Privacy policy

This is a courtesy translation. The French version is the only legally binding text.

Data controller

23.4 Design — 9 rue du Docteur Marc Bombiger, 92150 Suresnes — contact@23-4design.fr. For any question about your data, write to this address.

Data collected

Through the contact form: name, email address, company (optional), telephone (optional), project type (optional), message and, where applicable, an attached brief. No account is created, and no data is bought or enriched from third parties.

With your consent only: audience data (pages viewed, device type, approximate origin), through the analytics described below.

Our host also keeps technical connection logs, necessary for the security and proper operation of the site.

Purposes and legal bases

• Answering your enquiry and discussing your project — legal basis: your consent, collected and time-stamped when the form is submitted. You may withdraw it at any time; withdrawal does not affect exchanges that have already taken place.
• Measuring site audience — legal basis: your consent, collected through the banner.
• Keeping the site secure and operational — legal basis: our legitimate interest in protecting the service.

Retention periods

• Contact enquiries and attached briefs: 24 months from receipt, then permanent deletion.
• Your cookie choice: 6 months, after which you are asked again.
• Audience measurement: 14 months at most.

Recipients and processors

Your data is processed by 23.4 Design. It is neither transferred, nor sold, nor used for advertising.

Our sole technical processor is Google Ireland Limited (Firebase): site hosting, database and file storage. The database and the attached briefs are located in the European Union, in Paris (europe-west9 region).

Transfers outside the European Union

Form data does not leave the European Union. Only audience measurement, if you accept it, involves processing by Google LLC in the United States, governed by the European Commission's standard contractual clauses and by Google's participation in the EU-US Data Privacy Framework. Declining audience measurement has no effect on your browsing.

Cookies and audience measurement

No non-essential tracker is set without your consent: the analytics script is not even loaded until you have accepted. Your choice is kept in your browser's local storage, which does not require consent since it serves only to remember that choice.

If you accept, audience measurement (Firebase Analytics) sets cookies of the _ga family. You may change your mind at any time through "Manage cookies" in the footer: collection stops immediately and those cookies are deleted.

Security

Exchanges are encrypted (HTTPS). Briefs uploaded are stored in a private space, inaccessible without authentication, and can only be viewed by 23.4 Design.

Automated decision-making

No automated decision-making or profiling is carried out on your data.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data, as well as the right to withdraw your consent at any time. To exercise them, write to contact@23-4design.fr: you will receive a reply within one month.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — or at www.cnil.fr.

Last updated: 24 September 2026.