Privacy Policy
Your trust is our priority. Find out how we protect and use your data.
- Compliant with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés)
- Last updated: 4 October 2026
This translation is provided for information only. The French version is the only legally binding one. Read the French version
CAPTURIT SASU (hereinafter "CAPTURIT" or "we") attaches great importance to the protection of your personal data. The purpose of this Privacy Policy is to inform you of how we collect, use and protect your personal data when you use our website www.capturit.fr or our services.
This policy complies with Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and with amended Law No. 78-17 of 6 January 1978 ("Loi Informatique et Libertés", the French Data Protection Act).
Article 1 - Data controller
The controller of your personal data is:
CAPTURIT SASU
Registered office: 1 allée de la Chapelle Saint Paul, 66400 Reynès, France
Secondary establishment: 3 passage Alberto Moravia, 31320 Castanet-Tolosan, France
RCS Perpignan 937 732 113
Represented by Mr Samy LAZRAQ, President
DPO / personal data contact: contact@capturit.fr
Article 2 - Personal data collected
We collect the following categories of personal data:
2.1 Identification data
- Surname and first name
- E-mail address
- Telephone number
- Company name (where applicable)
2.2 Project data
- Type of project (photo, video, drone, web)
- Project description and objectives
- Indicative budget and preferred timeframe
- Preferred time slot for a discovery meeting
- Address of the website submitted for audit and results of the analysis
- Source of the visit (advertising campaign parameters), if you have accepted marketing cookies
2.3 Browsing data
- IP address
- Browser type and operating system
- Pages visited and length of visit
- Traffic source (via cookies, with consent)
2.4 Payment data
Online payment on the website is currently unavailable: the website does not collect any bank data. Where a service is paid for online, bank data is collected and processed exclusively by our payment provider Stripe (PCI-DSS Level 1 certified). CAPTURIT never has access to full bank card numbers.
2.5 Data from applications to the creative network
- Location and area covered
- Skills, specialisms, experience, equipment and references
- Links to your portfolio, your website and your social media
- Availability, indicative day rate and motivation
2.6 Data from withdrawal and termination requests
- Contract reference (optional)
- Service concerned and order date, or plan and address of the website concerned
Article 3 - Purposes and legal bases
| Purpose | Description | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Performance of the contract | Order management, delivery of services, invoicing | Art. 6.1.b) |
| Customer relations (CRM) | Follow-up of enquiries, quotes, after-sales service | Art. 6.1.b) |
| Requests sent from the website | Responding to contact, project, meeting and audit report requests; sending the acknowledgement of receipt and the requested report | Art. 6.1.b) Pre-contractual measures taken at your request |
| Withdrawal and termination | Receiving withdrawal notices and termination requests, sending the acknowledgement of receipt | Art. 6.1.c) Legal obligation (Articles L221-21 and L215-1-1 of the Code de la consommation, the French Consumer Code) |
| Newsletter | Sending the Capturit newsletter: inspiration, tips and subscriber-only offers | Art. 6.1.a) Consent |
| Audience measurement | Analysis of traffic and browsing (Google Analytics, Microsoft Clarity), website improvement. When a form is submitted, our server may also send Google Analytics the event type and the form concerned, without your name or contact details, only with your consent to audience measurement | Art. 6.1.a) Consent |
| Advertising campaign measurement | Google Ads conversion measurement and storage of the visit source, only with your marketing consent | Art. 6.1.a) Consent |
| Legal obligations | Invoicing, accounting, archiving | Art. 6.1.c) |
| Recruitment of creatives | Management of applications to the network | Art. 6.1.b) Pre-contractual measures |
3.1 Processing of website forms
The website forms do not store your data in any database. Each submission is sent by e-mail to CAPTURIT's business mailbox, hosted by Google (Gmail, Google Workspace), where it is kept in order to handle your request:
- Project request ("Start a project" page and quote request forms): an acknowledgement of receipt is sent to you by e-mail;
- Meeting request: your preferred time slot is sent to us and then confirmed by us; an acknowledgement of receipt is sent to you by e-mail;
- Application to the creative network: an acknowledgement of receipt is sent to you by e-mail;
- Contact form: your message is sent to us and we reply to you directly;
- Audit report: your contact details and the result of the analysis are sent to us, then the report is sent to you by e-mail via our provider Resend. Each e-mail contains an unsubscribe link;
- Withdrawal and termination ("Withdraw from the contract" and "Terminate your contract" pages): an acknowledgement of receipt is sent to you by e-mail.
