Privacy policy
What we do — and don't do — with your data. A plain-language policy that complies with the GDPR and Quebec's Law 25.
At a glance
- We only collect what you send us through the contact form.
- That data is used only to contact you and respond to your request.
- No selling of data, and no advertising cookies set by this site.
- You can request deletion of your data at any time.
Data controller
The controller of your personal data is Soufiane Mabrouki, a sole proprietor trading as Adsflow (SIREN 885 190 264), 17 rue du Javelot, 75013 Paris, France.
Person in charge of the protection of personal information (within the meaning of Quebec's Law 25) and contact for any question about your data: Soufiane Mabrouki, founder — contact@adsflow.com.
Given the size of our business, we have not appointed a Data Protection Officer (DPO): you deal directly with the person named above.
Data we collect
Through the contact form
- your full name;
- your email address;
- your phone number (optional);
- your company name or website (optional);
- the service you're interested in and your indicative budget (optional);
- the content of your message;
- the date and time of your consent, and the language version of the site you used.
Required fields are indicated in the form: without them, we cannot reply to you.
Technical data
Like any website, our hosting provider records technical logs (IP address, browser type, pages visited, date and time) needed for security and to keep the site running. To protect the contact form against abuse, your IP address is also used in a hashed, unreadable form for no more than one hour.
What we don't collect
No account creation, no online payments, no sensitive data. We carry out no profiling and make no automated decisions about you.
Why we use your data
Your data is used solely to:
- contact you and respond to your request (audit, quote, question);
- prepare, if you wish, a proposal tailored to your project;
- handle requests to exercise your rights (access, deletion…);
- keep the website and the form secure.
It is never sold, rented or transferred, and is not used to send you marketing without your consent.
Legal bases
- Your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form. You can withdraw it at any time.
- Pre-contractual steps taken at your request (Art. 6(1)(b)): reviewing your project, the audit, the quote.
- Our legitimate interest (Art. 6(1)(f)) in securing the website and preventing abuse.
- Our legal obligations (Art. 6(1)(c)), including accounting obligations, if you become a client.
How long we keep your data
- Contact requests: 3 years after our last contact, then automatically deleted.
- If you become a client: for the duration of our contract, then archived for the period required by law (for example, 10 years for accounting records).
- Anti-abuse protection (hashed IP): 1 hour.
- Hosting provider logs: a limited period, according to the provider's own rules and legal obligations.
Who can access your data
Your data is intended solely for Soufiane Mabrouki and the members of the Adsflow team who need it to handle your request.
We never sell, rent or trade your data. It may only be disclosed to an authority where required by law.
Service providers
We use a small number of technical providers, who process your data only on our behalf and according to our instructions:
- Website hosting: our hosting provider (see the legal notice) — stores the website and the requests sent through the form;
- Email: our email provider, which delivers and stores the messages we exchange with you.
If you choose to contact us through Calendly or WhatsApp, those services process your data as separate controllers under their own policies (see Cookies and third-party services).
Transfers outside the European Union
We process your data from France. Some providers or third-party services (email, Calendly, WhatsApp, Google) may however process data outside the European Union, particularly in the United States. Such transfers are covered by a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or by standard contractual clauses.
Quebec residents: your personal information is communicated outside Quebec, in particular to France, where we are based. We first make sure it receives adequate protection there, in accordance with the Act respecting the protection of personal information in the private sector.
Security
We apply appropriate technical and organizational measures: encrypted connection (HTTPS), access to requests restricted to site administrators, and protection of the form against bots and abuse.
In the event of a confidentiality incident that poses a risk to your rights, we notify the competent authority (the CNIL or Quebec's Commission d'accès à l'information) and, where necessary, the people affected, within the legal deadlines.
Your rights
Under the GDPR and the French Data Protection Act, you have the following rights at any time:
- access to your data and a copy of it;
- rectification of inaccurate or incomplete data;
- erasure (the "right to be forgotten");
- restriction of processing;
- objection to processing;
- portability of your data;
- withdrawal of your consent at any time, without affecting processing already carried out;
- setting instructions regarding what happens to your data after your death.
Quebec residents: under Law 25, you have in particular the rights of access, rectification, withdrawal of consent, portability and de-indexation.
How to exercise your rights
Email us at contact@adsflow.com or use the form below. We respond within one month at the latest (30 days for requests under Law 25). If we have reasonable doubts, we may ask you to verify your identity.
Delete your data
A dedicated, pre-filled form: we erase all of your data within one month at the latest and confirm it by email.
Complaints
If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or, for Quebec residents, with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
Cookies and third-party services
This website sets no advertising or analytics cookies. That's why no consent banner is shown at this time. Only strictly necessary technical cookies may be used for administrators logged in to the site.
Some features do, however, rely on third-party services, which may receive your IP address or set their own cookies when you use them:
- Google reCAPTCHA (Google) — protects the contact form against bots when enabled: the service analyses technical information (IP address, browser, interactions with the page) and may set a cookie, on the Contact page only. Google's policy
- Calendly — only if you click to book a call. Calendly's policy
- WhatsApp (Meta) — only if you message us on WhatsApp. WhatsApp's policy
- Apple (App Store) — the icons and listings of the iOS apps we've built are loaded from Apple's servers. Apple's policy
We encourage you to read their respective privacy policies.
If analytics or advertising tools (such as Google Analytics or the Meta Pixel) are ever added, they will only run after you consent through a dedicated banner, and this policy will be updated following a new cookie audit.
Changes to this policy
We may update this policy, in particular when we add a new service or when regulations change. The date of the latest update is shown at the top of this page.
This English version is provided for convenience. In case of discrepancy, the French version prevails.
Contact us
For any question about your data: contact@adsflow.com, or by post to Adsflow, Soufiane Mabrouki — 17 rue du Javelot, 75013 Paris, France.