Privacy Policy.

Who is responsible for your data

The data controller is upcopywriting ([[CLIENT: legal entity name and registered legal form — e.g. SASU, EURL, or micro-entrepreneur]]), registered at 23 Ter Av. des Platanes, 69300 Caluire-et-Cuire, France. For any question about this policy or your data, contact support@upcopywriting.com.

What we collect

Contact details you give us directly — name, work email, phone (optional), company (optional), and the message you send through a contact form. Order and billing details when you buy a package — billing name, billing address, country, EU VAT number (optional), and the items and options you chose. Technical and usage data, only once you’ve given analytics consent — pages viewed, approximate location (country/region), device and browser type, via Google Analytics 4. We never collect or store payment card details: card fields are held in your browser only, for the length of the checkout step, and are never transmitted to or stored by this website.

Why we use it, and on what basis

To process and deliver an order, and to answer a contact request — performance of a contract (Article 6(1)(b) GDPR). To issue invoices and keep accounting records — legal obligation (Article 6(1)(c)). To keep the site secure and prevent spam submissions — legitimate interest (Article 6(1)(f)). To measure how the site is used, only with your consent — consent (Article 6(1)(a)); Google Analytics 4 does not run before you accept it, and you can withdraw consent at any time from "Cookie preferences" in the footer.

How long we keep it

Order and invoicing data: kept for the statutory accounting retention period under French commercial and tax law. Contact-form enquiries that don’t lead to an order: kept for up to 3 years from our last exchange, then deleted. Analytics data: retained in Google Analytics 4 for the period set in our GA4 property, currently 14 months.

Who else sees it

We use a small number of processors, each bound to use your data only for the purpose stated. Hosting provider: [[CLIENT: hosting provider name and address]], which stores the site and any order data submitted through it. Google Ireland Limited, for Google Analytics 4 — only once you’ve given analytics consent. A payment provider, once real payments are enabled on this site — none is active today; this policy will name the provider before that happens. We do not sell personal data, and we do not share it for third-party marketing.

Transfers outside the EU

Google Analytics 4 may transfer data to the United States. Google provides this transfer under the European Commission’s Standard Contractual Clauses. No other processor we use transfers data outside the EU/EEA.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, restrict or object to its use, and withdraw consent at any time (this doesn’t affect processing carried out before the withdrawal). To exercise any of these rights, write to support@upcopywriting.com; we reply within one month. If you believe your rights haven’t been respected, you can lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), the French data-protection authority, at www.cnil.fr.

Security

We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access, appropriate to a small professional-services website.

Children

This site is intended for business use and isn’t directed at children. We don’t knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy as the site or the law changes. The date above shows the last revision; material changes will be reflected here.

Questions about this page: support@upcopywriting.com