Privacy policy

Version of 11 September 2026.

This page says which data we process, why, who receives it and how long we keep it. Cookies and the advertising click identifier have their own page: Cookies.

Who processes your data

Z29K, SAS, 60 rue François Ier, 75008 Paris, RCS Paris 991 809 658. For any question or request: contact@z29k.com or via the contact form.

What we process, and why

Six processing operations, and nothing else.

The order

Your identity, your billing address, your email address, your phone number, the address of the site to audit, the language you want your documents written in, and the comment you attach to the order if you write one. We need them to perform the contract: to survey the site, to deliver the report, to invoice you. The comment is used for the audit you are ordering and nothing else. Payment takes place at Stripe, the sole recipient of your card details: we never see them.

The audit

To produce the report, we go through the pages of your site and keep a working copy of them. These pages are public, but some publish personal data: a team page, signed reviews, a directory. We process them because performing the contract requires it, we use them for nothing else, and we share them with nobody.

Counting visits

We count visits to this site to know which pages are read. The counter runs on our own server, in France: the measurement goes to no third party, and it writes nothing into your browser. We turn it into totals, which also show the number and amount of orders, with nothing that identifies who ordered. This processing rests on our legitimate interest in knowing whether what we write is read. See the Cookies page for details.

Measuring our ads

If you arrive from a Google ad, we pass the click identifier to Google when an order is attributed to that ad. That is the only case. See the Cookies page for details and for how to object.

Your messages

When you write to us, via the contact form or by email, we process your name, your email address, your website URL if you provide it, and your message. We use them only to reply to you. The legal basis is the pre-contractual relationship your message opens: without it, there would be nothing to reply to. The server that handles the form does not retain the content of your message: it only counts how many messages are sent each hour. To have an exchange deleted, write to contact@z29k.com or via the contact form.

The free audit

If you request the free audit, we process the website URL you provide, the pillar you pick and your email address. We first send you a confirmation link: until you open it, the request goes to nobody, and it is automatically deleted if the link is never opened. We then use this data only to examine the page and send you the report. This processing rests on your consent, and you can withdraw it at any time by writing to contact@z29k.com or via the contact form. The terms are on the Free audit terms page.

Who receives it

Three providers, and no others. Stripe handles payment. Scaleway, a French company, hosts the site, the visit counter and our working files, in Europe. Google receives the click identifier, in the single case described above.

We neither sell nor transfer your data, and we share it with nobody else. Stripe and Google belong to American groups: the data they receive may be processed outside the European Union, within the framework set by their own commitments. What Scaleway hosts stays in Europe.

How long we keep it

The pages we went through and the audit artefacts: one year after delivery, then we delete them. We use them to answer your questions about the report, and to compare measurements if you order again.

Invoices and accounting records: ten years. That is not a choice: the French commercial code requires it.

Visit measurements: we keep them without a time limit. They say what was read and how many orders went through, never by whom.

Email exchanges: for as long as we are doing business together, then three years.

Your rights

You may ask for access to your data, its correction, its erasure, the restriction of its processing, its portability, and you may object to processing based on our legitimate interest. Write to contact@z29k.com or via the contact form: we handle the request within one month.

If you are not satisfied with our answer, you may refer the matter to the CNIL, the French supervisory authority: www.cnil.fr.

What this site stores on your device