Privacy policy

1. Data controller

The controller of the personal data collected on this website is William – Mac Mathews Consulting, whose full contact details are given in the legal notice.

2. Data collected

This is a static showcase website. The only personal data that may be collected is:

• Technical server logs — IP address, user agent, page visited, timestamp. Kept for security and abuse prevention.
• Contact form data — only if you use it: name, email address, subject, message, as well as the IP address, browser (user agent) and timestamp of the submission, kept to prevent abuse.
• Email contact data — only if you write to us at contact@macmathewsconsulting.com: email address, message content, and any information you choose to send us.

No analytics cookies, no advertising pixels and no third-party trackers are used on this website. No data is shared with third parties for commercial purposes.

3. Purposes & legal bases

• Server logs — website security and intrusion detection. Basis: legitimate interest (GDPR art. 6.1.f)
• Replying to contact requests — handling commercial and technical enquiries. Basis: pre-contractual measures or consent (GDPR art. 6.1.b or 6.1.a)

4. Retention periods

• server_logs : 12 months maximum
• contact_form_log : 24 months maximum
• contact_exchanges : 3 years after the last contact (prospects)
• client_exchanges : statutory retention (invoices: 10 years)

5. Hosting & security

The website and all associated data are hosted on a server managed by OVHcloud SAS, in the Frankfurt am Main, Germany data centre — within the European Union. Hosting involves no transfer outside the EU.

Messages sent through the contact form are stored on this server, then forwarded by email to Mac Mathews Consulting. Email, including messages written directly to the contact address, relies on two processors: the ImprovMX email forwarding service and Apple's iCloud mail. As Apple is a US group, this contact data may be processed outside the European Union; such transfers are governed by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Communications with the website are encrypted with TLS 1.2/1.3 (ECDHE forward secrecy), the server enforces HSTS preload, a CAA policy restricts certificate issuance to Let's Encrypt, and a strict CSP protects against third-party script injection. Backups are encrypted at rest.

6. Your rights

Under the GDPR and the French Data Protection Act, you have the following rights:

• Right of access — obtain confirmation of processing and a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction of processing
• Right to data portability — receive your data in a structured format
• Right to object to processing
• Right to lodge a complaint with the CNIL, the French data protection authority (cnil.fr/fr/plaintes)

To exercise these rights, write to contact@macmathewsconsulting.com. You will receive a reply within one month at most.

7. Cookies

This website uses no cookies — no analytics, personalisation or advertising cookies. No consent banner is required.

8. Policy updates

This policy may be updated to reflect legal, technical or organisational changes. The date of the last update is shown at the top of the page.