Last updated: 1st October 2026
This Privacy Policy describes how alicejoly.fr collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR No. 2016/679) and the French Data Protection Act (Loi « Informatique et Libertés ») No. 78-17 of 6th January 1978, as amended.
1. Data Controller
The data controller responsible for the processing of personal data collected on the site alicejoly.fr is:
- Identity / Name: Alice Joly
- E-mail address: info@alicejoly.fr
2. Collected Data, Purposes, and Legal Bases
We only collect personal data that is strictly necessary for the services offered on the website. The processing operations carried out are as follows:
| Purpose of Processing | Data Collected | Tool Used | Legal Basis (GDPR) |
|---|---|---|---|
| Quiz participation & results delivery | First name, e-mail address, quiz responses, assigned profile/result | Website quiz tool / Brevo | Consent (Art. 6.1.a) |
| Online appointment booking | First name, last name, e-mail address, phone number, booked slot, preparatory notes | Calendly | Performance of pre-contractual measures (Art. 6.1.b) |
| E-mail & newsletter dispatch | First name, e-mail address, open and click history | Brevo | Consent (Art. 6.1.a) |
| Audience analysis & visitor statistics | Anonymised IP address, pages visited, session duration, browser type | Google Analytics (via Site Kit) | Consent (Art. 6.1.a) |
| Website security & cyberattack protection | IP address, browser headers, requested URLs, failed login attempts | Wordfence | Legitimate Interest (Art. 6.1.f) |
3. Recipients and Sub-processors
Your personal data is strictly confidential and processed by the data controller. To ensure the smooth operation and security of the website, data may be transmitted to the following sub-processors:
- Web Hosting: OVHcloud (OVH SAS – 2 rue Kellermann, 59100 Roubaix, France). Website data is stored on secure servers located within the European Union.
- E-mail Marketing Relationship Management: Brevo (Sendinblue SAS – 106 boulevard Haussmann, 75008 Paris, France). Data is processed and hosted within the EU.
- Appointment Scheduling: Calendly LLC (United States).
- Audience Analytics: Google Ireland Limited / Google LLC via the Site Kit extension (Google Analytics).
- Website Security: Defiant Inc. (Wordfence, United States). Analyses web traffic and filters out malicious attacks.
Your data is under no circumstances sold, rented, or transferred to third parties for commercial purposes.
4. Data Retention Period
Your personal data is kept for a period strictly necessary for the purposes for which it was collected:
- Data from contact forms and the quiz: Retained for the duration of processing the request or delivering results, then deleted or archived for a maximum period of 3 years from your last contact.
- Appointment-related data (Calendly): Retained for the time necessary to follow up on the appointment, then archived for a maximum of 3 years following the end of the commercial relationship or last contact.
- Newsletter data (Brevo): Retained until you unsubscribe (an unsubscribe link is included at the bottom of every e-mail sent) or deleted after 3 years of inactivity.
- Audience analytics data (Google Analytics): Retained for a maximum period of 14 months.
- Security logs (Wordfence): Retained for 30 to 60 days for security monitoring before automated deletion.
- Cookies: Retained for a maximum period of 13 months in accordance with CNIL recommendations.
5. Data Transfers Outside the European Union
The majority of our service providers (OVHcloud, Brevo) store and process your data within the European Union.
Certain sub-processors (Calendly, Google Analytics, Wordfence / Defiant Inc.) are located in the United States. Data transfers to these providers are safeguarded by:
- Their adherence to the EU-US Data Privacy Framework, guaranteeing a level of protection equivalent to that of the EU.
- The execution of Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Cookie Management and Audience Measurement
The website alicejoly.fr uses cookies to ensure proper website functionality, save your language preferences, and measure audience traffic:
- Strictly Necessary Cookies (No consent required):
- Complianz (cmplz_*): Saves your cookie consent preferences.
- Polylang (pll_language): Remembers your selected language for navigation.
- Audience Measurement Cookies (Consent required):
- Google Analytics (via Site Kit): Allows analysis of traffic and browsing behavior across the site.
Upon your first visit, the Complianz cookie banner allows you to accept or decline the placement of audience measurement cookies. You can modify your choices or withdraw your consent at any time via the “Cookie Management” link at the bottom of the page.
7. Your Data Protection Rights
In accordance with the GDPR and the French Data Protection Act (Loi « Informatique et Libertés »), you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): Obtain confirmation that your data is being processed and receive a copy.
- Right to rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete data.
- Right to erasure / “Right to be forgotten” (Art. 17 GDPR): Obtain the deletion of your personal data.
- Right to restriction of processing (Art. 18 GDPR): Request the temporary freezing of the processing of your data.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR): Object at any time to the processing of your data on grounds relating to your particular situation.
- Withdrawal of consent: Withdraw your consent at any time (e.g. unsubscribing from the newsletter).
Exercising Your Rights
To exercise your rights, please contact the data controller:
- By e-mail: info@alicejoly.fr
A response will be sent to you within a maximum period of one month. Proof of identity may be requested if necessary.
8. Complaints to the CNIL
If you believe after contacting us that your data protection rights have not been respected, you have the right to lodge a complaint with the French supervisory authority:
Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
Phone: +33 (0)1 53 73 22 22
Website: https://www.cnil.fr