Data protection policy

Last updated

17 August 2026

Who processes your data

The data controller is MCEM SAS, trading under the name Maeliom, with registered office at 60 rue François 1^er, 75008 Paris, France (SIRET 943 245 936 00019).

For any question about your data, or to exercise your rights: contact@maeliom.com.

Our commitments

Three principles govern this site, and all three can be verified from the source code:

• Collect nothing we do not need. No analytics are installed: we know neither how many people visit this site, nor where they come from, nor what they look at.
• Entrust nothing to a third party without need. The typefaces are hosted on our own domain rather than loaded from an outside service: your IP address is passed to nobody in order to display them.
• Embed no third-party content. No embedded video, no map, no social media button — all components that normally place trackers without your knowledge.

The data we collect

The contact form

When you write to us through the form, we receive what you enter: name, company where applicable, email address, subject and the content of your message. Those fields are the only things sent; nothing is collected in the background.

The anti-bot check

The form is protected by Cloudflare Turnstile, which checks that the submission comes from a person and not a program. It processes technical data (IP address, browser characteristics, interactions with the page) for as long as it takes to reach its verdict. Unlike comparable systems, Turnstile sets no tracking cookie and is not used to profile visitors across sites.

Hosting logs

Like any web server, the one hosting this site records the requests it receives: IP address, date, page requested, browser type. These logs serve the technical operation and security of the service. They are not used commercially, nor combined with other data.

Why, and on what lawful basis

• To answer your enquiry — lawful basis: your consent, given by ticking the box on the form, which you may withdraw at any time.
• To follow up the relationship if a conversation begins — lawful basis: steps taken at your request prior to entering a contract, then performance of the contract.
• To protect the form from automated submissions and to maintain the security of the service — lawful basis: our legitimate interest in not seeing the tool misused.

Your data is not used for unsolicited marketing, for profiling, or for automated decision-making. It is neither sold, rented nor exchanged.

Who else has access

Your data is processed by MCEM SAS. Three suppliers act as processors, each within a limited scope:

• Brevo (a French company) — delivery of form messages to our inbox. Data hosted within the European Union.
• Cloudflare — anti-bot checking of the form.
• Our host — serving the site, and technical logs.

None of these suppliers is permitted to use your data for its own purposes. Beyond them, no data is disclosed to third parties, save where we are under a legal obligation to do so.

Transfers outside the European Union

Message delivery takes place within the European Union. The anti-bot check may involve processing by a company established in the United States; that transfer is governed by the safeguards set out in Chapter V of the General Data Protection Regulation.

How long we keep it

• Enquiries with no follow-up — three years from the last exchange.
• Exchanges that led to an engagement — the duration of the contractual relationship, then the periods required for accounting and tax purposes.
• Hosting logs — six months.
• Anti-bot verification token — for as long as the check takes, a matter of seconds.

Cookies and local storage

This site sets no cookies. No analytics, no advertising, no social media — which is why you are shown no consent banner: there is nothing to consent to.

One technical item is recorded by your browser, in its session storage: a flag noting that the opening animation has already been shown to you, so that it is not repeated on every page. It contains no personal data, never leaves your device, and disappears when the tab is closed. On that basis it falls within the exemptions from consent.

Your rights

The General Data Protection Regulation gives you, over data concerning you, a right of:

• d’access — to know what we hold, and obtain a copy;
• de rectification — to correct inaccurate information;
• d’erasure — to request its deletion;
• de restriction — to freeze its use;
• d’objection — to refuse processing based on our legitimate interest;
• à la portability — to receive it in a reusable format;
• de withdraw your consent at any time, without affecting what was done beforehand.

These rights are exercised by email to contact@maeliom.com. We reply within one month. You may be asked to prove your identity if reasonable doubt remains.

If our answer does not satisfy you, you may refer the matter to the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

Security

The site is served over HTTPS. Messages travel encrypted to our inbox. Access to the data is limited to those who need it in order to reply — in practice, to the founder.

Changes to this policy

Any substantial change — a new tool, a new purpose, a new processor — will be recorded here, with the date at the top of the page updated. We encourage you to check it before sending us any information.