Personal Data Protection Policy

(updated: April 2026)


1. Introduction
Blue Velvet Consulting processes personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
The purpose of this policy is to explain what data is collected, for what purposes, and what your rights are.

2. Data Collected
The personal data collected via the contact form may include:
– First and last name – Email address – Phone number (if provided) – Company name – Message or information submitted in the form
No other data is collected without your explicit consent.
Form Security To protect our forms against automated submissions, we use Google reCAPTCHA v3. This service analyzes certain technical data (IP address, browsing behavior, interactions) to determine if the submission comes from a human user. This processing is based on our legitimate interest in securing our online services. Google’s privacy policy and terms of service apply.

3. Purposes of Processing
The collected data is used exclusively for:
– responding to requests sent via the contact form – following up on exchanges – arranging an appointment or initial contact – establishing a business relationship if necessary
No data is used for unsolicited prospecting.

4. Legal Basis for Processing
Processing is based on:
your consent (contact form) – Blue Velvet Consulting’s legitimate interest in following up on professional exchanges

5. Retention Period
Data is retained for a maximum period of 12 months from the last contact, unless otherwise required by law.

6. Data Recipients
The data is exclusively intended for Blue Velvet Consulting. It is neither sold, rented, nor transmitted to third parties.
Technical service providers may be involved (hosting, maintenance), but they only have access to data strictly within the scope of their mission.

7. Data Security
Blue Velvet Consulting implements technical and organizational measures to protect personal data against:
– unauthorized access – loss – alteration – disclosure
No method offers absolute security, but professional standards are applied.

8. Your Rights
In accordance with the GDPR, you have the following rights:
Right of access: obtain a copy of your data – Right to rectification: correct inaccurate data – Right to object: object to processing – Right to erasure: request deletion of your data – Right to restriction of processing: temporarily restrict processing – Right to data portability: receive your data in a structured format

9. Exercising Your Rights
For any request regarding your personal data, you can write to:
📧 contact@bluevelvetconsulting.fr
A response will be provided within a maximum of 30 days.

10. Cookies
For more information on the cookies used by the site, please consult the dedicated Cookies page.

11. CNIL Contact
If you believe your rights are not being respected, you can file a complaint with the CNIL: https://www.cnil.fr