3.2 Newsletter
When you subscribe to the Capturit newsletter, your e-mail address is sent to us by e-mail and is used solely to send the newsletter. A welcome e-mail is sent to you. You may unsubscribe at any time by writing to contact@capturit.fr or via the unsubscribe link in the welcome e-mail.
Article 4 - Data recipients
Your personal data may be disclosed to the following recipients:
4.1 Internally
Authorised CAPTURIT staff (management, sales team)
4.2 Processors and technical providers
| Processor | Function | Location | Transfer outside the EU |
|---|---|---|---|
| Cloudflare | Proxy and content delivery network (CDN) for the website and its media: protection, secure routing and technical logging (IP addresses) | European Union / USA | Yes (SCCs) |
| Google (Gmail, Google Workspace) | CAPTURIT's mailbox: receipt of requests sent from the website forms, sending of acknowledgements of receipt and the welcome e-mail, storage of messages | European Union / USA | Yes (SCCs) |
| Google (Tag Manager, Analytics, Ads) | Audience measurement (Google Analytics) after your consent to audience measurement; conversion measurement (Google Ads) after your marketing consent | European Union / USA | Yes (SCCs) |
| Microsoft | Browsing analysis (Microsoft Clarity), after your consent | USA | Yes (applicable contractual safeguards) |
| Resend | Sending the audit report requested on the website | USA | Yes (SCCs) |
| Axonaut | Customer relationship management and invoicing, used by CAPTURIT outside the website | France | No |
| Stripe | Payment of invoices and online payment provided for in the terms and conditions of sale (Articles 4.1 and 4.3); no payment is currently offered on the website | Ireland / USA | Yes (SCCs) |
| GoCardless | Direct debit for subscriptions provided for in the terms and conditions of sale (Article 4.1) | European Union / United Kingdom | United Kingdom (adequacy decision) |
| OVH | Website hosting (virtual private server) | France | No |
SCCs = Standard Contractual Clauses (approved by the European Commission, in accordance with Article 46 of the GDPR).
Article 5 - Retention periods
| Data category | Retention period |
|---|---|
| Customer data (contract performed) | 5 years from the end of the business relationship |
| Prospect data | 3 years from the last contact |
| Newsletter subscribers | Until you unsubscribe |
| Invoicing data | 10 years (legal accounting obligation) |
| Creative application data | 2 years from the application |
| Analytics cookies | 13 months maximum |
| Connection logs | 1 year (legal obligation under the LCEN, French Law on Confidence in the Digital Economy) |
Article 6 - Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights:
| Right | Description |
|---|---|
| Right of access (Art. 15) | Obtain confirmation that your data is being processed and receive a copy of it |
| Right to rectification (Art. 16) | Have inaccurate or incomplete data corrected |
| Right to erasure (Art. 17) | Request the deletion of your data ("right to be forgotten") |
| Right to restriction (Art. 18) | Request the temporary suspension of processing |
| Right to data portability (Art. 20) | Receive your data in a structured, readable format |
| Right to object (Art. 21) | Object to processing, in particular for marketing purposes |
| Withdrawal of consent | Withdraw your consent at any time (without retroactive effect) |
| Post-mortem directives | Decide what happens to your data after your death |
How to exercise your rights
You may exercise your rights at any time by contacting us:
- By e-mail: contact@capturit.fr
- By post: CAPTURIT SASU · 1 allée de la Chapelle Saint Paul, 66400 Reynès, France
We undertake to respond within one (1) month of receiving your request. This period may be extended by two months for complex requests.
Complaint to the CNIL
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL, the French data protection authority):
- CNIL · 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- Website: https://www.cnil.fr
Article 7 - Data security
CAPTURIT implements appropriate technical and organisational measures to ensure the security of your personal data:
- Encrypted communications (HTTPS/TLS protocol)
- Secure hosting (OVH, ISO 27001 certified)
- No form database: requests are only sent by e-mail to CAPTURIT's mailbox
- E-mails sent through CAPTURIT's Google Workspace mailbox, with authorisation limited to sending
- Restricted access to data (principle of least privilege)
- Secure online payments via Stripe (PCI-DSS Level 1); no payment is currently offered on the website
- Regular backups and recovery procedures
For any questions about this policy, you can contact us at contact@capturit.fr.
See also our Legal Notice, our Cookie Policy and our Terms and Conditions of Sale.