunnyWay d.o.o. in Slovenia, so your browser contacts fonts.bunny.net to fetch them. Bunny Fonts is offered as a privacy-first service: it sets no cookies, and states that it logs no personal data and does not track visitors. The data stays within the EU. The Japanese characters in the mark and the section numerals are embedded directly in the page and require no request at all.
08Hosting and server logs
The site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. To deliver a page and to protect the site against attack, Cloudflare necessarily processes your IP address together with technical request metadata such as the time of the request, the page requested and your browser’s user-agent string. This happens for every visitor and cannot be switched off without taking the site offline.
Cloudflare acts as our processor and is bound by its data processing agreement. Because it is established in the United States, serving this site can involve a transfer of that technical data outside the European Union, governed by the transfer safeguards in that agreement.
We do not receive, consult or store those logs, and they are not linked to anything you type into the contact form.
09Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to our processing of it
- receive your data in a portable format
- set instructions for what happens to your data after your death
To exercise any of these, write to richard.m@kessaku-studioteam.com. We reply within one month. We may ask you to confirm your identity if there is genuine doubt about who is asking.
10Complaints
If you believe your data has been handled improperly, you can lodge a complaint with the CNIL, the French supervisory authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
11Changes
This policy may be updated when the site changes. The date at the top of this page always reflects the version in force.