Privacy Policy
Who we are
HEKA DESIGN is the data controller for any personal data collected through this website (heka.design).
Company: HEKA DESIGN
Registered office: 3 cours Vincent Scotto, 95820 Bruyères-sur-Oise, France
SIRET: 888 543 428 00013
Contact for data requests: hello@heka.design
What data we collect
| When | What we collect | Collected through |
|---|---|---|
| You submit the contact form | Your name and email address. If you choose to give them, your phone number, company and website. What you tell us about your project: the service you need, whether it is a new or an existing project, what you want us to take on, your budget range, and any details you write in the message field. How you found us. | Webflow |
| You book a call | Your name, your email address, the time slot you choose, your time zone, and anything you add in the notes or as guests. | Cal.com |
| You browse the site | Pages viewed, clicks, page performance and technical errors, measured without cookies. To count visits without cookies, technical data sent by your browser, such as your IP address and browser type. | PostHog |
| You visit any page | Standard technical logs (such as IP address and browser information) needed to serve and secure the site. | Webflow, our host |
[PROOF NEEDED: confirm whether IP addresses are discarded in the PostHog project settings, and state it here if so]
We do not ask for anything else. We set no cookies of our own. The booking tool's cookies are listed in our Cookie Policy.
Why we collect it
We use contact-form data to understand your project and reply to you, and "how you found us" to understand which channels bring us projects. We use booking data to schedule and hold the call you asked for. We use audience measurement to understand how the site is used and improve it. We do not use any of this data for advertising, profiling, or automated decision-making.
Legal basis
We process contact-form and booking data on the basis of your consent, and of the steps taken at your request before any possible engagement (pre-contractual measures), under Article 6 of the GDPR. We process audience-measurement data on the basis of our legitimate interest in understanding and improving our website (Article 6(1)(f) of the GDPR).
[PROOF NEEDED: confirm legitimate interest as the legal basis for cookieless audience measurement]
Who has access
Your data is handled by HEKA DESIGN. It is also processed by our service providers acting on our instructions:
| Provider | What it does for us | Where |
|---|---|---|
| Webflow, Inc. | Hosts this website and stores contact-form submissions | 398 11th Street, 2nd Floor, San Francisco, CA 94103, United States |
| Cal.com, Inc. | Runs the booking tool, stores your booking and sends its confirmation | United States |
| PostHog | Measures the site's audience | Data hosted in the European Union |
[PROOF NEEDED: registered name and address of Cal.com, Inc. and of the PostHog contracting entity]
We do not sell your data, and we do not share it for advertising.
[PROOF NEEDED: confirm whether form submissions are also routed to any other tool (e.g. an email inbox, CRM, Zapier/Make automation). If so, list each processor here.]
International transfers
Because our host (Webflow) and our booking tool (Cal.com) are based in the United States, your contact-form and booking data are processed outside the European Union. These transfers are covered by appropriate safeguards under the GDPR. Audience-measurement data is hosted in the European Union.
[PROOF NEEDED: confirm the transfer mechanism — EU Standard Contractual Clauses and/or Webflow's certification under the EU-US Data Privacy Framework.]
[PROOF NEEDED: confirm Cal.com's transfer mechanism (SCCs and/or EU-US Data Privacy Framework certification)]
How long we keep it
We keep your message and your booking for as long as needed to handle your request and our exchange, and then for a limited period for our records.
[PROOF NEEDED: confirm the exact retention period — e.g. 3 years from the last contact for commercial prospecting.]
[PROOF NEEDED: audience-measurement retention period set in PostHog]
How we protect it
We take reasonable technical and organisational measures to keep your data secure, including hosting on a managed platform and limiting access to the people who need it to reply to you.
Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, correct, delete, or port your data, and to object to or restrict its processing. To exercise any of these rights, write to hello@heka.design.
You also have the right to lodge a complaint with the CNIL, the French data-protection authority (www.cnil.fr).
Cookies
We set no cookies of our own, and we measure the site's audience without cookies. If you open the booking tool, Cal.com places a few strictly necessary cookies. Full details are in our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of the page always reflects the current version.