Privacy Policy

1. Data Controller

The data controller for this website is Mobir Mahmoud, operating as a micro-entreprise (entrepreneur individuel) under the trade name Blue Door France.

• SIREN: 952 229 375
• SIRET: 952 229 375 00011
• Registered address: 229 Rue Saint-Honoré, 75001 Paris, France
• Email: contact@bluedoorfrance.com

2. What Data We Collect

We collect personal data only when you voluntarily provide it through our website:

• Contact form: Name, email address, company name, relocation timeline, family composition, lead type, and any details you include in the message field.
• Newsletter signup: Email address only.
• Calendly booking: Name, email address, and any information you provide in booking notes. Calendly is a third-party service with its own privacy policy.

We do not use analytics, tracking pixels, advertising cookies, or any behavioral tracking technology on this website.

3. Why We Collect Your Data (Legal Basis)

Under GDPR Article 6, we process your data based on:

• Consent (Art. 6(1)(a)): When you subscribe to our newsletter, you consent to receive emails. You can withdraw consent at any time by unsubscribing.
• Legitimate interest (Art. 6(1)(f)): When you submit a contact form or book a call, we process your data to respond to your inquiry and provide the services you requested.
• Pre-contractual measures (Art. 6(1)(b)): When we prepare proposals or service agreements at your request.

4. How We Use Your Data

We use the personal data you provide to:

• Respond to your inquiries and provide relocation consulting services
• Prepare and send service proposals
• Send newsletter emails (only if you subscribed)
• Communicate about your relocation process if you become a client

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services that may process your data:

• Vercel (website hosting) — Servers located in the US and EU. Vercel may collect basic server logs (IP address, request timestamps) for security and performance purposes.
• Calendly (appointment scheduling) — Processes booking data under its own privacy policy.

Where data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as appropriate safeguards under GDPR Chapter V.

6. Data Retention

• Contact form submissions: Retained for 24 months from the date of submission, then deleted.
• Newsletter subscribers: Retained until you unsubscribe.
• Client data: Retained for the duration of the service engagement plus 5 years, as required by French commercial law (Code de commerce, Art. L123-22).

7. Your Rights Under GDPR

As a data subject, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request that we limit how we use your data
• Data portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interest
• Withdraw consent — For newsletter subscriptions, at any time

To exercise any of these rights, email us at contact@bluedoorfrance.com. We will respond within 30 days.

8. Cookies

This website uses only strictly necessary cookies required for the website to function (e.g., security tokens, session management). We do not use any analytics, advertising, or tracking cookies.

Strictly necessary cookies do not require consent under the ePrivacy Directive (2002/58/EC) and CNIL guidelines.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS/TLS), secure hosting infrastructure, and access controls limiting data access to authorized personnel only.

10. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. California Residents (CCPA/CPRA)

Although we are a French company and may not meet CCPA applicability thresholds, we respect the privacy rights of California residents. We do not sell personal information. California residents may exercise their rights by contacting us at the email above.

12. Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority:

• CNIL (Commission Nationale de l'Informatique et des Libertés)
• 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
• Website: www.cnil.fr

13. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.