Privacy policy

A drawing of a person smiling and holding a box with a nature scene inside, accompanied by a green checkmark.

At Flora PETER (Individual Enterprise), operating from Paris, France, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or interact with our professional advisory and auditing services, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable French data protection laws (Loi Informatique et Libertés).

1. Data Controller Identity

The data controller responsible for the processing of your personal data on this website is:

  • Name / Legal Status: Flora PETER (Individual Enterprise)

  • Registered Office: Paris, France

  • Contact Email: [Insert your professional email address]

2. Personal Data We Collect

We collect only the necessary personal data required to manage professional inquiries, deliver our AI governance services, and ensure secure website operations. This includes:

  • Identification & Contact Data: Full name, professional email address, and company/agency name provided voluntarily via our contact form or direct emails.

  • AI Exposure Check Data: Information you provide when using our AI Exposure Check tool, including details about your current AI tools, workflows, and related compliance context.

  • Newsletter Data: Your email address, provided voluntarily when you subscribe to our newsletter.

  • Professional & Technical Context: Information regarding your current AI tools, workflow compliance challenges, or project scopes shared during consultations or risk assessments.

  • Analytics & Browsing Data: Aggregated and pseudonymized technical data collected via Squarespace Analytics, including traffic volume, traffic sources, search keywords, and general geographic location.

  • Search Performance Data: Google Search Console data related to how our site appears in and performs within Google Search results.

3. Cookies

Our website uses cookies to operate correctly and, with your consent, to understand how visitors use the site. You can manage your preferences at any time via the "Manage Cookies" link in the footer.

  • Necessary — Always on. Required to enable core site functionality and remember your preferences and choices (e.g., language, settings). Cannot be disabled as they are essential to the site working.

  • Performance and Analytics — Off by default, requires consent. Used to measure site traffic, traffic sources, search keywords, and general visitor geography (via Squarespace Analytics), so we can understand and improve site performance.

  • Advertising — Off by default, requires consent. Reserved for cookies used by advertising companies to serve interest-based ads. We do not currently run any advertising campaigns or use advertising cookies; this category is provided by our cookie management tool and will only be activated, with your consent requested in advance, if this changes in the future.

Google Search Console does not place cookies on visitors' browsers; it is a measurement tool we use on the search-engine side to monitor our site's presence in Google Search results.

You can accept all cookies, decline optional cookies, or manage your preferences at any time. Declining optional cookies will not affect your ability to use the core features of the site.

4. Purpose and Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

  • Performance of a Pre-Contractual or Contractual Relationship (Art. 6(1)(b)): Managing professional inquiries via our contact form, processing AI Exposure Check submissions, scheduling clarity calls, scoping AI risk assessments, and delivering agreed-upon advisory or auditing services.

  • Consent (Art. 6(1)(a)): Sending you our newsletter, and activating optional Performance/Analytics or Advertising cookies. You may withdraw this consent at any time (see Sections 3 and 9).

  • Legitimate Interests (Art. 6(1)(f)): Improving our website functionality, securing our digital infrastructure, and responding to business-to-business (B2B) communications.

  • Legal Compliance (Art. 6(1)(c)): Keeping mandatory administrative, accounting, and compliance records required under French law.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Contact Form Inquiries: Kept for a maximum of 1 year from our last contact if no contract is signed.

  • AI Exposure Check Data: Kept for a maximum of 1 year from submission if no contract is signed.

  • Newsletter Data: Kept until you unsubscribe or withdraw your consent.

  • Analytics Data: Retained in aggregated/pseudonymized form according to Squarespace's default retention settings.

  • Client & Contractual Data: Kept for the duration of the commercial relationship, plus legal archival periods (generally 5 to 10 years for accounting and liability purposes under French law).

5. Data Sharing and Processors

Your data is handled with strict confidentiality. We do not sell, rent, or trade your personal data. We share data with the following categories of trusted third-party processors, each bound by contractual data processing agreements (DPAs) ensuring GDPR compliance:

  • Squarespace — website hosting and analytics (traffic, traffic sources, search keywords, geography).

  • Google (Search Console) — search performance monitoring.

  • Kit (ConvertKit) — newsletter subscription management.

6. Your Rights Under the GDPR

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you.

  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.

  • Right to Erasure / "Right to be Forgotten" (Art. 17): Request the deletion of your data under specific conditions.

  • Right to Restriction of Processing (Art. 18): Temporarily restrict how we process your data.

  • Right to Data Portability (Art. 20): Receive your data in a structured, commonly used format.

  • Right to Object (Art. 21): Object to the processing of your data based on legitimate interests.

To exercise any of these rights, please contact us directly at: [Insert your professional email address]. You also have the right to lodge a complaint with a supervisory authority, such as the French Data Protection Authority (CNIL — www.cnil.fr).

7. International Data Transfers

Squarespace, Google, and Kit are US-based service providers, which may involve the transfer of personal data outside the European Economic Area (EEA). Where this occurs, such transfers are safeguarded through appropriate mechanisms, such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) adopted by the European Commission, as implemented by each provider. We recommend consulting each provider's own privacy documentation for the most current details of their transfer mechanisms.

8. Your Rights Under the GDPR

In accordance with the GDPR, you have the following rights regarding your personal data: Right of Access (Art. 15): Request a copy of the personal data we hold about you. Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data. Right to Erasure / "Right to be Forgotten" (Art. 17): Request the deletion of your data under specific conditions. Right to Restriction of Processing (Art. 18): Temporarily restrict how we process your data. Right to Data Portability (Art. 20): Receive your data in a structured, commonly used format. Right to Object (Art. 21): Object to the processing of your data based on legitimate interests. Right to Withdraw Consent: Where processing is based on consent (newsletter, optional cookies), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. To exercise any of these rights, please contact us directly at: flora [at]florapeter [dot] com. You also have the right to lodge a complaint with a supervisory authority, such as the French Data Protection Authority (CNIL — www.cnil.fr).

9. Newsletter Unsubscribe

You may unsubscribe from our newsletter at any time using the unsubscribe link included in every email we send, or by contacting us at flora [at]florapeter [dot] com.

10. Security Measures

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or accidental destruction.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect regulatory updates (such as adjustments related to the EU AI Act or GDPR guidelines) or changes in our professional operations, including any future use of advertising cookies. The latest version will always be available on this page.

138 avenue Victor Hugo – 75016 Paris · France

A simple hand-drawn illustration of a person holding a magnifying glass in one hand, and a piece of paper in the other. There is a partial drawing of a large cardboard box or a panel with various symbols, labels, and a small smiling robot face. The words 'Your Stack' are written near the top of the box. The scene is minimalistic with black lines and some colored elements.