Privacy policy
Last updated: 1 October 2026
This page explains which personal data is processed when you visit this site or write to us, why, and what your rights are.
Data controller
Dylan Vivant, in a personal capacity (the studio not being incorporated yet), reachable at contact@halcya-studio.com.
Data we process
If you use the contact form: your name, your email address, the name of your organisation (optional), your profile (investor, publisher or other), the content of your message, and the date it was sent. Fields marked with an asterisk are needed to reply to you.
If you write directly to contact@halcya-studio.com: your email address and the content of your message.
Technical data: as with any website, visiting this site means your IP address and technical connection data (browser, date and time, page requested) are processed by the server hosting the site (access logs) and by the form provider, in order to deliver the site, keep it secure and fight spam.
We collect no sensitive data and ask for nothing beyond what is listed above.
Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Replying to your message and corresponding with you | Your consent (the box you tick before sending) and, for professional exchanges, our legitimate interest in answering requests addressed to us |
| Keeping the site secure and limiting spam | Legitimate interest |
Your data is used for nothing else: no automated marketing, no newsletter, no profiling, no resale.
Recipients and service providers
Your message goes through the Web3Forms service, which forwards it by email to the contact@halcya-studio.com mailbox. Web3Forms acts as a processor. According to its privacy policy, it stores submissions in a database hosted on Amazon Web Services, relies on several technical providers (hosting, CDN), and passes the sender’s IP address and email address to anti-spam services (CleanTalk and Akismet). The current list is available at web3forms.com/privacy.
The site is hosted by OVH SAS, in France. The publisher administers the server and keeps its access logs.
Only the publisher, and the Halcya Studio team members taking part in the conversation with you, can read your messages. We do not share them with any other third party unless the law requires it.
The contact@halcya-studio.com mailbox is hosted by Hostinger, our email provider (data centre in France), which acts as a processor: your messages are stored on and pass through its servers.
Transfers outside the European Union
The site is hosted in France. The Web3Forms service, used only when the form is submitted, runs infrastructure outside the European Union, notably in the United States and India. These transfers rely on the European Commission’s standard contractual clauses.
Retention
- Your messages and our exchanges: 3 years from our last contact, then deletion. If there is no exchange beyond your first message, we delete them after 12 months.
- Submissions kept by Web3Forms: at most 3 years from the date of sending, according to its policy, then automatic deletion. We can request earlier deletion if you ask.
- Server access logs (IP address, date, page requested): 12 months at most, then deletion.
Cookies and trackers
This site uses no cookies and no audience-measurement tools, and loads no fonts or other resources from third-party servers when pages are displayed. Only submitting the form contacts a third-party service (Web3Forms, see above). The site stores a single flag in your browser’s session storage so that the intro animation is not replayed during the same visit. That flag stays on your device, contains no personal data and disappears when you close the tab.
Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, the right to withdraw your consent at any time (without affecting what was done before), and the right to set instructions for your data after your death.
To exercise them, write to contact@halcya-studio.com. We reply within one month. We may ask you to prove your identity if there is doubt.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. You may also contact the supervisory authority of your own country.
Changes
This policy may change, in particular when the studio is incorporated or if a provider changes. The date of the last update is shown at the top of this page.