Privacy policy

This Privacy Policy explains how Buy a Restaurant in France ("we," "us," or "our"), operated by Studio Pamoja (Suzanne Kerba), collects, uses, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR) and French data protection law (CNIL).

Data Controller: Studio Pamoja / Suzanne Kerba

Email: privacy@studiopamoja.com

1. Data We Collect

We collect personal data you voluntarily provide, including: your name and email address (via contact forms, newsletter signup, or consultation bookings), payment information (processed securely by Gumroad for digital product purchases), and usage data collected automatically through cookies and analytics tools.

2. How We Use Your Data

We use your data to: respond to inquiries and provide consultations, send newsletters and updates (via Brevo and Beehiiv), process purchases of digital products (via Gumroad), schedule consultations (via Calendly), and improve our website experience through analytics.

3. Legal Basis for Processing

We process your data based on: your consent (newsletter subscriptions, cookie acceptance), contractual necessity (consultation bookings, product purchases), and our legitimate interests (website analytics, fraud prevention).

4. Data Sharing

We do not sell your personal data. We share data only with trusted service providers: Brevo (email marketing), Beehiiv (newsletter), Gumroad (digital sales), Calendly (scheduling), and Framer (website hosting). Each provider processes data under their own privacy policy and in accordance with GDPR.

5. International Data Transfers

Some of our service providers are based in the United States. We ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.

6. Data Retention

We retain your data only as long as necessary: contact form submissions (2 years), newsletter subscriber data (until you unsubscribe), purchase records (as required by French tax law, typically 10 years), and analytics data (26 months).

7. Your Rights Under GDPR

You have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at privacy@studiopamoja.com. We will respond within 30 days.

8. Cookies

We use essential cookies for website functionality and analytics cookies to understand how visitors use our site. You can manage your cookie preferences through the cookie consent banner displayed on your first visit.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact & Complaints

For questions about this policy, contact us at privacy@studiopamoja.com. You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.